Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/becc4fdc-f8aa-3cc2-8fc6-28813bc975fb.roa
File: becc4fdc-f8aa-3cc2-8fc6-28813bc975fb.roa (raw, json)
Hash identifier: cFUfJqtwuHE1F+j6qfrIEDFP2g/e3d9NMzGNPqfu1vQ=
Subject key identifier: D9:A4:DE:A8:00:5A:82:2C:6B:73:7F:20:02:F8:16:68:1F:5B:6F:C8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EDDC36CFB35F8E8D9A1AC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/becc4fdc-f8aa-3cc2-8fc6-28813bc975fb.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.124.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ed:dc:36:cf:b3:5f:8e:8d:9a:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=1579456d-4ec7-4741-b91e-b025e73a72b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:3b:c6:bb:9d:65:9c:03:3c:9b:b1:35:64:
a0:51:95:98:cd:13:2d:2c:4d:8f:a4:65:b6:b3:49:
fa:ad:1a:c5:d3:47:dc:51:90:2e:9d:14:5e:98:32:
b2:10:59:3f:b2:ca:ee:4d:2a:1f:f6:83:f4:84:15:
ce:73:87:f3:84:cd:f1:6c:71:58:b8:46:5a:0a:ba:
a3:f8:08:f7:c0:cf:37:4a:d4:b3:f3:0a:f3:64:2c:
3d:fa:da:43:0e:6c:fd:fa:09:29:ff:37:f1:db:7d:
a9:ba:01:14:24:8b:2e:42:da:76:0d:ca:57:65:37:
18:e0:1e:f5:ec:e3:f5:53:0a:7a:d0:33:84:34:a7:
62:d3:6c:44:7c:dc:12:3a:99:ac:43:5d:72:91:46:
6f:07:1a:0d:6c:98:02:35:e2:0d:5b:a6:29:52:9d:
c5:86:fe:34:3a:c5:de:5a:8d:0f:8f:a2:1c:f4:df:
e0:d9:df:fb:c9:82:70:9a:3f:eb:db:75:6f:78:68:
37:fb:77:9b:8d:e4:ce:88:b8:a9:1e:39:00:6b:d6:
db:b5:ff:92:af:0f:8a:ff:c6:7b:9f:6c:35:33:2d:
e1:c6:28:b3:2f:c6:80:39:1c:af:c9:c8:5d:8e:23:
a6:d4:72:e8:10:07:b7:aa:28:b1:a0:f9:73:5c:e9:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A4:DE:A8:00:5A:82:2C:6B:73:7F:20:02:F8:16:68:1F:5B:6F:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/becc4fdc-f8aa-3cc2-8fc6-28813bc975fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.124.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:35:25:14:92:49:8d:f4:eb:73:49:2b:09:40:38:0e:e0:f8:
7e:12:d8:eb:32:bb:5f:0d:f8:e8:3a:df:d7:ef:82:fa:1b:81:
6c:9c:55:b5:3a:9b:64:dc:a5:41:5d:ea:a3:91:f4:31:eb:29:
5d:cb:cb:b0:a1:92:df:e0:17:52:e3:af:3c:ad:1d:51:ae:9e:
67:2b:cc:be:91:f8:b6:f5:fe:18:27:bf:90:9c:d8:dd:04:33:
2e:b1:9b:0f:d8:68:5a:32:4c:cd:ef:86:a1:1d:c0:1c:38:0a:
3b:b3:00:21:f1:93:d7:9a:e9:fd:82:15:e6:3e:a1:2d:e6:10:
c4:49:78:d9:57:01:ac:73:53:e1:7b:93:4b:4d:74:34:88:95:
ba:9b:5b:c4:f4:a1:84:71:c6:14:07:2c:83:b9:2e:cb:2c:9d:
97:15:59:a8:35:0c:e1:6f:d9:67:f8:1f:69:60:e9:92:3f:62:
e5:bf:75:8d:1c:e8:ee:f0:59:45:1c:03:56:6f:ef:61:72:03:
45:fd:9c:6a:a3:16:73:a2:7a:94:61:11:af:cf:6f:fe:7b:3c:
89:99:d7:29:60:ad:da:0b:3e:b2:3e:7f:1e:62:f4:5c:ef:77:
5c:5f:cf:d7:b9:db:03:0d:2b:d1:03:e0:92:4e:48:4d:2d:4f:
84:e4:b1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:24:09 2025 by rpki-client