Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf814cf9-c9c5-368a-b013-2adc39ab9e26.roa
File: bf814cf9-c9c5-368a-b013-2adc39ab9e26.roa (raw, json)
Hash identifier: fBrnWq0rxY1u+aazwRpwbNXq7Zh7KiZ5yd92C2+0hJk=
Subject key identifier: 85:A0:CB:C5:29:C0:73:21:AC:0D:3C:EE:50:69:13:15:EE:C1:3C:3C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A7471FEF4B58C29AE7A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf814cf9-c9c5-368a-b013-2adc39ab9e26.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.103.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:74:71:fe:f4:b5:8c:29:ae:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=fc7b5379-140f-4569-814e-ec32e9164c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8e:98:5c:bc:77:b4:81:12:1a:0d:25:30:cd:
de:10:91:53:7d:81:2c:94:66:df:30:b6:97:74:64:
0f:b3:f4:ec:99:8a:5e:94:f2:5e:16:93:71:78:98:
22:82:53:49:7e:57:f3:0d:ce:75:de:37:08:bd:0e:
2a:7f:c8:53:ee:e6:cd:85:01:af:63:6b:99:0a:36:
d5:72:10:b1:d2:09:31:6e:61:c8:6f:18:c3:17:63:
a1:4c:d7:b5:e4:16:70:5e:02:4b:1d:72:93:fb:3c:
e9:51:7d:7a:57:02:64:0a:27:5a:59:97:77:f3:cd:
3e:ea:9c:8d:20:bf:2c:51:72:fa:89:4e:98:ab:54:
a0:8c:d5:db:87:90:2a:88:7e:eb:1f:1d:6e:d8:a5:
7c:00:1a:d4:dc:12:96:7f:d3:a0:90:c7:23:e5:14:
7b:9f:8d:3b:35:b2:b5:cd:e3:1c:f7:b2:bf:7d:89:
d2:c9:df:96:c0:6d:0e:2c:77:d4:58:aa:5d:6d:78:
0c:73:2d:12:1d:e6:78:d4:4c:84:77:7e:fc:7a:20:
93:b5:a6:ee:33:90:85:e1:a3:66:ad:72:ba:e6:bf:
4f:56:64:23:c9:ea:cb:30:90:62:56:d3:5c:8a:f7:
ca:47:e8:17:eb:e0:95:6f:df:c8:49:77:35:5a:a5:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A0:CB:C5:29:C0:73:21:AC:0D:3C:EE:50:69:13:15:EE:C1:3C:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf814cf9-c9c5-368a-b013-2adc39ab9e26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.103.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:6a:2c:9d:2d:db:1a:31:5e:eb:8d:6c:96:ce:aa:a7:d6:6f:
24:65:63:d9:ea:43:9d:5f:b3:5f:04:33:cb:6a:38:b7:e8:72:
9f:73:08:0e:2f:6b:b4:38:db:39:98:46:0f:04:54:6e:7a:39:
16:65:a8:c8:c0:87:dc:c8:a6:85:db:a9:a5:27:32:f7:27:66:
cd:39:63:76:32:81:82:ea:49:97:55:d1:81:b3:d3:18:03:ec:
04:ee:e5:81:b8:2c:5b:9f:1c:e1:97:41:ec:c4:58:9d:5f:71:
f2:40:d3:d2:3b:5d:1b:20:c4:5d:91:a3:ed:d5:05:d9:1e:2d:
02:81:71:e4:0b:ac:aa:5f:ee:b2:b0:3b:18:9e:e6:7b:a4:23:
c2:ce:6a:1a:8e:74:6e:c9:7d:cf:da:5b:f5:ca:40:06:b5:47:
0d:e4:c2:be:df:47:22:f8:32:80:67:2b:a4:3b:d7:6f:af:c9:
e0:24:d2:97:d8:6e:d0:52:41:0a:bf:58:74:4c:7b:be:93:bd:
0a:2e:50:75:be:fe:69:b4:21:70:5b:48:52:7d:1c:9e:00:e7:
78:3e:71:9b:2b:b7:54:6e:d5:7e:f5:16:2b:45:46:d3:aa:0e:
73:73:7e:3c:9f:b7:b2:01:3f:ae:e6:d1:19:11:b4:58:b2:41:
b8:7e:e3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:13:18 2025 by rpki-client