Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfd2575d-4735-3867-b003-17cf69ddfd9b.roa
File: bfd2575d-4735-3867-b003-17cf69ddfd9b.roa (raw, json)
Hash identifier: pnTyUlfqKgpqtCqWQUqK66y32N+/B3kFJ6XaBEuzXR8=
Subject key identifier: 28:2B:21:53:57:49:06:AB:FE:BA:81:88:03:EC:AB:A1:DF:F7:84:E6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A08E5CD0E80339E356F8F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfd2575d-4735-3867-b003-17cf69ddfd9b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.68.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:08:e5:cd:0e:80:33:9e:35:6f:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3a10305c-9616-4893-ac92-4ba7f26b4435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:e9:3f:4b:01:c2:1d:cd:ab:28:40:e5:11:
01:72:86:42:d0:9d:ca:6e:ec:98:36:9d:71:cd:3c:
cf:39:e8:6e:35:b6:68:03:f9:f0:9a:52:32:85:35:
23:33:af:26:3c:59:17:65:dd:d7:6c:48:9a:32:3d:
76:d1:32:f0:ad:e3:ab:7b:4c:4e:d7:d4:b8:96:70:
38:38:92:00:7a:93:13:99:62:1e:65:33:d1:63:34:
68:39:76:f4:77:cc:8e:18:59:20:e4:8b:9a:ca:aa:
85:1a:cd:79:b2:b6:85:80:38:fd:fa:5e:6e:77:4b:
9f:ae:6f:12:be:de:06:9e:ab:b5:2c:ee:f1:8f:3e:
9a:42:ea:d5:68:23:50:2b:f1:e4:4b:21:b3:d8:20:
ee:96:9b:70:5f:38:53:2d:00:8a:a1:72:5a:07:3d:
a0:88:4a:5b:f5:66:f1:cf:f3:41:0c:56:76:ce:50:
13:9a:1e:b4:2f:a5:9a:fe:a7:1d:5f:70:2f:93:b8:
74:81:6e:b6:cc:a4:d0:0a:e0:9d:21:02:f4:b6:ee:
bd:88:eb:e4:e3:25:5b:b2:a2:19:b4:e1:38:ee:71:
e4:e9:28:94:3c:2c:91:37:45:0c:99:63:0b:a8:c7:
c3:4e:57:5a:be:a6:45:35:3d:34:18:7d:d5:50:c9:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2B:21:53:57:49:06:AB:FE:BA:81:88:03:EC:AB:A1:DF:F7:84:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfd2575d-4735-3867-b003-17cf69ddfd9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:b1:3b:8b:9e:e7:bf:3c:0c:13:59:c0:3f:d3:12:8e:af:37:
41:e6:1c:12:9c:5d:fd:d5:26:b3:d4:f5:ba:92:bd:a9:9e:45:
c0:8c:92:79:33:44:c4:9f:e4:48:b5:c1:19:f8:8f:d9:87:a1:
6b:81:3f:5a:48:24:53:26:b1:d5:1a:48:cf:94:70:1f:c6:db:
d9:72:f1:4d:38:bb:2b:22:12:5d:82:79:dc:71:34:2f:ba:b3:
e6:98:5e:53:94:af:db:86:d8:83:52:7f:a0:fa:a2:90:2a:eb:
36:a8:5b:d0:16:fb:da:51:26:66:99:36:bc:29:81:8e:a4:51:
d9:a6:c6:b9:6e:90:c9:9b:16:00:21:78:72:4c:1b:bf:7f:94:
47:40:14:91:f0:ec:0c:a2:4d:c9:c2:f2:25:c5:d5:a3:fb:68:
e1:cc:14:c7:d6:db:b4:4d:6b:d9:7b:76:fb:b4:b1:ab:2f:00:
41:eb:d8:63:f0:a8:50:e2:fa:40:6f:ab:d8:ba:54:10:c5:a1:
40:37:06:6e:6c:f6:b4:97:e9:a3:9a:7c:bd:c7:15:d4:9a:a6:
33:c8:37:b8:65:1d:6b:24:80:dd:96:6c:d5:68:bd:c3:84:29:
db:84:ab:5a:7c:cf:b1:16:e1:9a:12:e2:92:24:98:13:33:78:
04:40:54:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:42:05 2025 by rpki-client