Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0338b15-8ed0-3352-a33c-c8c6726e62d8.roa
File: c0338b15-8ed0-3352-a33c-c8c6726e62d8.roa (raw, json)
Hash identifier: Av3AgxflG7SfDuvXBYqfHPDPOhBsVgd3i2lRc+L9jrc=
Subject key identifier: 34:5F:5A:76:79:29:B0:99:F8:EA:6B:34:15:8D:B4:7F:9E:8A:6B:9F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A09ABC0AC923B20BB121640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0338b15-8ed0-3352-a33c-c8c6726e62d8.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.119.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:09:ab:c0:ac:92:3b:20:bb:12:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7cd58813-be41-45c7-a36d-cfaeafc5b993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:ca:0e:62:c6:f5:be:8d:7f:a4:8d:40:14:
44:1a:9f:ec:b0:c8:a6:ca:b2:c1:e3:ef:0b:97:52:
16:d7:12:5a:02:73:31:9c:64:e6:34:27:e4:03:1b:
cf:6a:10:6e:b2:1a:ab:71:84:5e:aa:a0:db:1b:14:
f7:1e:43:b2:39:ab:f3:ec:29:f4:9e:6f:6c:b8:e9:
1d:f5:0b:57:b6:66:74:0b:82:46:ac:c5:72:ef:33:
ec:1e:ef:0a:aa:09:c8:97:1a:26:0c:22:f4:bd:d5:
c8:e1:94:01:56:f7:af:d7:24:34:19:b0:c3:cf:67:
5c:3a:9e:e5:14:0f:76:15:32:e4:0e:ea:a8:d5:eb:
92:e5:de:b5:2f:d9:be:36:0f:ce:c8:3f:4b:99:d5:
6f:f0:30:f4:72:8a:c7:1c:38:82:2d:61:c6:70:2c:
a6:07:3e:d9:5c:25:34:a1:aa:96:f5:e1:d4:f0:86:
cd:92:7e:8c:7e:d7:92:bf:72:b5:fb:01:80:06:09:
35:e0:86:cf:6f:ea:9b:e4:31:86:1c:55:04:19:35:
91:3b:af:b8:61:f5:16:83:24:8a:7d:bf:ee:28:ef:
54:3b:a7:10:ae:ea:62:ea:3c:a6:01:7e:94:51:ea:
28:17:03:ca:10:eb:10:3a:cc:2b:8c:01:3b:61:a5:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5F:5A:76:79:29:B0:99:F8:EA:6B:34:15:8D:B4:7F:9E:8A:6B:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0338b15-8ed0-3352-a33c-c8c6726e62d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.119.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:90:ca:10:b6:65:93:25:43:14:8b:c0:06:3e:81:3c:d6:4e:
25:9f:6e:1a:59:1b:f0:10:16:c0:c0:e0:9e:f5:92:7b:3c:8c:
72:1a:cc:28:fa:ef:bf:6d:cd:eb:7b:40:b3:c0:d7:37:2f:78:
3c:65:fc:2f:0a:65:16:0f:79:71:3f:4f:31:75:27:80:00:0a:
14:85:55:3f:ba:e1:cf:cb:fb:c0:27:da:58:e8:be:52:4e:32:
50:09:9b:0b:27:31:12:79:74:d7:88:5d:f7:d7:06:90:f9:fc:
f8:e9:7c:6f:68:80:20:6f:31:94:cb:84:ad:20:42:b3:ef:44:
90:af:8c:0a:c5:07:d5:14:58:f1:5c:12:8b:d5:0c:cb:7d:4b:
20:c9:5d:71:47:34:29:1e:1e:f2:6c:0e:a3:06:ab:a0:46:2d:
f0:62:eb:df:18:ac:b5:91:a7:ee:88:98:89:84:20:61:33:a9:
2d:3c:58:00:09:16:98:7c:48:cb:99:65:fb:fa:4d:27:c3:83:
84:7b:b6:0b:44:9b:1e:6f:15:e1:12:50:90:f5:26:6c:a2:38:
33:7f:bf:48:80:1c:34:a3:57:c4:02:2b:47:82:3b:95:cc:30:
2c:2b:f5:ba:b3:87:3a:b8:d1:fb:ee:1e:60:2a:a0:03:3b:6c:
cb:bc:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:08:43 2025 by rpki-client