Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1f1ec54-37a5-3264-a706-4be2b34a315e.roa
File: c1f1ec54-37a5-3264-a706-4be2b34a315e.roa (raw, json)
Hash identifier: f8rd+zfgfmYM5i8a7Q2VcbvUUKR6pu1n5QIBXMMrbPs=
Subject key identifier: C1:2E:C4:F2:12:07:5B:36:D6:4E:B7:24:79:89:D0:E3:B8:5D:69:DF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0A78ED6905DA4D5D025E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1f1ec54-37a5-3264-a706-4be2b34a315e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.118.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0a:78:ed:69:05:da:4d:5d:02:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d1c17957-360c-4613-9864-e9445b4f22ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:6a:39:3c:7b:56:b2:6f:29:f3:40:ca:1e:
5c:2f:fe:09:97:62:89:31:5d:27:13:af:e8:b6:16:
bd:ab:33:1b:80:5f:39:a2:39:b4:44:da:72:7d:3f:
79:ff:7f:b9:d3:8f:5a:88:d7:07:52:b0:2b:98:d2:
d7:b4:1a:93:8f:7c:e6:3c:11:bb:6d:c4:eb:2a:39:
5d:4c:2d:fa:06:4a:7c:70:20:1d:42:47:86:9f:72:
84:f3:3a:96:23:9d:04:06:fe:6d:d2:da:4b:c6:f5:
ec:c0:0f:dc:10:21:16:ef:d1:1a:55:af:69:04:14:
3f:07:88:df:b2:80:15:41:97:06:42:f5:ae:07:b1:
eb:43:ad:7a:bf:00:40:83:23:70:78:38:e8:f4:ad:
8f:84:8c:73:17:51:00:83:3e:4e:7a:66:68:07:e1:
df:69:04:6f:ea:06:29:2d:d0:3c:31:21:09:a4:46:
19:0f:68:26:d0:ba:d3:91:ba:4f:d5:e7:c4:da:34:
0a:7c:6d:47:6c:77:89:ba:e9:4d:35:da:fc:e2:4f:
5c:40:5c:63:13:78:30:ca:42:05:fd:e3:76:4f:1a:
05:ee:f2:ad:97:5e:69:e0:dc:7f:86:61:3e:60:29:
43:fa:8f:a7:ee:7a:34:c8:0b:1b:7d:11:5a:56:9e:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2E:C4:F2:12:07:5B:36:D6:4E:B7:24:79:89:D0:E3:B8:5D:69:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1f1ec54-37a5-3264-a706-4be2b34a315e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.118.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:9a:40:83:50:b3:4f:cc:df:54:4d:80:bd:2f:ce:b2:00:9b:
51:ee:35:19:ef:56:b4:69:52:de:da:41:ca:62:0c:b0:d0:1f:
15:38:80:9f:f3:83:d2:6f:d5:8f:35:29:b8:41:36:2b:da:72:
e9:5b:33:ef:3b:9b:6a:1c:3c:3c:e3:4f:58:d3:c2:55:9a:83:
9b:0a:c6:1d:29:85:cd:5a:15:d6:2d:56:53:df:42:b5:51:f7:
de:e4:36:40:da:4b:52:ab:5c:df:8a:88:62:66:21:cb:23:0f:
04:bd:40:00:3e:66:b4:02:f5:68:bf:8b:15:a2:d0:b0:f4:21:
02:39:a0:d4:87:a2:9c:f6:92:04:d1:e9:8a:09:e5:9c:82:b4:
6c:8d:e5:a8:1d:dd:ad:b0:e4:a0:15:ef:fe:05:2b:51:be:1b:
69:0c:05:a3:4f:db:60:93:f0:97:ba:74:bd:f5:92:84:97:9a:
06:7c:4a:a4:3c:b6:1d:35:2c:cf:08:54:9e:ec:05:97:cb:bb:
8f:41:79:f0:83:c3:92:2a:25:84:d0:ed:8a:79:53:70:54:a9:
74:cd:2f:ab:1f:b2:f3:1c:a5:5f:4b:92:34:d0:c1:7c:23:7f:
b3:b6:2a:ce:82:12:c4:da:1b:0a:e8:98:a1:d4:0a:c7:25:7f:
94:9b:43:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:49 2025 by rpki-client