Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c38ff788-0ad2-33e9-96d4-8277d2dda680.roa
File: c38ff788-0ad2-33e9-96d4-8277d2dda680.roa (raw, json)
Hash identifier: wTe1n8KhfuXmTNk7ljgEHorkhOlpml7nkv1XgX++MMo=
Subject key identifier: D9:E3:FA:F2:15:34:83:50:5B:20:A2:C2:2B:56:14:93:7B:29:40:9C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A111A0A501780787DFF6A66
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c38ff788-0ad2-33e9-96d4-8277d2dda680.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.69.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:11:1a:0a:50:17:80:78:7d:ff:6a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ddcc280f-2538-4857-893f-52ec2a23a0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:ba:b2:c5:bd:05:a2:fd:c6:64:8c:c8:a2:
e0:36:10:11:77:54:2f:94:db:b2:bd:8c:d9:bd:65:
14:09:52:a6:80:2e:e1:77:d8:05:bf:df:8c:07:59:
30:f1:ef:e6:ff:71:6c:6a:b0:82:db:ea:b4:7f:90:
a2:a3:66:60:38:72:88:b2:64:91:40:79:15:1f:59:
4e:ee:05:9c:31:24:57:ae:a1:e4:13:b3:aa:2b:68:
27:5e:d0:83:fd:80:15:fe:80:58:2b:bd:91:3f:af:
24:d5:82:6a:05:6a:6a:e5:2b:15:c3:57:19:3a:2a:
24:bb:15:59:d7:9f:dd:79:d4:4b:24:54:2f:e4:72:
61:d8:48:81:c1:d4:f3:ff:d6:d2:b9:57:c0:d1:18:
3e:80:6f:9d:7c:da:c7:07:6d:a3:0e:74:2a:a0:9f:
22:ca:e7:7a:73:4b:ff:8e:22:81:a2:e7:68:99:97:
94:55:1e:33:c0:0a:03:5e:2a:57:91:18:83:2a:57:
83:6f:90:dc:29:12:a9:75:fb:9b:35:d1:89:27:60:
f4:00:e0:8a:55:1e:33:e7:d6:5c:51:06:f6:43:94:
4c:5c:49:e4:de:82:a7:c5:5d:a6:9b:47:73:f4:89:
8f:4c:5f:f9:66:eb:74:58:93:36:46:59:8f:19:ba:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E3:FA:F2:15:34:83:50:5B:20:A2:C2:2B:56:14:93:7B:29:40:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c38ff788-0ad2-33e9-96d4-8277d2dda680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.69.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:7a:d3:94:9b:d3:6f:a6:23:1a:7a:8b:5c:40:d3:93:9c:40:
4a:5d:45:42:26:d6:d6:1c:45:1a:86:cf:ec:44:ee:56:87:63:
18:d2:29:a2:b7:d1:9e:e5:84:c3:36:2e:f0:f3:ca:77:a8:cb:
b0:90:e2:6b:ae:33:0f:4f:02:74:50:b9:1d:3e:13:7c:80:47:
f7:da:56:c4:3e:1a:99:42:3d:70:50:53:c0:ee:eb:b4:e9:90:
70:2f:0c:d3:a2:47:73:58:42:86:1d:9f:cf:8d:69:dd:eb:0f:
1a:c8:96:24:af:68:23:96:c7:d4:ac:81:1f:72:2d:19:ac:63:
3d:cb:59:fc:f6:c1:55:77:52:7f:83:19:0a:e6:a3:30:9d:fc:
e3:04:45:dd:24:5b:52:3e:7a:8f:b5:00:3b:ea:49:f1:84:2b:
d2:10:51:a1:ef:f1:e9:87:97:52:8c:d4:31:57:b7:e7:58:55:
7c:9c:84:ca:52:85:bf:3c:a1:b4:e7:50:11:bc:bd:db:30:0e:
d0:c3:a5:ff:db:33:00:fe:e2:b0:7e:d3:93:bc:73:c4:4d:f4:
b1:09:8b:8d:3b:a7:96:b1:80:08:d5:b8:b0:20:10:fd:60:a7:
70:34:52:59:ec:14:b7:c9:c3:2e:e2:60:66:6c:5c:9f:6f:e8:
c5:c4:d8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:49:09 2025 by rpki-client