Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5f3ac74-f110-3c93-abb6-173b435085e9.roa
File: c5f3ac74-f110-3c93-abb6-173b435085e9.roa (raw, json)
Hash identifier: 6/i53Q45zZv+FsNqM5Kf/2IgD62SURKKoI3e/zQVFdk=
Subject key identifier: 9A:37:53:DB:23:89:47:AE:6D:77:C4:EF:C2:C5:1D:98:C3:44:57:10
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FE0F96048FDD609C309C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5f3ac74-f110-3c93-abb6-173b435085e9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.76.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fe:0f:96:04:8f:dd:60:9c:30:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e0da7164-1968-4239-bf9d-003bd955b0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:2a:86:61:7b:89:88:02:9c:fb:eb:9c:af:
b4:8e:ff:1f:cb:92:8b:da:11:85:ff:b5:53:bf:17:
e4:9c:8c:02:02:a7:80:25:6f:62:7b:1b:c1:ca:96:
87:80:34:4e:c3:ef:c3:34:bd:1c:0f:05:b2:0c:f8:
ba:87:0e:4d:ee:bf:9c:c2:33:93:98:ba:ed:89:bd:
f7:a8:94:45:6b:e3:31:25:b1:9f:7e:24:7c:e8:7f:
f4:ee:ea:ad:0f:80:35:40:cb:fb:6a:6c:a0:78:93:
52:83:34:96:22:05:ce:79:95:3f:72:08:d3:83:35:
86:7f:d0:c1:b1:94:86:d9:eb:a6:d2:1d:01:93:2f:
ce:02:2d:63:28:79:ce:63:51:66:67:4a:22:b3:75:
55:52:e7:2b:b4:bf:42:cf:03:bf:ea:15:42:ad:41:
e5:06:c2:3f:35:6b:22:eb:7d:14:4f:20:d3:86:5a:
d9:08:9d:3e:ef:95:c8:ef:f4:fc:0a:22:e7:05:b4:
d9:e5:5b:1c:57:37:13:3a:ce:7b:8b:03:3e:82:08:
8c:2d:14:3a:94:36:89:0f:a5:de:ae:b4:fd:a3:df:
15:1d:97:f0:1e:75:9f:04:cf:dc:3d:07:ae:5d:72:
93:33:f4:8c:ce:ba:f8:e3:92:48:79:36:fb:c9:7d:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:37:53:DB:23:89:47:AE:6D:77:C4:EF:C2:C5:1D:98:C3:44:57:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5f3ac74-f110-3c93-abb6-173b435085e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.76.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:78:41:77:b9:28:6c:1b:88:c7:b2:f3:63:a8:29:11:cd:02:
00:cc:2d:75:b7:ae:15:fb:3c:ba:9d:5f:92:e3:5f:65:e9:b6:
7d:8b:33:9c:95:1c:c0:0e:b0:6c:1c:1f:da:91:77:30:29:0b:
d0:90:dc:8d:86:92:7b:be:a9:1d:5e:a0:3f:14:45:25:32:47:
8a:f2:49:28:3d:08:f2:a3:13:e0:0d:24:3d:65:0a:62:1c:1f:
9c:06:97:f4:9a:e0:b7:e4:b3:32:fb:59:25:dc:16:9f:d8:c9:
23:cb:70:eb:78:3a:7b:bf:c4:5c:c1:60:78:7c:ca:9e:17:d2:
63:13:fa:2b:c1:74:55:b4:a0:a8:b3:ad:74:3f:12:9c:7a:f0:
a3:d0:3c:15:7b:99:95:cd:e3:53:df:5d:fc:44:5b:fe:d0:6d:
36:c7:67:79:f6:a9:a7:ea:79:f4:e5:47:f6:a2:7b:c3:13:cf:
54:74:0b:05:1d:b8:8b:ac:b9:d9:b2:a0:5d:b9:9d:97:ac:44:
0b:bd:e1:3b:f1:5c:ed:9e:1f:39:5f:7a:8e:1d:f0:4c:40:66:
40:72:52:7a:9b:68:9c:c1:1c:02:b1:19:9a:9c:4d:80:be:9b:
6b:ba:be:46:70:7f:39:51:9d:0b:b9:13:9b:d4:c1:f3:27:3b:
54:09:3d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:54:12 2025 by rpki-client