Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c80bf5de-4ec8-36d2-881b-2ad4681f2f9c.roa
File: c80bf5de-4ec8-36d2-881b-2ad4681f2f9c.roa (raw, json)
Hash identifier: +iR+jPLiw1m5ukwr/oOmmJ8W49entE5N3S8yjoQzLYM=
Subject key identifier: F7:4C:3F:0A:49:80:73:D8:AA:5A:7A:EB:9D:A4:45:32:B9:55:D7:81
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0ADCC8B0AA11486D4AF380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c80bf5de-4ec8-36d2-881b-2ad4681f2f9c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.118.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0a:dc:c8:b0:aa:11:48:6d:4a:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=031f1983-72f2-4800-9f76-37c15c5d72b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:7e:18:61:69:0d:7a:4f:e7:b6:96:62:77:
82:d8:82:4f:c6:38:9c:10:6f:b8:a0:f9:f4:06:04:
d9:cb:df:af:77:d9:79:bd:61:2a:ad:1e:dd:c8:8c:
cc:e5:34:3a:66:48:9d:df:17:85:14:8d:c3:14:9e:
8a:d6:32:7c:23:e0:6e:4c:a6:84:cb:56:2d:e2:df:
74:9e:2b:28:1a:7d:45:88:51:64:a8:f9:30:68:5a:
d7:7c:cc:89:89:8e:d2:f7:3a:ce:8a:10:16:ba:9e:
32:a0:30:6a:ae:53:c8:e1:d0:86:c0:6e:65:0b:6b:
c0:7e:73:17:76:1b:4d:ef:35:1e:2a:a5:c2:19:16:
77:08:5b:c0:c5:91:13:65:f2:99:38:90:cf:17:62:
22:6d:2d:8b:66:e4:60:92:ee:95:0f:5d:c4:f1:41:
cf:ce:2c:40:a9:c6:19:12:ca:b4:98:cc:6c:34:9a:
11:29:49:da:cf:38:46:cc:7f:c5:33:57:be:b1:94:
a6:92:06:0e:ea:09:8b:a0:88:45:23:d9:ef:23:b9:
95:4b:60:64:8a:f3:ff:5f:45:57:95:de:b7:dd:b8:
95:4d:da:f4:65:ba:c7:e8:cf:04:d0:40:db:c8:f1:
c3:45:ee:33:6d:05:6c:50:c9:bd:2a:7f:85:27:59:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4C:3F:0A:49:80:73:D8:AA:5A:7A:EB:9D:A4:45:32:B9:55:D7:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c80bf5de-4ec8-36d2-881b-2ad4681f2f9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.118.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:4a:55:a5:f3:5a:ab:79:89:d8:55:86:54:6d:51:70:87:f9:
a5:47:16:b9:a2:c5:ef:90:b6:89:c8:d9:a5:84:f1:d9:5b:e2:
dc:59:ea:d8:33:71:97:79:bc:17:e5:bf:36:fe:01:e6:a1:2b:
0c:a1:99:f7:36:a8:23:30:46:1a:3c:43:12:ca:59:77:b9:e0:
45:8c:f6:0d:cd:6a:a0:44:09:0a:79:00:bd:bf:09:ba:30:ee:
a1:d9:57:c3:b6:5c:7d:5f:fd:ba:34:97:98:f4:e6:ce:59:81:
c1:32:57:57:0a:5d:e3:3e:b3:89:cd:59:ef:15:92:3e:f7:cc:
cc:ce:05:e7:40:d6:4b:d7:8c:2e:70:52:97:ef:da:5a:f6:ef:
22:1b:30:3c:3e:64:6f:b5:ab:7a:df:37:12:5d:32:7d:e3:a1:
61:56:2e:3f:fa:be:94:1a:60:c1:ec:8a:4d:25:a8:56:a2:ff:
15:cf:7c:71:17:4d:38:89:35:b5:ec:3e:aa:b8:44:e7:b7:08:
c3:c7:b6:32:94:71:76:09:2c:1a:c3:64:e2:e7:59:ea:75:ab:
a2:60:cb:a6:31:01:03:76:80:40:99:4b:0e:d7:cd:30:71:04:
9b:0d:fa:5b:b2:89:34:59:a2:2d:7a:b9:df:34:77:a5:74:2c:
87:7e:ba:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:50 2025 by rpki-client