Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca801d1a-41a8-31f5-a283-4d5733a688bd.roa
File: ca801d1a-41a8-31f5-a283-4d5733a688bd.roa (raw, json)
Hash identifier: gJHTFtsG1gEHmDti1lo3Pb9mC49+NhLi/oFlrONaU6o=
Subject key identifier: A9:9A:01:E4:8A:94:62:7C:7D:1C:5C:65:E8:AC:5A:2E:6B:80:45:A4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1B5DD28B46ACB02F429940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca801d1a-41a8-31f5-a283-4d5733a688bd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.150.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1b:5d:d2:8b:46:ac:b0:2f:42:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=02f207d8-602c-45b8-a52f-62f0a348bcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ac:51:27:92:6d:ec:a3:6c:92:28:3b:a7:ca:
e3:66:02:2d:99:83:60:56:5d:dd:dc:3f:48:bd:62:
fc:c0:57:66:7c:5f:5c:14:92:d6:4d:98:26:b0:ec:
aa:d7:b0:56:f7:94:37:c2:3b:f7:1c:63:ff:b3:35:
9f:df:eb:6f:78:10:42:74:8c:f5:5b:9b:38:c1:e6:
c3:57:5b:70:15:bf:7a:d1:11:a5:fb:85:25:cd:58:
05:1c:9e:70:49:4b:f7:8e:9a:2c:ff:8f:a6:9c:ff:
b9:eb:da:85:bd:cf:17:e4:8a:84:e2:96:0e:c5:61:
9b:2e:f6:b2:fd:ac:f5:68:f7:9f:6e:fd:88:61:68:
84:2f:b6:93:9b:31:cd:90:2f:18:71:6c:7a:ed:de:
24:6a:54:ea:b4:ed:4f:cf:28:3b:52:88:9a:ca:96:
30:34:2f:36:c3:a1:64:b9:58:cd:4d:a9:2f:86:18:
1e:1c:37:26:2b:15:11:a9:78:33:24:01:47:8f:ed:
41:85:ff:8d:54:8f:08:4a:de:67:86:d8:fc:12:9c:
dd:1a:2d:85:6e:36:c3:97:fa:97:95:0d:5e:0a:35:
81:ca:69:bc:e7:01:57:29:d1:6d:c6:d1:91:fe:b8:
6d:da:d6:94:c8:de:cf:0b:d6:a8:01:55:8b:c9:e3:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9A:01:E4:8A:94:62:7C:7D:1C:5C:65:E8:AC:5A:2E:6B:80:45:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca801d1a-41a8-31f5-a283-4d5733a688bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.150.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:43:27:99:91:b7:65:b8:65:34:3f:dd:64:7c:5f:7f:50:dd:
ca:69:a8:d6:be:f0:9a:8a:ce:aa:d2:c4:fe:30:2e:72:1f:f2:
02:13:ce:dd:d4:e9:b7:29:37:63:cb:32:a6:b7:5d:bc:98:aa:
1f:0e:22:47:c1:ab:eb:d6:69:4f:79:ea:06:75:c3:31:c2:1d:
6b:c9:51:79:d5:19:31:f6:85:07:c8:48:8e:e4:7e:6a:c4:7d:
23:6e:a5:c9:85:0e:33:6b:bd:ad:ad:b9:12:18:d7:0d:9f:b4:
21:0b:a7:d4:38:65:76:35:dc:34:cc:57:3a:74:ae:f8:d9:7a:
c6:16:3f:3a:da:fd:f0:d5:bd:4c:a4:a1:64:7d:6e:84:ef:fb:
3e:55:8b:de:8b:df:ec:a5:16:0a:5d:15:b8:ae:af:78:07:ad:
b1:76:31:d1:76:0f:88:99:53:82:23:2c:8d:6b:68:5f:fd:a2:
7c:e4:84:5e:12:01:1c:7e:0a:a9:26:16:28:55:db:7c:52:a7:
c4:bb:90:5a:76:d2:a5:06:7e:e4:90:68:44:8c:e7:ed:0c:78:
9a:da:f1:03:bd:10:5c:28:f5:b4:0d:ed:4d:b2:30:ca:05:f9:
c1:67:ae:36:32:33:d3:d3:b0:f1:83:79:be:3b:4f:30:a7:c2:
56:ea:dd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:23:21 2025 by rpki-client