Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb1cf8c3-4bcd-386c-8fab-5f0a18e3a575.roa
File: cb1cf8c3-4bcd-386c-8fab-5f0a18e3a575.roa (raw, json)
Hash identifier: 4QhalyUUZ71enzftGQvddYzXjyvbFTctLZFv3Fmuqbw=
Subject key identifier: A2:00:83:EF:C6:AD:44:A8:E2:F8:44:2D:EA:60:FF:8A:44:65:01:45
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A25346134CC0685FE5E1500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb1cf8c3-4bcd-386c-8fab-5f0a18e3a575.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.152.0.0/13 maxlen: 13
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:25:34:61:34:cc:06:85:fe:5e:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b8bdac2b-b2d0-44e1-9f00-c290c34b2eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:10:03:6e:81:7c:8f:bd:a2:c6:99:66:51:
df:59:4f:b9:45:4a:e2:d0:dd:f4:69:96:f8:1b:13:
1d:d7:30:e0:f6:d1:07:85:20:77:4b:75:1d:4a:12:
10:f0:99:25:01:96:57:40:24:f7:31:6c:81:b7:82:
59:0e:24:84:2b:9e:f9:29:57:4a:3c:2b:97:82:90:
b6:c0:e5:e4:5b:2b:6e:17:00:f2:c4:26:ff:90:55:
45:0d:d8:c1:30:37:f7:4d:eb:5c:02:08:01:dc:0d:
46:d7:8b:a8:5c:f3:a8:cb:ea:25:f3:6b:3b:0d:89:
17:0f:ab:2b:10:41:6d:d0:56:f4:6d:8b:3d:86:88:
56:23:22:85:6e:a3:47:2d:62:33:15:ab:82:bc:34:
d8:60:b0:27:f2:21:04:3b:0d:d0:94:92:0f:ef:fa:
e0:81:ed:9b:9a:81:21:ae:e2:a1:c5:de:29:9d:d7:
f2:8b:3b:06:55:11:92:02:fa:67:2f:d0:eb:32:62:
67:1a:7a:8e:a7:7f:4d:3d:6a:cf:bf:a8:ed:e7:71:
c5:64:bd:b9:40:f2:ff:40:b7:39:15:66:0a:59:e9:
72:2b:6f:6e:40:a4:1c:a8:6d:1b:dd:07:af:a8:20:
78:88:0b:f5:3f:c8:18:f5:2e:66:79:d0:d0:f1:b0:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:00:83:EF:C6:AD:44:A8:E2:F8:44:2D:EA:60:FF:8A:44:65:01:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb1cf8c3-4bcd-386c-8fab-5f0a18e3a575.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.152.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:7b:bf:9b:1b:7e:f4:9a:e0:86:9d:8a:d1:7c:e7:79:98:49:
92:6c:25:af:70:a0:0e:c1:2f:dd:9b:5f:73:c5:1b:98:5e:78:
e5:7e:32:31:7d:21:da:a6:4f:76:51:09:10:cc:f8:a0:79:36:
54:cd:43:b7:24:7a:43:93:7d:6a:3f:08:78:6c:60:77:f7:45:
89:25:00:e4:c7:4b:e7:91:9b:8e:55:e2:cb:03:7f:0d:d9:7b:
51:1b:c9:ce:23:0c:bd:d5:82:db:64:5a:0a:46:d5:3d:25:41:
5d:53:ba:47:f4:85:6a:97:a0:40:5c:b6:9b:cd:a5:3e:fb:74:
fa:3e:e3:47:5d:0f:af:10:cd:33:b7:3a:e7:db:de:86:78:16:
96:58:e1:77:8c:d4:94:e5:b7:75:2b:2f:01:48:61:7c:e7:fe:
4c:1d:6e:11:d7:f7:19:d2:e5:8c:63:7d:16:57:df:cd:4e:fc:
6e:38:42:92:50:1c:4f:88:17:ee:42:d4:01:48:f7:7a:91:f7:
61:6d:52:23:2f:02:cf:0e:58:78:34:62:68:17:97:04:a4:a9:
c6:ca:cf:d0:90:dc:0a:03:0c:98:36:33:40:0d:3e:b4:9c:e7:
49:79:f8:c1:9c:bb:b2:9f:f9:bb:df:52:27:b8:b2:70:b4:0e:
0a:7f:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:35:43 2025 by rpki-client