Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc977e15-5087-3ec6-b079-f68026ca7c75.roa
File: cc977e15-5087-3ec6-b079-f68026ca7c75.roa (raw, json)
Hash identifier: UgBWpYOQxVdk+RWeFVwX2tPWQiaBc+wXxsCeAf0+2sE=
Subject key identifier: 2E:E0:94:C1:1D:BA:AB:CC:33:39:8F:56:02:C4:A0:67:0B:6F:E6:CA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A17EFDC2DBD5EB635846400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc977e15-5087-3ec6-b079-f68026ca7c75.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.177.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:17:ef:dc:2d:bd:5e:b6:35:84:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=295ed0b5-f45c-4bf0-a45c-b99a0fe21cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:0f:8b:6a:2f:aa:a3:90:53:e3:5b:da:90:
49:34:39:e8:ac:a4:0d:62:cc:96:6c:87:33:1f:17:
3f:08:b4:e4:b4:7f:45:24:33:fc:2e:9d:83:6c:ae:
4a:2d:7b:99:18:1b:18:e3:35:69:4d:64:30:e3:73:
e6:52:09:ab:86:17:24:ef:4e:c8:93:c2:e4:7e:06:
ed:8f:9f:7b:26:83:cb:08:e1:77:ef:e9:d1:b6:8c:
6c:a7:9f:24:27:36:7a:df:9d:61:2a:c2:47:a0:22:
c0:85:7e:7d:f4:f6:4d:6c:fc:51:3b:81:a9:20:6d:
c1:05:7d:da:fc:ed:53:e2:9c:a0:60:c3:2b:38:ca:
ed:69:a4:89:ef:ce:e1:13:11:28:2d:a1:fa:3b:f8:
3d:13:65:d3:1a:fe:b5:72:89:ea:bc:02:b9:f5:13:
c2:ab:1d:78:23:4a:f8:c8:3a:f3:4d:2f:de:ab:51:
2a:79:04:53:05:5c:2a:ca:34:54:ea:67:d9:fd:c8:
bd:6e:8f:16:67:e7:17:d0:b5:56:87:4e:a8:c6:6a:
b2:ab:f5:ba:d8:1c:7c:02:62:4a:41:c2:9e:21:23:
2e:b0:a0:2d:70:df:5f:29:ef:19:1b:65:f5:fa:f7:
be:c2:2f:23:12:d7:fd:4a:32:b5:d6:30:b8:3b:95:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E0:94:C1:1D:BA:AB:CC:33:39:8F:56:02:C4:A0:67:0B:6F:E6:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc977e15-5087-3ec6-b079-f68026ca7c75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.177.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:80:d5:71:f4:e8:85:68:0e:f2:c2:c4:27:eb:2a:6f:4a:f1:
1b:9d:56:21:de:2b:e1:ca:be:d3:cd:47:40:7f:36:7f:9a:b8:
f5:36:16:79:5f:dd:21:0a:2c:f7:d0:22:97:c6:a8:b1:b6:5c:
33:42:d2:09:7f:6e:f7:06:7c:ce:99:db:ad:e6:24:dc:52:06:
70:b7:67:3d:76:55:37:28:7a:95:6d:96:53:2c:46:f9:c4:bd:
59:39:ef:4d:05:84:93:b0:ef:71:3f:37:36:44:13:82:86:14:
53:59:58:66:14:5d:44:4b:ea:1e:d5:1e:ae:dc:36:89:9a:c0:
0e:ad:22:3e:79:3c:4e:80:91:50:c4:cf:55:f2:08:50:0f:8e:
bf:e6:10:d2:56:ca:d1:6a:73:b2:d8:eb:02:64:b9:a0:6f:74:
72:7d:8e:a7:ba:f4:da:df:66:bf:e3:11:b6:45:d8:9f:85:7e:
ec:3f:77:a4:5f:ab:7d:bb:0c:fb:6e:46:39:bc:7e:72:c3:92:
dc:91:30:3c:19:0b:cb:e9:1d:a8:15:c9:7e:06:d4:ce:7a:7c:
65:72:2e:96:3e:ed:7d:df:f3:d7:8c:b8:fb:95:2d:67:e0:f3:
52:be:89:09:71:e2:02:90:cd:bb:e7:c8:9a:47:0e:c1:80:0b:
f7:50:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:43:21 2025 by rpki-client