Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd66d12c-1816-3306-ba18-27e69e731e2d.roa
File: cd66d12c-1816-3306-ba18-27e69e731e2d.roa (raw, json)
Hash identifier: XDl0FnLXWDqa7MD6VObQAcjnZSZeUXUZ3GbhIC2Mogc=
Subject key identifier: 4C:B9:7A:9A:ED:E9:08:9F:B4:F7:02:64:9C:C2:02:EE:94:0B:F0:30
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FFE7363D724C7D01207700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd66d12c-1816-3306-ba18-27e69e731e2d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.138.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ff:e7:36:3d:72:4c:7d:01:20:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=545a510f-182a-4397-b854-975e693d5377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:65:84:79:b5:b5:f7:3c:81:59:66:80:cd:
05:6a:cf:dd:04:9d:6a:2e:8f:02:ee:7e:6e:08:9e:
15:ea:f1:62:e1:c3:c4:d9:63:12:87:0d:a9:b9:1f:
c4:a3:d1:ea:16:1c:f0:4e:eb:c2:8c:b7:c0:a5:90:
df:04:cc:ef:91:61:bf:36:40:d2:7f:c8:0f:8e:4a:
2a:78:bd:a5:0c:eb:c7:e8:06:91:2a:55:19:a4:7e:
9a:e6:fe:98:29:b5:80:85:30:6d:38:9c:88:7d:5f:
06:a4:f2:6a:34:72:c2:1b:df:49:54:82:ad:74:23:
19:3e:96:c2:23:37:ca:b2:55:86:3c:36:3f:4c:aa:
f3:26:0c:5b:8b:29:dd:67:5f:20:5a:40:31:35:62:
57:36:4f:c8:b7:33:44:fb:ec:9b:26:ed:41:23:ce:
14:15:01:0a:66:c6:fd:0b:ed:76:23:30:be:a8:f5:
b6:9a:b7:76:20:67:42:cb:d2:46:9b:4d:8c:6c:3f:
43:ec:12:35:82:37:40:97:3f:0e:f4:3d:ea:15:3e:
67:08:a8:dc:4f:aa:9e:2f:a2:f2:55:04:c3:9f:6b:
a9:a3:38:a2:3a:d6:c3:03:a8:0d:1d:b1:98:6c:1a:
47:e2:5f:b6:a2:37:51:4b:06:b9:6d:34:12:28:b3:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B9:7A:9A:ED:E9:08:9F:B4:F7:02:64:9C:C2:02:EE:94:0B:F0:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd66d12c-1816-3306-ba18-27e69e731e2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.138.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:47:6b:1d:a4:c9:1b:88:3f:e0:12:ba:76:83:61:25:fb:10:
70:f1:26:a3:cf:29:10:e5:85:f1:ed:17:54:85:06:bf:9e:b3:
65:65:70:62:54:37:91:0e:04:d0:de:83:c3:02:ec:61:92:c2:
20:b7:1b:88:35:f3:a4:77:d7:d3:69:80:fa:61:0c:53:2c:a7:
c3:1b:c5:08:f0:65:48:8f:c9:87:e3:a1:b9:31:4c:36:c3:0b:
0d:5f:5b:77:ae:af:6f:a0:ff:95:cf:cc:56:41:d9:a4:2a:26:
27:cf:ab:2e:6d:b0:fa:64:9d:7d:cd:2c:a8:a1:71:48:5c:42:
37:d0:07:1c:03:24:0c:34:1d:fd:b0:86:d1:ab:23:91:9b:ad:
05:c6:99:cc:52:79:fb:e3:3c:8e:7b:b8:0d:c6:27:30:6b:50:
d8:90:fa:24:44:e9:b2:16:bc:68:84:7e:13:46:57:34:e0:52:
72:cd:bf:4e:94:7c:61:90:a0:6a:ca:41:04:ac:a5:27:82:66:
af:16:70:59:d1:f2:b2:e5:d6:68:8b:ee:eb:27:b5:48:44:62:
2c:e7:34:e1:1e:89:15:7a:2a:9e:25:19:f8:d2:50:36:4d:ae:
01:bb:d2:1b:a8:30:4a:d7:a8:2e:3b:ba:77:70:bf:0e:2e:95:
e4:df:9e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:24:21 2025 by rpki-client