Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0036ba1-76da-3998-91e4-343f1f6c320f.roa
File: d0036ba1-76da-3998-91e4-343f1f6c320f.roa (raw, json)
Hash identifier: K8SADeBomNKAhQs2BFjSCGN4FU+fGAbavC2YJEQOBFY=
Subject key identifier: 23:3A:44:D4:F5:47:71:05:84:3D:8D:9F:76:07:7B:93:EC:ED:1A:14
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A264A744695A8CB07646BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0036ba1-76da-3998-91e4-343f1f6c320f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.104.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:26:4a:74:46:95:a8:cb:07:64:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e1313556-be9d-4a03-bb1b-661438d66d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2d:bc:b9:0d:f3:6d:58:d2:3d:f2:0d:eb:b4:
48:c9:ff:68:96:cf:6b:41:ec:0e:5e:d7:f9:81:39:
df:c2:40:97:30:f0:75:e1:39:1b:cd:92:75:a0:e9:
df:08:70:1d:93:0d:b5:45:87:6c:b5:0b:6b:e6:d8:
42:f9:d5:a8:fd:f6:7c:df:1c:02:17:b8:e9:c5:48:
e4:2f:f9:30:b7:04:65:aa:4d:c3:10:b7:02:87:75:
0a:e4:31:9d:ca:70:c0:0e:88:dc:68:9a:12:ce:ea:
18:07:bf:2b:4a:f4:bb:07:b5:e9:9b:73:34:7a:c3:
d7:3a:e0:c4:63:e0:70:05:61:61:38:d1:d5:11:f1:
7e:5b:f4:a6:d9:27:b7:66:c3:72:4f:03:1d:12:20:
98:97:11:48:7d:d6:9f:4e:06:4e:a1:00:1a:76:bb:
98:c8:e2:42:72:f3:c2:cd:99:17:7f:40:cb:62:91:
ac:dd:52:8c:0b:89:06:75:bd:05:2e:ad:98:4b:b7:
fe:e6:4e:0a:86:63:db:5e:32:97:b3:a7:eb:ef:b1:
32:05:62:17:e8:0d:de:8e:70:d5:96:0a:26:05:20:
29:dd:5e:bc:a8:d6:70:a9:ea:b7:ae:e4:80:96:92:
ec:92:ef:4b:5c:3c:83:9b:82:82:71:32:f6:ed:84:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3A:44:D4:F5:47:71:05:84:3D:8D:9F:76:07:7B:93:EC:ED:1A:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0036ba1-76da-3998-91e4-343f1f6c320f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:f9:57:f7:1f:cb:14:65:f4:f0:2b:97:65:0a:41:26:7d:98:
ab:e1:a0:ef:cc:e5:cc:b7:54:ae:a4:4b:17:bc:75:bb:f8:76:
45:73:46:e1:64:ef:46:b2:4e:f6:3a:dc:d6:0c:d9:c3:c7:c0:
d6:b7:c3:db:7a:d0:bc:5f:8b:c2:b2:d9:45:50:47:4d:f6:d2:
5b:c5:2d:90:a0:82:7a:02:28:98:17:32:2b:11:aa:37:1a:d0:
a8:e4:d4:1a:6f:8a:d9:8f:6e:08:af:26:3a:32:ec:b4:01:e8:
70:16:05:13:c6:42:eb:89:da:03:f5:36:9f:c2:a4:27:b4:24:
11:62:94:61:97:b6:44:3e:28:bb:4c:68:c7:99:04:b5:ea:7e:
5d:41:db:cc:3d:58:91:9e:53:00:f4:a3:6a:f3:2c:d2:65:e6:
58:70:f9:27:20:a7:f3:9e:54:24:5b:36:6d:11:02:89:eb:24:
bd:4b:dd:10:bf:e7:74:27:61:af:06:c9:60:1d:a0:fd:b9:3b:
c6:8f:db:2a:ed:8e:88:31:f1:b5:da:b2:96:b8:2a:0f:10:ce:
68:95:c9:47:b3:6f:c8:b0:09:75:53:48:fb:e7:7d:a9:a2:50:
df:11:27:75:cc:de:7b:3b:f2:00:18:0c:e3:a2:ab:6b:32:16:
8e:91:08:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:02:39 2025 by rpki-client