Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0d21c26-b390-3291-956a-bc3f274c8ee3.roa
File: d0d21c26-b390-3291-956a-bc3f274c8ee3.roa (raw, json)
Hash identifier: 4JMnvZcXCiy7jnrQXV4veKx9QOp6McRV0u501tY05W0=
Subject key identifier: 33:BD:27:44:F3:C3:76:DB:C7:5D:C5:C2:D8:72:65:50:6B:97:CF:CC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F4E44AE857A0358F618480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0d21c26-b390-3291-956a-bc3f274c8ee3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.97.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:e4:4a:e8:57:a0:35:8f:61:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9fbb90d2-338b-4c26-9c79-3e68ececbbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:39:33:bc:e6:54:33:5e:7c:f3:4f:57:49:
0c:00:fc:43:a7:60:85:a0:ae:34:11:ca:d0:de:6a:
d1:4d:43:90:26:b5:3c:14:51:96:69:c5:d3:33:bd:
9f:8d:5a:6c:a0:b5:64:d0:d4:17:68:ca:99:3d:7b:
71:a5:bd:5e:a3:73:6d:9d:4d:4a:bb:38:7b:fe:4c:
4a:d6:a1:05:84:53:8e:da:31:ff:1b:1f:d7:e1:9a:
0f:3e:81:fd:64:c0:a6:3e:d8:0b:c9:25:4f:34:b9:
8f:a4:50:0e:88:59:03:3b:1a:68:51:41:a9:8f:0a:
a4:a0:50:46:d6:46:ab:c7:9e:9d:36:ac:64:94:12:
fa:19:85:48:ad:f9:4e:b1:8f:72:7e:20:10:af:ef:
df:75:8d:76:04:ad:b7:cd:f9:6e:10:54:07:11:45:
94:cd:8c:e3:6c:26:82:7c:f1:11:d5:6a:7a:d0:0b:
5a:40:40:f2:57:ef:65:1a:44:07:69:af:fa:ac:f4:
5b:72:e1:e8:e3:52:a9:4d:02:34:93:86:4c:b5:20:
c4:b1:15:14:93:aa:66:6d:eb:19:4d:06:cc:70:83:
78:f6:7a:67:db:6c:72:93:8e:d8:bd:08:31:5c:14:
52:99:63:35:73:f5:6a:77:95:e3:2e:bc:61:e2:b1:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BD:27:44:F3:C3:76:DB:C7:5D:C5:C2:D8:72:65:50:6B:97:CF:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0d21c26-b390-3291-956a-bc3f274c8ee3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.97.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:48:4d:5e:94:0e:cd:7a:28:52:6d:4a:bb:db:f9:f2:be:b7:
59:cd:b4:d4:ed:ea:87:af:72:c0:98:60:8f:34:a2:fe:f5:23:
7c:b2:aa:a7:63:93:26:df:e7:99:5c:30:4f:28:0c:25:2d:3f:
fb:78:f7:09:62:24:b6:89:bf:69:d8:2e:82:a8:6d:bf:c4:6c:
24:f4:b1:7c:93:05:87:af:23:cc:df:03:e9:18:43:61:2f:ff:
33:22:56:fb:3f:49:92:02:19:07:99:71:43:1c:2a:14:1e:cd:
6c:ad:c6:4a:df:dd:33:0a:29:4e:8f:c0:93:1b:ba:d2:c0:9e:
12:f6:1a:77:eb:e0:6e:f1:91:50:9a:a8:4e:0d:1e:55:83:60:
ef:3b:2b:2b:89:83:60:17:95:1d:46:03:f9:26:10:c8:74:d3:
aa:2b:e5:27:bb:59:0d:68:fd:d5:ed:fe:47:20:c0:d7:0e:17:
70:c4:71:72:48:85:dc:d7:cc:61:64:0f:99:7d:b3:43:a1:2b:
33:c6:6b:1e:b5:f6:76:4f:2d:93:4a:85:bb:13:73:fe:89:01:
bf:59:f0:be:04:d3:01:42:b0:55:d8:da:34:f3:5c:3a:a0:c9:
cd:10:7d:47:95:c8:80:ec:8f:04:d0:e9:c8:ed:57:9a:21:47:
7d:02:2c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:21:04 2025 by rpki-client