Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2460229-ce69-3bf4-a972-5be1a0158284.roa
File: d2460229-ce69-3bf4-a972-5be1a0158284.roa (raw, json)
Hash identifier: 6RTJW8zZnbxEkCkiu1dKCeJ3wyAuRt/Lse7pm4iRaTc=
Subject key identifier: 0C:18:BA:A5:05:C2:9F:BD:32:79:22:3D:0C:B5:AC:24:AF:E7:93:B2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1390D022ED91823CA8F560
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2460229-ce69-3bf4-a972-5be1a0158284.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.135.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:13:90:d0:22:ed:91:82:3c:a8:f5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=dc52296c-3a52-403f-8234-60bc23ca988c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f1:87:58:e2:7c:53:fd:4e:38:12:77:32:80:
2b:94:06:10:aa:99:9c:0b:87:d0:9a:0a:7e:66:46:
dd:b2:8e:41:28:b9:b0:cd:0d:86:9e:0f:dc:e4:c3:
8c:04:13:70:1b:f8:a9:d2:27:3b:36:92:ea:7b:de:
b5:97:e4:45:be:cf:e0:3d:14:e3:26:32:64:80:b4:
b3:60:92:6e:44:a9:a7:b9:c1:45:67:a1:4a:a3:76:
cf:ce:65:70:cf:8f:2c:20:89:e6:0b:f9:ea:25:2e:
99:36:2e:44:75:15:b2:4a:a2:39:23:e5:2c:94:c8:
0a:57:31:98:54:b0:e8:81:ee:15:c6:ab:8a:92:bc:
ba:ed:c8:09:c6:22:6b:e2:83:4f:fe:cc:a2:9d:c7:
18:b0:bb:72:02:68:af:c3:bb:bd:88:f1:e2:d4:6e:
ab:52:47:3d:06:44:54:bf:e7:af:ff:dd:6c:8e:83:
12:c8:29:ce:9b:8b:a9:30:d2:f0:62:4b:76:d0:71:
2e:6e:f5:18:45:b2:da:f1:5c:38:55:fe:d2:81:c8:
5d:76:67:91:b2:ae:e6:88:d1:3a:93:43:73:6c:f2:
38:e4:e8:ac:93:99:18:b3:8a:ad:31:97:68:3e:03:
6e:af:18:39:86:db:7b:e7:88:0d:08:1a:43:9f:d8:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:18:BA:A5:05:C2:9F:BD:32:79:22:3D:0C:B5:AC:24:AF:E7:93:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2460229-ce69-3bf4-a972-5be1a0158284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.135.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:b7:7f:5a:e0:a4:fe:20:2f:17:5d:b5:5d:be:ba:64:05:4f:
52:8a:c9:28:38:3a:19:05:3d:cc:2b:81:a7:60:59:3b:f6:8b:
76:c5:25:22:25:a8:54:c2:9f:5d:3d:22:ee:6c:17:5a:d1:00:
d0:84:c9:e2:61:c6:37:3b:a9:d3:67:e3:7a:d8:bc:58:62:9d:
17:90:b9:8b:16:d7:ad:f0:2f:44:93:95:95:08:b5:03:b5:f9:
56:e2:6a:ec:74:db:af:57:47:cb:2c:b8:55:5c:be:98:74:fe:
96:53:c3:49:ac:d8:17:a2:3c:c8:33:73:d1:e1:b7:10:ad:02:
4e:8b:60:c9:6c:b4:ae:4c:18:d0:3b:42:b6:e6:94:6b:7c:97:
4d:7f:8e:ee:d9:26:fd:83:e8:1f:fa:13:7c:89:02:59:a4:b3:
84:85:f7:a9:85:db:4b:ba:fa:a9:69:8d:1e:4f:3c:ee:9b:00:
33:a6:3b:cd:76:ae:37:db:c5:03:15:83:07:8f:5c:fc:03:33:
e3:4e:f1:34:38:3f:a8:e8:aa:e5:39:42:50:d2:72:1b:96:76:
37:a5:c2:22:b8:a5:7c:08:62:6b:c2:b6:39:fa:78:35:32:dd:
94:2e:ea:28:70:4e:77:9b:27:a8:e3:74:4e:82:22:dd:8d:92:
b0:da:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:02:46 2025 by rpki-client