Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d45d87cb-748f-32a0-a8db-d1429bf7a29b.roa
File: d45d87cb-748f-32a0-a8db-d1429bf7a29b.roa (raw, json)
Hash identifier: L9ThRw9/l1JKV/+kpeN0kaMifWvvqr96wwle5lWKpDk=
Subject key identifier: 78:8D:24:32:DD:BD:66:2E:A8:1A:01:7E:F3:C1:CC:54:3B:E5:87:86
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A61E1E8A368619A83C000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d45d87cb-748f-32a0-a8db-d1429bf7a29b.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.160.0.0/13 maxlen: 13
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:61:e1:e8:a3:68:61:9a:83:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=bc3bde60-883f-4408-aa14-e4991e57d89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:f6:c6:28:14:4d:01:ed:9f:0f:df:2a:e9:
d6:48:a2:2d:99:c1:d4:eb:3f:e5:4f:31:6c:d0:93:
52:bb:be:96:d6:c6:10:b9:9a:df:8e:7b:61:0e:17:
b6:93:53:6f:f5:68:a7:e5:b1:24:82:ef:87:cf:f5:
48:76:22:ac:68:d7:9c:c8:01:43:36:51:11:bc:9b:
67:59:0d:7f:e0:67:c2:8b:05:e1:26:08:29:df:40:
83:a2:98:cd:bd:ad:19:50:cc:48:c5:10:ca:9a:21:
ef:b6:6a:ec:56:fc:1e:2d:11:24:bd:bf:ee:38:d8:
31:ee:07:dc:16:80:dc:5b:5b:7c:fd:3b:8a:16:e7:
65:1e:e8:3a:24:e2:7f:d3:f2:24:90:17:c5:16:3f:
ed:d3:8e:94:4d:04:09:95:d7:ba:b6:7e:30:64:76:
64:ab:eb:c1:89:3f:5c:5b:66:10:54:18:68:82:e8:
77:55:2f:9f:e9:b8:ba:99:c0:90:49:b1:0e:df:09:
c7:cc:ef:d6:ec:77:9d:2e:3d:6d:46:04:91:9e:ba:
56:14:81:e6:e2:41:ec:96:3c:36:4c:1a:28:18:27:
b4:84:05:64:09:2c:5d:26:99:90:92:af:24:d1:24:
87:d5:60:c1:7c:3a:3e:c6:2e:61:67:b2:9f:54:ec:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8D:24:32:DD:BD:66:2E:A8:1A:01:7E:F3:C1:CC:54:3B:E5:87:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d45d87cb-748f-32a0-a8db-d1429bf7a29b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.160.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:97:24:db:34:a2:a1:5e:96:33:2b:47:ef:6f:f4:2f:02:dd:
8f:85:4a:0b:5b:38:fa:d0:4b:7f:f3:56:a2:f6:2f:c3:cd:14:
dc:d7:a6:e4:25:b1:36:15:58:e4:e0:39:0c:82:fa:f0:ae:3a:
af:57:85:fa:d7:f4:03:2c:9c:6f:b6:0b:3a:ec:44:38:e4:7e:
c0:8d:9d:52:37:d0:3b:64:eb:d0:e9:b5:e1:18:04:0f:d2:99:
91:2b:02:61:f0:26:b1:88:c8:36:13:78:85:33:a0:94:e5:f0:
aa:37:a2:38:e9:28:8c:4e:e2:9e:d4:76:9b:f8:36:c3:9d:63:
45:7b:60:72:fd:66:49:0f:58:c5:f9:7b:39:66:c7:7f:01:a3:
62:3d:69:cd:e3:e6:56:3a:07:e1:8b:27:ae:de:55:6e:eb:2d:
d9:67:78:29:26:98:72:90:4e:bb:6d:b3:41:44:a0:ad:5f:dc:
00:cf:fc:e0:f7:78:9c:f6:73:5c:0b:cc:06:77:0e:30:9d:8c:
48:20:27:f7:3d:75:99:3f:95:fe:4b:fc:8d:28:fc:e9:40:82:
d4:5c:99:1e:1a:11:83:ca:b4:17:e7:13:45:94:cd:0a:5c:8f:
06:80:68:25:5c:6f:92:43:c4:78:87:cc:b4:24:38:78:61:ce:
25:c4:b4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:18:58 2025 by rpki-client