Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5400a80-037e-3247-9db9-88e5b6ba5d3a.roa
File: d5400a80-037e-3247-9db9-88e5b6ba5d3a.roa (raw, json)
Hash identifier: K0JAcROTPbaOkNNsggtmleWgdBhPqyGfsWhCd7sKWDs=
Subject key identifier: E9:C3:72:92:A9:0E:E0:50:67:D3:C5:48:EF:0E:39:89:F4:E0:0D:04
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A671A7BC2C2183BC880000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5400a80-037e-3247-9db9-88e5b6ba5d3a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 34.152.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a6:71:a7:bc:2c:21:83:bc:88:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=de88e238-c075-4b20-a483-4b469a2b70bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:5a:a3:ef:f2:1e:37:96:d2:a4:17:f8:9b:
ec:2a:3c:fc:cb:8b:b8:1e:a2:94:ce:21:95:80:be:
df:15:d1:20:46:66:9f:46:b6:81:cd:eb:91:61:3e:
20:da:94:33:d8:e4:0c:ef:f7:0f:f6:47:f2:82:9b:
77:63:60:7f:ab:3f:7d:41:08:f3:d1:0a:ac:ec:45:
90:48:89:4f:46:73:0a:0d:06:cf:2a:5b:d3:39:98:
3c:28:4b:b2:93:8d:89:67:ef:4a:6a:68:73:ab:27:
a7:46:b0:47:6f:f1:35:df:04:c5:af:10:d6:b3:50:
a7:39:7e:5c:67:90:3b:95:4b:15:88:92:40:ef:0c:
38:0f:3f:20:d8:1c:e5:76:c5:73:53:cb:dc:d2:22:
26:48:76:30:c3:c4:e6:ac:ef:ad:86:ac:85:d1:9c:
f7:d8:aa:2f:4c:32:45:0f:d3:78:8c:e4:aa:ab:92:
28:aa:9d:60:4a:5c:65:4c:1a:f9:51:67:60:38:3a:
f7:ea:5c:44:f4:86:fc:39:96:56:05:a9:33:94:60:
68:20:bf:94:20:e4:83:d3:4a:94:d6:94:ce:e5:6a:
60:51:24:71:cb:46:a6:3b:6e:e8:b9:ec:9d:a3:e8:
cc:75:40:28:44:96:bc:06:aa:10:45:5e:37:93:c9:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C3:72:92:A9:0E:E0:50:67:D3:C5:48:EF:0E:39:89:F4:E0:0D:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5400a80-037e-3247-9db9-88e5b6ba5d3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:2f:d5:8a:ac:c8:49:06:ca:a3:25:7c:b8:f1:f3:2a:48:b3:
c7:2c:b3:01:f6:ca:91:c4:45:13:f3:35:e1:82:3a:34:56:30:
be:1d:45:3f:64:18:d8:6d:ad:7a:e7:91:55:a9:dc:3a:45:85:
e0:7f:88:de:ef:7c:e5:fa:1b:d3:ab:5e:5b:b0:89:ad:24:3b:
e6:65:30:ce:99:55:46:d5:f4:e8:00:2f:69:14:19:2e:3b:4f:
a6:d4:49:52:cd:2d:2c:73:bb:7e:24:c9:f7:65:d4:0a:a0:64:
a7:61:5e:59:22:19:5b:54:97:72:50:c4:ff:ec:3a:cb:2a:1d:
4d:02:83:a6:9a:d7:e4:f0:89:97:72:e6:ee:bf:9b:16:f5:a8:
f7:13:0a:77:d4:33:9c:1c:7b:b2:5f:32:2f:ba:69:e8:ff:7c:
f0:12:21:a5:89:a5:1d:d0:ba:15:ea:e3:9a:38:8c:12:97:91:
0a:bc:f7:f8:ce:41:4e:39:7c:cc:1c:c9:48:23:b9:ec:83:bb:
c7:3d:66:07:97:db:c4:80:11:0b:62:61:0f:24:2f:48:60:03:
3f:70:c3:cc:84:8e:23:0f:be:b1:dc:e7:12:d9:7b:9e:c3:80:
ed:84:91:f7:9b:20:25:58:2b:8d:4f:b3:a6:d2:f8:bb:91:1f:
ca:18:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:46:16 2025 by rpki-client