Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d670abc5-f422-3e92-ac8e-0d3e83d2a2f1.roa
File: d670abc5-f422-3e92-ac8e-0d3e83d2a2f1.roa (raw, json)
Hash identifier: CIyq8RNNTOWpmXHfDd5R5VlavzVq3CKVehuhqspsW4g=
Subject key identifier: 67:C7:76:81:CA:43:11:35:FB:A5:29:2F:04:08:FC:8C:99:6F:80:EF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0F69B80AA3F7281FA672C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d670abc5-f422-3e92-ac8e-0d3e83d2a2f1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.156.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0f:69:b8:0a:a3:f7:28:1f:a6:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7c7b37e3-2d90-4e08-ba99-b81a2ea7dfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:98:e3:fc:17:09:ca:7f:0f:e3:c2:d5:d4:
7f:05:69:27:ca:ae:eb:6d:b2:28:65:58:cf:d0:cc:
04:02:e1:55:1a:ae:2a:58:e9:31:65:d6:d1:00:1f:
74:d8:70:92:d7:19:41:02:10:fd:08:a8:88:2e:1b:
da:82:b3:63:fd:cf:4f:2e:ef:b8:16:0c:3d:22:99:
16:82:da:d2:bc:b5:30:e0:05:67:dc:b7:c6:99:a3:
34:de:af:5c:8d:f9:a3:fa:1e:93:ff:88:5e:42:dc:
5f:12:de:1c:dc:35:e8:62:26:db:00:77:bf:26:fd:
38:39:1f:54:4d:74:00:f1:ca:70:9d:49:51:dd:83:
d3:79:4c:3d:48:9f:ca:a0:3e:20:59:ae:bd:46:d4:
d3:07:d9:6d:61:e8:e1:39:ba:ae:df:bc:55:dc:61:
a8:0a:fa:06:84:b5:2d:a8:1f:19:21:de:85:6c:ef:
3a:57:a0:56:89:6b:51:d4:26:d2:7f:83:3e:65:9c:
3e:d3:e2:de:97:5c:50:33:68:f7:03:32:99:64:14:
73:cb:e7:8b:7e:7f:1f:70:f8:af:69:7f:9a:a6:9b:
42:69:2c:91:cb:a0:54:28:29:8e:84:ba:98:bb:c1:
9d:39:2d:1b:77:43:f9:5f:34:6c:c2:a4:a5:2b:c6:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C7:76:81:CA:43:11:35:FB:A5:29:2F:04:08:FC:8C:99:6F:80:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d670abc5-f422-3e92-ac8e-0d3e83d2a2f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.156.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:e5:e0:e1:bd:ac:7e:14:95:7e:6e:9e:de:33:9e:63:e7:a2:
ff:d5:44:1d:da:f6:f0:47:b2:5b:b8:4a:15:98:61:e0:00:fc:
9b:d1:28:24:f1:d4:61:07:cd:8d:66:1b:4e:01:af:6f:4b:fa:
d9:ca:5a:1a:1e:27:aa:fe:67:d9:c4:07:b2:f3:2f:3f:15:c0:
52:8b:42:6d:b5:d3:83:95:1a:2d:b2:ad:8b:4b:72:c7:0e:4e:
75:34:d4:a2:57:0e:27:06:8c:26:95:6e:ce:4e:57:8b:cb:6c:
b8:a3:46:69:5e:f9:33:3e:ad:bb:5e:75:af:f3:22:96:72:b8:
23:a4:a8:37:9f:80:01:ed:e8:55:64:8c:e7:03:6b:9d:67:a6:
ae:20:a1:c3:c5:11:be:59:fd:04:b6:8c:3e:53:18:f5:bc:9c:
8f:93:ad:01:5e:19:8c:5d:6d:38:9b:ab:a7:d2:60:97:93:5e:
3b:9c:b1:db:c6:12:43:b8:9c:f5:b3:ef:c5:cd:6e:4b:73:bd:
3c:70:3f:d4:1a:52:56:2f:c6:1d:af:b7:f2:2c:9f:9f:9f:e7:
13:e3:60:71:69:e6:d9:16:97:a9:e0:03:e2:2a:94:dd:e5:ef:
4e:74:d4:54:1e:55:cf:77:7a:29:87:3c:a9:f0:49:ec:fb:98:
54:db:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:01 2025 by rpki-client