Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d895101b-299f-3c79-97b3-68665fc65cc5.roa
File: d895101b-299f-3c79-97b3-68665fc65cc5.roa (raw, json)
Hash identifier: XuJVzp3vUiEO7g5DD1H9SMV2T+dJYBss8is/DEKz7Uo=
Subject key identifier: CF:D7:82:EF:A4:FD:53:09:C1:5E:6D:35:F3:4A:72:A4:F3:47:E2:E4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0FD052771CE7D065811BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d895101b-299f-3c79-97b3-68665fc65cc5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.140.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0f:d0:52:77:1c:e7:d0:65:81:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=cbd51c4c-183b-4327-8f68-92bbcf0006dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:aa:7d:5c:41:fa:90:73:1c:77:36:c0:f2:fc:
71:25:4a:20:bb:d2:33:c1:92:ce:6f:23:e7:b2:72:
9e:58:c0:c3:0f:69:6c:84:63:a7:16:f0:24:67:bc:
f7:65:94:4b:8f:05:50:8f:76:51:25:2e:82:a7:4f:
17:3a:44:a3:3b:7e:27:ae:1b:74:96:23:2c:8b:6a:
d6:b2:e0:7f:b9:5c:1e:f9:d3:0e:e7:6d:16:f5:47:
26:04:65:8a:d7:28:db:2f:d6:2b:f4:d8:de:92:fb:
d0:61:9b:69:d4:00:c1:b9:fd:98:23:6c:d6:ef:8d:
13:17:cc:48:6e:15:99:01:7b:b6:ba:1c:d3:5b:a1:
c6:3c:23:b3:46:86:77:71:00:bf:80:59:fd:1f:11:
80:98:bc:67:51:06:21:0d:ad:e1:ab:06:be:c8:88:
63:29:57:4c:99:9b:15:27:8e:00:33:10:bc:53:42:
3e:19:e7:8a:92:81:9d:17:b5:2f:c6:b9:d5:57:00:
af:c2:ee:e9:3a:d4:a5:76:5e:d3:29:1b:df:a9:6e:
6f:6f:67:e7:e9:7b:bb:c6:5b:95:84:3e:06:f4:32:
66:8e:27:12:86:81:a0:7e:7e:2c:ed:20:0c:63:47:
2b:db:d9:de:ea:56:df:3d:8e:53:d1:ca:ae:26:0b:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D7:82:EF:A4:FD:53:09:C1:5E:6D:35:F3:4A:72:A4:F3:47:E2:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d895101b-299f-3c79-97b3-68665fc65cc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.140.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:ae:1c:86:b7:92:48:4a:de:fb:e6:96:ed:35:8e:94:9e:12:
d3:e2:57:10:a2:33:fa:6b:9b:6d:26:f8:94:cf:94:27:57:50:
27:86:b4:68:88:b5:91:b1:6e:86:f0:1b:20:eb:a7:8c:95:6d:
39:bc:f8:5e:a9:4e:2f:18:6a:d2:47:20:77:8e:1d:ee:4f:62:
27:4f:1c:2c:69:54:2f:e4:43:36:55:9f:5b:f0:7e:ae:17:5d:
17:69:60:97:4b:f7:fb:5b:45:51:36:f8:b9:a1:17:cf:79:92:
e5:cb:d2:b6:e1:b0:01:f8:c8:69:52:cd:99:b4:2b:6c:5a:44:
7e:74:a6:96:9a:24:19:77:13:70:69:f3:d8:0a:46:f9:a4:50:
8f:cc:7a:bf:4d:8c:a1:19:5b:ea:a2:0b:91:68:e9:6f:f7:04:
4b:c2:3b:1e:71:fa:52:2b:b2:c8:c2:73:7a:8c:57:b0:d1:93:
f5:f1:de:7b:77:45:77:56:b3:f2:6f:79:78:9c:af:cf:c9:8c:
77:65:17:ca:7d:33:f7:7c:d5:4d:09:9a:38:7c:3b:be:81:6b:
59:d8:8a:9c:8b:c4:ec:ca:d1:f0:53:79:f3:65:a8:ae:33:ee:
75:a9:81:8b:dd:df:a3:c1:b5:c7:3a:3d:6b:ca:fa:8d:c2:31:
83:23:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:52:41 2025 by rpki-client