Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9b08346-5b99-3021-be79-2bc35db64bcd.roa
File: d9b08346-5b99-3021-be79-2bc35db64bcd.roa (raw, json)
Hash identifier: nVRCWmOuVn9ljHhwwsb1nNFccX/2i8XTpRwZck83R0o=
Subject key identifier: 4C:D9:1B:10:0A:12:D1:C1:37:5B:59:C8:5C:F9:1F:F0:30:6E:90:65
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0C5A96A32F61FE75ADA800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9b08346-5b99-3021-be79-2bc35db64bcd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.147.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0c:5a:96:a3:2f:61:fe:75:ad:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=46096703-13a3-41e0-bedb-4bbd6333d26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:30:56:a7:61:17:ab:a4:ea:14:88:63:0f:
16:94:7b:fc:bd:a1:45:aa:48:1b:84:6b:bb:2e:6e:
9e:b6:14:23:49:4b:a4:0b:3f:51:b8:61:12:85:5d:
87:f0:b8:76:05:94:1b:86:d7:40:b4:8d:69:c3:04:
a8:72:66:1a:cc:5f:3a:8b:df:8b:22:9e:20:78:14:
f9:9a:b5:9a:1d:7f:0c:0a:1b:42:e6:9c:91:eb:2c:
b5:9b:f2:9b:1c:31:2e:19:68:c0:a2:fb:f0:6b:ee:
29:53:42:77:e1:ec:21:d3:2c:35:96:dd:3f:94:9e:
58:d3:13:74:33:8d:bd:a8:c9:cb:e5:7f:3a:d1:ae:
ff:ef:06:ae:fc:54:f0:e5:22:f0:ff:7e:0a:10:a2:
46:54:12:84:4c:e7:b7:f2:19:96:44:83:69:49:56:
12:66:37:9c:29:15:c3:fe:7a:4e:23:e5:58:9d:43:
1d:26:64:3f:58:ab:63:2c:a8:53:16:f4:f4:e9:05:
e2:10:ac:0d:96:49:8f:79:ca:3a:9c:1a:24:26:64:
96:8d:79:54:14:88:44:8c:3e:c7:60:15:30:25:aa:
5f:f8:71:27:d2:69:27:14:49:2d:7d:08:55:14:1c:
9d:64:27:f3:8a:dc:25:da:12:59:97:cd:82:c8:c9:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D9:1B:10:0A:12:D1:C1:37:5B:59:C8:5C:F9:1F:F0:30:6E:90:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9b08346-5b99-3021-be79-2bc35db64bcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.147.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:6e:5c:5a:d3:dd:9f:9f:10:6c:d0:5d:f1:48:cf:c6:00:59:
4d:8b:5c:77:0c:d8:67:e7:bc:c0:83:a4:2a:6d:22:20:2e:7e:
b0:54:2a:7a:11:fa:24:84:af:5e:36:e6:27:2f:6e:34:dd:31:
8a:f0:81:4f:bf:a2:f3:e9:62:b6:c8:85:c2:69:c1:25:b9:5e:
2a:f4:97:62:0a:d1:9e:ef:be:53:f6:cd:6c:9e:6d:c0:62:66:
b2:4b:4f:6d:cb:87:fe:6e:68:be:8a:44:5b:1e:61:5b:f4:68:
b2:a9:06:d1:4a:6a:f0:83:f5:bc:71:14:87:55:a7:96:d9:34:
7f:39:20:90:53:60:b8:ba:ba:a9:3e:6b:a7:0e:7d:0e:9b:f4:
c4:03:ff:74:99:63:f7:cf:55:94:67:b6:1a:9d:a9:27:b1:25:
3a:d6:1a:9e:18:c1:ef:bd:df:76:43:0d:78:0c:1e:8e:ce:0f:
03:c0:c5:6f:d6:56:b6:e9:98:80:e2:ca:1e:8e:8e:f8:4f:9d:
ee:7d:67:6d:07:90:e7:94:6f:03:11:69:1e:76:93:af:0c:fd:
79:cd:e4:9e:4d:1b:74:47:f4:52:09:fc:1c:ca:50:97:e4:b5:
51:f0:c1:66:7c:3f:9e:aa:00:f1:38:97:95:d7:54:82:92:00:
16:da:e1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:22:54 2025 by rpki-client