Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db9b9d58-0f8f-372e-bfed-77fa6b7f5e70.roa
File: db9b9d58-0f8f-372e-bfed-77fa6b7f5e70.roa (raw, json)
Hash identifier: ClHCcQVcx18gyt3o3lxgIdSZXLcCccSc2uGrB89MFhM=
Subject key identifier: 70:D4:FA:FB:40:81:9C:D2:BC:80:A5:8D:CA:21:38:1B:FB:77:7A:6D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0965E99DF5928C132D4A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db9b9d58-0f8f-372e-bfed-77fa6b7f5e70.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.146.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:09:65:e9:9d:f5:92:8c:13:2d:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7231274c-ef14-4f22-bdc1-8ec27a8e3860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:2c:34:ad:ae:f1:a4:fd:31:f4:8f:42:27:
82:07:a0:23:bb:29:d2:32:43:fd:06:b3:a5:2c:dc:
20:5c:b8:6b:38:4a:39:18:29:65:98:cc:9f:27:7e:
0a:09:44:27:6a:99:c6:c2:5a:f4:83:ce:25:fb:d7:
33:03:39:aa:51:8c:6e:74:13:c5:11:c7:6b:c7:10:
b5:26:01:9b:a0:44:90:1a:00:10:a7:57:90:5d:8e:
ec:81:28:80:13:4e:ff:81:50:3e:df:f7:ea:27:f0:
53:c3:11:44:b7:8f:f1:8a:5f:e8:a0:9a:c3:0c:3a:
b9:84:19:bd:7c:e5:2e:4b:55:f2:10:fe:85:4b:a5:
21:04:98:76:c3:70:5a:c0:08:0b:f3:04:e9:ae:a7:
ba:b7:c4:60:aa:8d:7b:2c:81:e8:ba:e6:09:1e:f8:
8f:d7:bb:e5:eb:56:e8:ec:5d:d1:df:c1:c1:e7:b8:
c5:6b:6b:53:7f:d4:d5:21:65:b5:19:29:7d:91:6b:
23:cd:25:cc:5c:2f:a6:95:58:ab:55:cb:b7:b6:6f:
61:52:42:c7:b0:20:55:73:13:52:13:d8:ba:8e:71:
18:17:e9:9e:2f:c9:ea:b5:7d:20:a1:c4:59:aa:ab:
ea:f9:2d:eb:05:28:38:35:a5:08:7c:b9:63:a0:86:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D4:FA:FB:40:81:9C:D2:BC:80:A5:8D:CA:21:38:1B:FB:77:7A:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db9b9d58-0f8f-372e-bfed-77fa6b7f5e70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.146.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:df:19:67:25:e3:db:1c:8e:f3:2e:26:a6:bc:4e:0c:a7:51:
b6:b1:eb:14:99:5a:e2:fe:00:e6:9d:2c:f0:88:06:45:16:22:
26:6f:19:0e:25:15:e0:d9:a1:93:ae:7f:22:44:28:c5:8c:cd:
db:7e:64:51:ad:4a:01:c7:6d:51:b1:e5:99:46:70:cf:52:49:
b2:b8:bf:09:2f:51:02:41:47:45:40:57:38:60:be:81:c1:17:
d8:19:41:ca:e2:10:8b:f4:4b:36:82:81:e7:c1:25:3a:fa:6f:
77:0f:11:09:10:02:05:81:a5:fa:01:95:c6:4d:ba:df:56:66:
d6:8c:91:bc:84:ae:1f:2f:cc:c7:50:a2:62:ed:20:26:f9:dd:
0e:81:cb:79:9a:6e:7d:54:d9:37:b7:e0:ba:02:8b:1a:57:8b:
b2:d7:84:20:43:15:5b:af:b8:83:ea:3e:ff:91:5d:56:3b:a8:
29:bd:62:93:30:ef:f7:18:2c:a1:4a:09:b1:cc:1b:5c:fd:8c:
e1:fd:25:91:fb:df:87:6e:94:b8:58:5e:a3:7f:f2:5e:88:53:
0e:15:89:bb:5a:5c:40:54:89:df:62:c6:05:8d:99:fb:0c:54:
10:ef:b6:2f:67:82:90:ee:6e:c3:3a:86:95:35:38:56:f8:30:
b2:e2:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:47:44 2025 by rpki-client