Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd90f342-aed6-3ada-870e-326a12d09ea8.roa
File: dd90f342-aed6-3ada-870e-326a12d09ea8.roa (raw, json)
Hash identifier: 8yWGecy/HOSdrSvZg3SqCF3GPUmRjIUVmzvJZSk0b9s=
Subject key identifier: 05:FE:9C:F2:DD:EA:EA:E9:45:D3:73:44:BC:19:2C:C3:01:67:A3:1D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A214D0657DF1BCD55457200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd90f342-aed6-3ada-870e-326a12d09ea8.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:21:4d:06:57:df:1b:cd:55:45:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=96f66978-0d5b-41a2-b4f4-163ebf392167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:74:8e:ff:89:51:60:f0:f3:22:14:6e:5c:
6e:7b:4b:42:64:61:ea:b6:35:c0:7b:1a:ba:ec:7d:
db:0c:17:79:a3:1a:aa:91:f5:19:77:5e:ef:c4:3a:
a7:31:cf:5a:f1:da:cd:90:e1:13:84:e8:44:14:06:
88:71:42:c9:22:26:ba:08:44:92:8e:ff:ee:ab:8b:
bc:35:29:03:0e:4c:bf:40:ed:8b:af:42:aa:8f:c0:
17:d0:28:50:97:aa:f9:3c:42:9b:aa:50:3c:fb:6d:
77:40:27:7f:ed:46:f5:ad:6e:72:31:03:6b:9b:b7:
9d:5f:b4:2d:76:77:c6:df:a9:c4:92:6a:86:f3:fc:
c6:29:12:ef:a1:2e:f0:a7:4a:5e:32:d9:61:dd:a7:
9b:65:8d:13:46:69:71:41:5e:14:0b:1a:b6:0d:68:
a2:82:51:67:6e:9d:1a:15:55:24:60:a8:ea:a2:dd:
08:4e:14:f2:79:0c:eb:f3:a5:78:2c:58:57:e8:e4:
92:05:c8:d1:64:1b:f4:70:1a:f1:4f:24:11:ba:e3:
f2:1d:87:b4:7c:a7:d8:fc:3e:cc:12:8a:d3:17:8d:
49:eb:44:b1:1f:00:8a:c6:9b:15:d3:37:74:68:c9:
45:49:d5:89:b4:36:3c:9e:55:d8:6d:c2:46:3a:d3:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:9C:F2:DD:EA:EA:E9:45:D3:73:44:BC:19:2C:C3:01:67:A3:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd90f342-aed6-3ada-870e-326a12d09ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:76:f1:2d:d2:99:94:b3:b3:46:ce:ac:9f:2b:27:d3:5a:d5:
06:b1:d6:b6:e9:24:be:75:1b:45:fb:2f:9f:9d:be:a7:79:f9:
fe:27:06:19:45:93:f4:bb:af:72:69:1f:69:20:c9:6a:4e:a3:
e0:b5:3a:6e:a9:38:92:9a:c1:dc:03:c3:a4:0a:a7:93:84:91:
c1:b2:67:d5:97:97:de:c2:d7:fa:a2:38:71:9a:48:c1:e8:2e:
9c:63:8f:36:99:fe:8f:85:df:34:e6:65:20:40:73:8d:91:88:
7e:58:b4:4f:86:e1:d0:81:a4:ed:25:d2:0a:8d:57:8e:fc:6c:
12:7b:7d:bf:ee:7f:fe:95:50:bc:6e:81:9d:9e:20:24:f9:9f:
8a:c0:01:cd:9a:d0:0e:fa:be:6e:be:99:30:07:c9:7b:be:c0:
74:c2:d0:6c:3d:c1:9b:46:8e:23:61:49:56:09:05:b3:e6:14:
aa:53:6d:2d:2b:26:54:86:09:e8:35:d8:e9:df:e3:8a:6a:1a:
b4:15:42:b6:11:ba:af:06:79:b1:42:3b:1f:43:97:3d:43:31:
02:39:b3:01:4a:ac:ae:2c:a9:34:b4:69:21:95:f1:16:10:ec:
16:f8:48:a7:94:5a:cf:90:7e:6e:4d:42:33:24:71:3c:e6:08:
85:0f:d4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:14:23 2025 by rpki-client