Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1c7be3e-5f9f-3416-bf61-fa7a1d198c3d.roa
File: e1c7be3e-5f9f-3416-bf61-fa7a1d198c3d.roa (raw, json)
Hash identifier: 1vlOh491/efCyacKgorxMZdpKbcjGn/WMCYrAxpxSSI=
Subject key identifier: E6:DF:03:C9:CF:43:A2:E1:D7:78:FF:D7:65:4B:F6:19:56:6B:C6:85
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1CDBEC6073F90E4D196D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1c7be3e-5f9f-3416-bf61-fa7a1d198c3d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.68.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1c:db:ec:60:73:f9:0e:4d:19:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a7b277e5-9634-47ed-b62e-803cf88a98b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:ff:a9:70:b9:dd:59:83:ab:08:7e:9d:31:
a3:c7:93:ea:19:c3:ea:7c:cc:4f:ee:d2:f0:30:cf:
0b:13:0c:d7:ca:a0:70:96:70:f2:65:06:99:66:4c:
37:b8:74:c1:a1:4b:a5:0a:ec:36:b0:c1:58:88:c5:
d1:1a:b2:7a:70:2d:ff:e8:3b:eb:be:e8:aa:47:7e:
c2:ba:61:4b:ff:52:64:b3:4d:6d:e1:4c:f3:8a:b4:
05:14:f9:e5:5b:f4:46:93:16:ee:9a:32:b8:3b:cc:
69:52:3a:91:2e:66:ef:7f:bf:6b:1f:f2:50:1f:ec:
b3:1b:fb:d5:00:e5:c9:25:71:c9:66:e2:a0:83:a3:
dc:e0:55:ed:d8:80:0b:83:3b:f1:6f:28:67:77:0d:
5e:c9:fc:ec:1b:9a:be:5e:8b:fc:68:9e:62:f2:61:
f1:bc:e0:d0:eb:77:98:a7:09:c8:5e:c8:8b:ab:da:
33:b2:42:d4:11:78:52:17:90:6f:6a:69:3a:bc:ee:
24:cd:1c:82:8f:4a:80:f2:be:2b:1b:c9:67:e0:70:
54:e0:50:a8:5e:ce:52:1d:af:05:71:f4:2f:46:9d:
e8:58:6e:44:64:ea:7d:c6:6a:7d:bb:be:dc:99:66:
36:d9:ee:d3:49:c5:46:96:55:ef:d2:d7:cf:99:27:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DF:03:C9:CF:43:A2:E1:D7:78:FF:D7:65:4B:F6:19:56:6B:C6:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1c7be3e-5f9f-3416-bf61-fa7a1d198c3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:7e:66:fb:61:83:64:a0:bd:8a:12:fe:ef:3d:59:7d:ef:6d:
5e:19:99:06:76:63:e8:17:98:1e:d8:eb:93:57:d1:d9:db:d8:
6b:75:9e:9e:50:6a:68:a8:b3:fd:d5:96:7f:c0:93:5b:d1:fb:
57:d3:bf:44:41:28:2c:25:17:e9:7c:c6:6b:72:17:90:a8:e5:
1f:78:4d:c0:4c:11:85:ac:4e:2c:20:65:d6:67:f4:0d:1f:32:
c6:07:9c:0a:0b:71:23:8a:8a:67:4c:a2:51:d5:f9:38:82:96:
75:a0:a4:0f:34:24:45:b4:27:81:09:42:65:ea:b0:b0:90:91:
1c:af:0d:bc:d5:30:02:ae:e3:7b:5a:d6:0d:e2:39:66:46:74:
02:6f:1b:78:b4:63:0c:e6:35:5c:70:00:1a:4d:b8:d6:eb:83:
2b:5b:b2:f0:e1:0f:cb:89:7c:f6:b0:82:d0:77:c6:87:27:fe:
09:fc:58:0d:a9:71:4e:d1:a3:71:1e:71:06:55:ce:13:60:10:
99:26:e8:cb:f6:08:25:cb:bc:a7:0e:d3:5b:f9:db:ad:6a:bc:
6e:c2:8c:77:b4:7d:dc:0f:17:91:81:98:c5:ac:de:5a:6f:ad:
cb:99:72:06:fd:bb:c7:a4:48:fb:88:fc:ad:f5:c7:26:e2:b0:
cc:cf:b6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:19:20 2025 by rpki-client