Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e51cf261-1373-35df-9ded-494389bad958.roa
File: e51cf261-1373-35df-9ded-494389bad958.roa (raw, json)
Hash identifier: +pUjU5wycP9FHpHs62iN7hnKXMO2tGeqtIuj1FanUPA=
Subject key identifier: C2:38:F9:E5:06:E8:AF:C4:96:17:8E:53:AE:D1:0B:6C:7A:92:C5:BC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A55F66E469965C17B01A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e51cf261-1373-35df-9ded-494389bad958.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.85.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:55:f6:6e:46:99:65:c1:7b:01:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=479fe796-52a2-41e7-98b5-b02998dc6b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2e:0e:e1:24:9c:fd:94:05:53:8b:c9:5c:21:
1b:2b:71:be:4a:ce:6c:a2:dc:b2:91:7a:19:c1:53:
4a:c5:9f:63:6a:43:9c:ab:f4:ef:36:e3:a2:e1:59:
06:6e:72:e8:f9:1b:30:88:17:00:31:c2:58:49:58:
da:0a:57:81:d6:11:df:1e:4f:cc:fe:43:c5:d1:9c:
8a:f0:4f:bf:48:00:5f:88:f3:3d:7d:dc:95:65:df:
f7:70:db:4a:a4:3e:39:86:0d:85:06:3d:58:2e:a9:
a2:ac:16:54:42:60:0a:c4:c4:09:d8:1e:2c:a6:64:
dc:52:19:5c:d1:84:26:48:7a:30:71:0a:8c:88:d8:
70:67:b4:97:92:a8:e7:12:71:6d:f5:32:dc:db:a8:
9d:96:87:45:4f:68:df:9a:02:6a:9e:d6:99:ee:1d:
af:15:b4:e4:c7:9c:f1:e0:70:28:19:6f:5a:dd:a8:
5a:17:64:42:70:e2:d8:bf:67:fd:c5:9f:cb:c3:81:
be:1e:e5:77:7f:b0:c0:6b:fe:e2:d4:ad:9e:cc:26:
3d:48:2e:5f:4d:97:ad:7f:94:f4:44:b9:a1:5a:19:
7a:8e:8b:e1:c7:ff:a2:ef:97:7e:08:51:9d:8c:65:
82:50:1f:6d:6b:b0:fb:81:fa:7e:f6:2d:ae:f2:ef:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:38:F9:E5:06:E8:AF:C4:96:17:8E:53:AE:D1:0B:6C:7A:92:C5:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e51cf261-1373-35df-9ded-494389bad958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.85.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:a0:1d:8f:d2:97:20:57:fc:62:60:78:ae:1d:5d:b6:57:f1:
d1:60:3f:23:cc:1a:9a:7a:98:7e:f2:93:91:31:5f:4a:c4:fc:
37:77:fb:8f:62:c5:c3:4a:fb:99:cd:ce:5a:05:0a:95:0b:37:
f9:25:90:0b:4e:a7:77:16:48:85:fb:f5:bb:f1:e8:b5:4c:91:
2f:1c:92:63:7c:b2:2f:ad:a9:72:33:67:4e:ef:1c:33:e0:c6:
c3:27:ad:71:7d:24:d7:f3:10:ad:e2:1e:76:67:af:17:52:12:
6d:85:61:73:3a:8a:e2:7f:23:75:f7:11:d2:fd:34:d4:f1:6b:
89:a5:1c:bb:bd:aa:0d:4e:20:f6:27:3a:8d:78:e7:fc:b8:f5:
8f:24:e7:94:0c:88:13:62:8b:fa:3c:d0:ec:25:53:77:4c:fa:
03:c9:6c:b5:5c:df:d0:48:a7:52:32:96:16:8c:30:3b:0e:89:
25:3c:2c:1c:b6:20:3e:f5:f9:c2:47:63:71:0c:43:01:28:ce:
ed:5a:67:58:c2:e9:5e:2e:96:51:97:34:5c:cd:1d:c7:e2:18:
1e:b3:1c:40:ab:b1:c3:68:c9:ef:66:21:0a:70:de:6d:fa:74:
4a:50:52:b9:95:18:1c:5d:94:22:48:66:f8:75:d0:9c:b6:b3:
85:a8:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:00:27 2025 by rpki-client