Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6b3a4d2-e605-3585-98b4-9b3306533aef.roa
File: e6b3a4d2-e605-3585-98b4-9b3306533aef.roa (raw, json)
Hash identifier: N3DIY+UNyHoTCW0qS3lbBJW3s+txBUFVQfBiFfHTyRs=
Subject key identifier: 22:9F:28:FC:2D:EF:CF:AE:E1:32:D9:F8:12:07:4E:4B:46:E1:7A:6A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842AAD407485393779844379580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6b3a4d2-e605-3585-98b4-9b3306533aef.roa
Signing time: Mon 24 Jul 2023 12:00:00 +0000
ROA not before: Mon 24 Jul 2023 12:00:00 +0000
ROA not after: Thu 05 Dec 2024 05:00:00 +0000
asID: 396982
IP address blocks: 34.42.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:aa:d4:07:48:53:93:77:98:44:37:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 24 12:00:00 2023 GMT
Not After : Dec 5 05:00:00 2024 GMT
Subject: CN=f7dc8ccd-ec3c-4153-bbc9-a3adf61261ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:58:66:5c:a8:67:52:6f:98:30:9c:ed:15:
36:f3:6b:ac:90:f5:70:8e:d8:69:9c:81:d6:0c:f5:
c3:ce:e4:fa:53:6f:18:88:f6:f3:26:71:cf:11:b3:
b5:85:92:44:3f:73:c3:52:a0:42:f3:aa:fc:09:4d:
ad:3c:9c:7e:8c:f1:ac:f9:c5:cd:3d:70:e7:98:9f:
50:52:87:12:05:5b:ed:6c:b4:0c:6e:53:83:a7:f6:
2f:5c:ed:36:bf:60:d4:74:f5:86:d4:a6:33:63:91:
0d:e0:a5:67:51:f3:48:61:81:e6:88:ee:8a:c2:9c:
9a:82:a6:6a:41:73:f1:0d:8a:49:af:a1:aa:48:d0:
e4:fd:f7:46:e0:f9:d4:b7:91:ac:dd:08:42:8f:51:
23:46:d3:23:c1:71:61:9e:58:4c:dc:f8:b0:67:fd:
5e:f1:d0:4c:d2:14:91:bd:65:5a:4f:03:2c:6a:bc:
6c:41:63:7a:49:87:fd:13:6c:58:a0:6c:48:fa:8f:
e5:88:bf:8f:2a:85:6a:12:88:57:08:14:72:dd:10:
b7:10:d0:79:80:66:45:dd:d1:22:3f:e4:e9:1f:77:
9c:00:10:bd:24:30:12:61:96:3a:ef:b7:a4:1b:f0:
c9:97:58:08:90:ac:eb:41:71:43:d4:3b:e4:15:26:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9F:28:FC:2D:EF:CF:AE:E1:32:D9:F8:12:07:4E:4B:46:E1:7A:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6b3a4d2-e605-3585-98b4-9b3306533aef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.42.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:be:fb:d0:5e:25:cb:69:da:1c:74:a1:4c:91:d3:1c:82:79:
87:8a:e9:60:20:4d:c7:51:7f:e2:ff:ea:62:ba:02:72:13:99:
ea:90:fb:23:86:6f:b5:3e:4d:18:58:00:88:3e:a3:ff:7e:9a:
d1:32:f8:c8:db:03:6d:b5:8b:3d:11:23:aa:1a:a8:02:67:24:
f5:17:77:03:4d:7c:89:a6:9e:c3:76:39:fa:3a:d9:9f:90:2b:
fe:82:42:32:87:df:c2:9b:71:6b:da:17:91:bf:68:28:ef:b1:
ba:bf:2a:3a:b3:2d:d1:f2:1f:b6:9c:81:fe:f7:f5:a6:46:3a:
1d:dc:20:62:e5:fb:80:d9:76:79:1e:31:c0:e2:a8:04:5f:ac:
3e:5c:a7:36:59:b7:4e:18:a8:d1:4b:14:5c:b3:4b:08:ed:b2:
10:04:bb:ec:31:88:eb:1c:9b:84:f6:ce:68:84:b7:9c:4b:d7:
a4:ea:7c:29:2a:a6:19:26:bd:76:ba:95:5c:b2:b5:89:88:69:
f7:94:a3:97:19:86:24:3b:97:78:38:74:cb:e3:a8:c2:41:78:
a1:e4:e1:fa:fb:e0:65:ec:5b:dd:47:20:d0:d6:e5:ee:12:56:
90:a9:09:1f:b9:86:c4:78:ae:aa:6d:81:44:25:db:3c:47:18:
f5:01:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:24:45 2025 by rpki-client