Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6f81334-b3d9-322f-9e3b-a2d378af6d79.roa
File: e6f81334-b3d9-322f-9e3b-a2d378af6d79.roa (raw, json)
Hash identifier: DOslPx9amVftENUwqFfv1HCoM6rw/KL+oFjjhEmbgc4=
Subject key identifier: FE:11:7B:CC:96:A3:5F:EB:3F:D7:55:B0:3F:94:F5:9D:C8:C9:F1:7A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A549AF198E274F1031DA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6f81334-b3d9-322f-9e3b-a2d378af6d79.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 34.120.0.0/13 maxlen: 13
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:54:9a:f1:98:e2:74:f1:03:1d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=80b74997-dc1f-4145-b7a8-43773e1bcd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:08:d9:e1:4e:bc:ae:28:c8:7f:04:9d:4d:
9e:6d:69:60:6a:36:27:57:74:88:5c:f9:72:c0:ff:
d1:02:06:6b:f9:91:d7:1e:ec:f3:d0:28:e9:16:8a:
97:3c:36:cf:ae:27:e5:66:1e:82:68:e0:06:3f:69:
6c:55:ca:8a:84:28:12:49:fa:d0:70:de:77:83:83:
3b:a4:4d:88:8b:a8:83:a4:c6:26:a6:83:0c:1a:a9:
b5:ac:3d:2f:80:9d:7d:18:4d:5b:a4:c4:5e:4a:22:
56:f1:14:14:b4:38:ac:a2:fd:83:3e:91:9f:61:9a:
9e:58:3e:5d:4f:a8:f3:7b:6a:e8:a5:83:8c:4a:47:
55:c2:5c:b6:fc:00:c0:8e:ea:38:55:0c:3a:6f:c0:
97:4d:df:cb:4c:db:53:eb:e6:51:98:85:e8:13:d5:
d0:c4:e8:5f:d7:1a:6e:41:f8:1a:9a:a0:81:eb:c4:
39:56:7f:a5:52:f4:67:dd:fb:df:1f:c9:47:d9:51:
8c:2c:f0:a1:d6:a5:9b:b2:81:40:8f:56:e2:61:ac:
1a:fd:aa:e5:d8:f8:33:d8:8b:fc:ba:7f:14:b9:f6:
a9:5b:20:60:fb:0d:45:80:90:12:98:7e:07:25:40:
c2:03:67:60:7d:83:39:34:d6:68:93:06:bd:f4:cf:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:11:7B:CC:96:A3:5F:EB:3F:D7:55:B0:3F:94:F5:9D:C8:C9:F1:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6f81334-b3d9-322f-9e3b-a2d378af6d79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.120.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:63:e1:8c:6c:39:4f:4a:a8:0e:e0:b3:88:e8:4f:06:5b:da:
14:98:d0:69:3a:51:7d:e3:60:3b:71:5b:59:4d:d7:2c:60:fd:
65:f4:18:5a:2f:30:90:9d:b8:2d:4d:71:79:d5:c6:44:93:e5:
8c:83:d0:9e:c0:ca:2e:61:91:63:6f:d6:cf:c7:5e:c1:17:8f:
38:88:c5:2b:30:70:87:4f:3d:ce:c8:9b:99:56:28:97:3f:6c:
99:8d:22:d0:f9:23:02:f8:21:e8:30:26:5f:54:ba:e5:ef:68:
8b:b0:64:bc:0b:65:c4:fb:07:fd:af:74:c1:2d:df:d8:c9:cd:
6e:af:ae:d7:ab:b6:f4:bb:26:90:20:2d:83:b4:44:36:b8:30:
8e:61:f1:03:b8:01:a3:a7:37:3e:0b:c5:85:28:3d:09:2e:d2:
e9:78:24:68:d5:64:1f:54:80:d9:00:12:f3:de:3b:8d:69:03:
0d:e0:99:da:63:a1:d2:d4:5b:21:e0:8e:55:fa:d6:5b:ff:51:
ed:68:6d:58:7f:14:e9:6a:2e:f7:bf:4a:fc:47:c4:b1:ce:88:
51:b9:d6:1b:17:c1:66:1b:e0:5e:df:a9:47:0b:a5:ae:7f:44:
9c:93:02:77:51:30:75:51:52:da:c3:c1:d2:4e:69:58:6f:78:
ee:df:5d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:41:46 2025 by rpki-client