Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e73f06f0-84c0-3aeb-877c-4810743c4809.roa
File: e73f06f0-84c0-3aeb-877c-4810743c4809.roa (raw, json)
Hash identifier: 9bH63Uw0yGBhGuevxzHkzcmlvHV1tht9bffyhowBEaE=
Subject key identifier: 89:92:63:DF:EF:20:C8:F8:56:F9:77:77:CB:1C:11:90:11:C9:61:A8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A22617BCB19699A1DF2EAC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e73f06f0-84c0-3aeb-877c-4810743c4809.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.104.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:22:61:7b:cb:19:69:9a:1d:f2:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9a1a1593-a045-489a-8d91-02094c66493e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:63:98:5f:c5:16:62:d0:72:8b:35:98:7c:
f0:94:8f:4c:a1:f7:d8:db:1f:51:2c:1f:cf:bb:6b:
38:44:fc:9c:bd:84:23:5b:bb:30:cb:dd:2e:83:07:
19:98:9d:03:c7:c1:35:42:a9:dd:6a:1f:77:5c:8d:
5c:99:51:0c:ab:13:59:bd:3d:46:e7:5a:f4:69:f2:
c7:14:56:bb:e5:be:4e:eb:83:b8:b3:93:a4:55:50:
35:16:22:85:b3:5b:bd:13:1f:dc:6e:91:0e:80:74:
52:f9:75:12:b9:d5:cf:be:4a:be:97:8b:c1:80:98:
17:aa:50:5b:2f:70:70:c6:a9:25:52:0c:42:54:37:
bc:79:00:cf:86:d1:ea:39:ef:3a:b9:b7:68:5a:0b:
3f:6a:3d:c6:e9:fb:92:1b:9c:05:9b:12:d4:87:38:
dd:7e:b1:eb:c0:86:34:40:ca:bf:ed:e5:28:5b:f1:
a6:20:24:3f:ec:f6:48:8a:31:b7:b7:67:57:3e:8d:
df:46:af:27:bc:a2:79:f3:f8:d8:4e:25:cc:52:75:
79:3d:75:79:85:43:4f:3f:cf:a7:af:10:38:38:46:
6c:db:43:99:41:f9:7c:67:45:30:08:83:d4:e2:c1:
40:4a:e6:6b:a5:1a:83:58:b5:44:24:e5:0a:68:db:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:92:63:DF:EF:20:C8:F8:56:F9:77:77:CB:1C:11:90:11:C9:61:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e73f06f0-84c0-3aeb-877c-4810743c4809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:d6:78:a9:2b:a8:ff:8e:d6:99:96:00:fd:55:b4:47:a1:2b:
9b:12:c7:51:10:a9:03:f5:2e:0e:1f:54:92:fe:65:93:56:76:
bd:08:1b:5f:5d:80:af:16:5a:f9:3d:58:4d:87:53:ab:93:54:
40:2f:60:45:4d:24:ee:47:95:93:5d:12:ad:ae:c8:04:60:5e:
c2:99:ff:2a:02:e7:e8:d2:45:18:3a:c1:c4:10:95:a2:78:0e:
48:6e:0c:b3:bc:78:04:8b:c3:e8:08:fd:8e:24:8d:02:79:8b:
05:1c:d4:23:f9:6e:60:c2:2e:b3:24:4a:8a:8d:67:75:50:7f:
d3:77:31:81:69:bc:9d:da:54:19:0f:3f:3c:9c:df:ed:c8:11:
76:49:bc:64:9a:88:ef:27:a9:f4:fe:30:c9:61:1b:16:db:67:
e7:75:9f:75:40:ab:c8:f7:3f:6f:16:40:5c:90:18:c1:4b:b6:
f9:e0:d9:ee:a8:93:f7:89:15:a9:aa:60:50:d2:cf:93:19:2e:
78:49:b5:b9:43:dc:cf:3c:52:f9:9f:c7:8a:d4:a0:d6:72:ef:
11:62:5c:47:55:47:38:87:72:e6:28:00:2d:dd:f5:2f:74:f1:
d6:9c:23:50:c9:f3:e6:a3:a7:f0:db:47:da:86:52:5c:b0:93:
71:f2:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:45:27 2025 by rpki-client