Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e80486f6-c56e-3697-a107-c484d0e07c32.roa
File: e80486f6-c56e-3697-a107-c484d0e07c32.roa (raw, json)
Hash identifier: BSKF5msca+jx2H0NZYwdd6J1/OP0v5shbQHSw6nGVaA=
Subject key identifier: E3:E6:05:39:F8:E1:EA:45:48:D7:C0:D6:20:00:6D:D1:2A:BC:B0:10
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F8F301C871C3EC9E5EDB00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e80486f6-c56e-3697-a107-c484d0e07c32.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.129.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f8:f3:01:c8:71:c3:ec:9e:5e:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3c8f677c-726f-44f6-87c4-c1c830dfe97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:90:6f:ab:d4:ce:be:1f:6d:8b:8d:b5:94:
6c:93:72:cb:7d:60:f9:a9:04:8f:39:ce:82:92:62:
b0:53:7f:24:e7:c2:a6:4d:bf:98:63:06:7c:80:21:
1d:62:f2:0f:33:1e:df:cd:92:06:65:0a:a7:4c:63:
7f:9c:e9:1e:91:76:bb:27:c1:2d:76:b2:27:b9:0b:
e6:7e:3a:a4:3b:9b:4a:c7:0a:40:82:22:6c:28:8a:
9d:3b:79:19:93:a9:b6:2e:c8:54:a4:cf:09:4d:a5:
55:e7:ed:fd:a1:63:54:28:6c:06:1e:fb:64:c7:52:
a8:26:69:5b:71:ce:37:48:ab:2a:e4:33:2c:21:79:
e3:11:62:86:38:fc:7a:69:57:c2:54:23:b1:3c:23:
68:52:ba:57:0d:65:f3:53:20:22:49:b2:d4:c1:b2:
2d:56:0f:17:62:dd:5a:d5:53:70:da:4d:4a:ea:d9:
bd:62:3f:03:91:9d:2b:2c:bf:da:92:0e:45:20:ff:
a5:f4:1a:38:b3:be:5c:cc:39:06:63:05:6e:41:ac:
0e:fb:f2:64:d0:8a:0c:29:30:5e:bf:a4:ef:fc:2a:
7f:cf:bd:8d:23:ab:81:d4:3f:ce:e7:f5:9a:aa:6a:
51:07:72:7c:f2:c4:5a:ba:d9:26:db:2d:9f:60:1b:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E6:05:39:F8:E1:EA:45:48:D7:C0:D6:20:00:6D:D1:2A:BC:B0:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e80486f6-c56e-3697-a107-c484d0e07c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.129.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:35:97:6a:61:94:55:91:01:97:22:3b:09:05:e4:be:aa:1d:
89:b8:b8:0a:b9:64:83:07:13:04:97:04:b1:74:a6:41:a7:c4:
1a:9e:c8:11:4b:af:f8:d8:cf:1b:94:91:76:98:bd:c0:f3:3d:
1b:06:02:58:62:77:46:7d:db:d4:47:b0:c2:78:23:4d:9c:49:
2c:e9:fb:7f:38:c7:2f:aa:23:f7:b8:3b:b9:4f:87:61:b8:c2:
3e:e5:21:5d:4f:24:f3:13:2b:79:91:5e:09:64:b7:53:e6:48:
5f:2c:65:78:65:43:cb:ce:39:0a:2b:d8:9a:57:af:b2:34:90:
74:5c:7e:80:8b:1f:dc:6f:6e:6b:91:f7:f9:c5:42:1c:fa:89:
81:83:65:d4:59:3b:ff:44:78:74:e7:04:8d:ec:59:60:e6:3e:
61:80:ca:7e:38:d5:30:ca:53:f0:9a:e6:f5:b7:66:00:cf:ea:
d9:8c:cc:c0:aa:5d:a5:1e:2c:77:90:1b:26:35:2d:ab:ca:40:
87:61:1c:04:e7:3a:b8:a6:ac:c0:9b:d6:84:0f:e4:23:50:a6:
dc:87:38:16:8c:61:77:b3:1f:9b:35:f6:76:75:11:23:6a:47:
a8:1f:3a:61:38:78:23:20:63:df:de:cc:b7:50:6d:bd:a7:b8:
65:dc:95:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:21:24 2025 by rpki-client