Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e81bfe0d-1206-36ed-9df5-aae084bdde4b.roa
File: e81bfe0d-1206-36ed-9df5-aae084bdde4b.roa (raw, json)
Hash identifier: XqsEdocH8XfeEiyUzCnR/HnqyF3XLlMywT+1ezmArD0=
Subject key identifier: B4:C8:E4:26:DF:A8:C1:84:29:A2:3A:7F:E2:08:11:D4:D7:DA:1C:F0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842DAFC40F5494B5B489A217600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e81bfe0d-1206-36ed-9df5-aae084bdde4b.roa
Signing time: Thu 10 Aug 2023 12:00:00 +0000
ROA not before: Thu 10 Aug 2023 12:00:00 +0000
ROA not after: Sun 22 Dec 2024 05:00:00 +0000
asID: 19527
IP address blocks: 34.1.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:da:fc:40:f5:49:4b:5b:48:9a:21:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 10 12:00:00 2023 GMT
Not After : Dec 22 05:00:00 2024 GMT
Subject: CN=fdfedb5b-23e2-4a3f-9759-398303c77e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:4c:fe:c2:47:a3:55:24:6a:63:f0:57:00:
36:57:ea:db:8b:3b:4f:ee:4b:6c:11:39:87:cc:72:
c9:7e:27:cc:74:48:d0:ca:7e:30:9d:c7:05:0e:58:
11:ce:c3:f8:04:ce:d5:29:8b:87:b5:b3:f7:2d:82:
dd:50:de:74:9b:92:d5:52:0c:f8:a9:75:ae:86:32:
23:27:05:54:75:cb:0e:6f:f8:de:57:a9:2e:18:89:
f5:d2:9c:dd:2c:19:c7:35:01:40:03:dc:2e:fd:ca:
4d:67:b4:1a:c1:09:39:87:13:bb:d5:4c:87:24:c6:
94:83:96:d4:ce:41:be:35:fb:85:71:14:10:67:2e:
c1:2f:bc:10:42:db:fc:7b:e0:b1:59:6d:f3:10:ec:
21:e0:46:55:26:48:93:aa:c6:73:c8:ec:f5:12:ca:
02:45:67:8a:32:81:52:f3:0f:26:b9:5e:40:11:68:
fd:a0:ab:7a:cd:ab:47:f9:f5:25:4b:07:87:20:4d:
a4:57:89:a6:c5:18:bf:06:40:d3:b5:cc:26:1f:04:
4c:53:85:82:bb:c9:78:9b:47:d2:d3:63:2f:64:78:
03:17:42:59:00:55:ae:d6:97:96:b8:cd:02:81:cb:
b3:60:a4:ba:2c:53:29:16:82:c6:9e:a2:90:11:fc:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C8:E4:26:DF:A8:C1:84:29:A2:3A:7F:E2:08:11:D4:D7:DA:1C:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e81bfe0d-1206-36ed-9df5-aae084bdde4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:7f:66:01:87:0b:02:d0:61:16:9e:b0:2a:12:20:c0:ae:95:
c8:f2:91:38:2a:c0:e7:55:0f:48:49:a6:8b:2d:3b:58:7d:9e:
32:7c:8a:6e:ee:c9:56:91:c0:3f:13:1a:2a:5b:11:0c:cd:fc:
d0:10:da:ce:ab:95:75:e0:30:44:fb:dc:22:ff:33:3d:f8:b4:
7e:06:c0:10:95:aa:02:44:44:cf:22:58:3b:99:f5:9a:cc:aa:
6f:1b:ef:7b:b7:ec:76:e3:e4:f6:43:e7:f7:cb:5d:aa:da:55:
5e:63:82:44:86:31:ac:51:5f:fe:23:8f:8f:cd:5b:93:02:13:
d0:41:e7:7b:fe:a6:bd:e4:e9:48:81:7f:47:71:d3:c4:a7:f7:
3f:3c:fb:1d:70:f4:c5:40:cd:59:e1:e1:d2:ff:55:2a:b4:66:
7d:77:98:ff:ef:25:27:c3:2d:a2:c4:0a:52:72:e2:22:a7:fa:
5f:b8:8a:03:d1:7a:be:3a:cc:90:73:dd:e1:2a:25:a9:9b:19:
91:3d:7c:13:e1:46:22:96:bf:2e:54:67:eb:94:cc:1f:ed:1a:
a6:aa:e5:3d:97:a6:1f:91:c1:b5:8e:67:b3:de:0d:0b:44:ee:
09:e2:be:1c:48:e4:da:f0:47:d7:90:9a:0d:8d:ad:13:ac:aa:
af:d8:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:51:33 2025 by rpki-client