Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e99c556b-e9e4-30b5-b20e-1b6f01dda7e2.roa
File: e99c556b-e9e4-30b5-b20e-1b6f01dda7e2.roa (raw, json)
Hash identifier: NR41H6uJYwz5GmQoIJ87CncfBRjsvR1cwbwOD9KtlUk=
Subject key identifier: 80:08:BE:3A:A0:93:36:16:AA:FA:C8:B7:0F:61:D2:57:80:CB:EA:C7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A14DC5CECA50083AA42EEC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e99c556b-e9e4-30b5-b20e-1b6f01dda7e2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.128.0.0/13 maxlen: 13
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:dc:5c:ec:a5:00:83:aa:42:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=249119c3-6bf0-4a84-abbb-51a0027ce12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:14:d1:6b:c1:95:77:2d:9d:2f:27:d5:16:c9:
dd:3d:a1:d2:e5:b1:f9:d7:ce:e8:3f:a3:48:04:3b:
c9:ef:17:99:8c:77:6d:d2:3b:7f:3a:81:7e:22:30:
0a:3c:69:75:5e:a3:e8:ea:a4:b9:75:7b:8f:cc:ce:
45:8a:82:86:4f:ee:8f:37:e2:ed:12:05:0d:11:b5:
44:ce:65:67:6a:69:1c:0f:8e:e5:95:92:0d:cc:b0:
fa:b0:6b:01:f9:44:8f:4c:fa:ed:46:32:c6:f6:b3:
06:d4:65:d0:f2:82:af:34:9b:c2:29:c0:a8:31:45:
6b:a6:7c:e3:1a:45:5b:47:3d:27:2c:c5:f9:96:0d:
45:c9:4a:9e:94:67:65:3d:9e:78:32:f4:5d:ef:46:
a5:30:ef:4b:d5:a6:c4:b5:55:53:0d:20:42:7d:0a:
7f:2b:ee:47:87:98:61:88:ed:52:e7:d2:9d:8f:62:
d7:a1:8a:6e:02:df:7b:8e:a4:0a:04:28:55:73:9e:
24:36:a0:22:b4:fd:26:8d:a9:f4:dc:b5:f2:a6:83:
00:33:56:99:60:38:6c:9d:61:01:a7:6b:d0:81:db:
ee:e5:34:13:fc:8c:28:4e:ca:73:e1:ce:fd:1c:9e:
73:90:e5:a4:a1:53:9e:7f:b4:14:83:19:ca:4b:ff:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:08:BE:3A:A0:93:36:16:AA:FA:C8:B7:0F:61:D2:57:80:CB:EA:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e99c556b-e9e4-30b5-b20e-1b6f01dda7e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.128.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:1b:ca:54:2d:2b:63:8a:82:2f:0a:33:6d:a4:22:76:1f:52:
ad:00:0a:35:36:d3:06:75:71:7a:ae:c6:fd:c3:0e:20:7b:7c:
15:7f:b5:1a:2a:b5:e8:62:98:53:71:a3:c4:33:e1:2c:c8:d4:
4c:fa:7c:d0:ad:47:97:56:90:b0:be:37:e8:cd:e2:2d:65:c3:
0f:8e:58:66:ff:fd:36:59:61:c3:92:ab:b8:0e:6b:ea:3e:5f:
90:50:5b:37:a4:9a:eb:c6:a0:c5:8c:b3:92:17:f1:32:c6:48:
4c:1d:37:62:41:d9:57:92:d9:67:e5:e9:a6:09:5b:e9:59:2e:
b2:14:50:cc:6c:4a:26:ca:f0:f1:02:38:14:c7:4f:7b:95:6d:
a4:50:de:c1:c7:e9:71:1d:0a:ac:59:0d:c7:63:d3:e1:83:11:
cb:43:17:b4:a1:69:5d:8b:99:b2:84:01:f6:84:70:a2:d3:d2:
0c:ea:f0:8e:c1:6d:ef:a0:5c:d6:1e:18:43:8d:3a:66:c4:aa:
c5:14:03:da:e9:aa:e4:61:f3:c8:37:3f:9e:9f:ec:cf:0b:aa:
99:c8:18:43:f3:34:cf:3a:2e:1d:bd:6b:f1:54:9d:89:c0:d5:
a3:13:63:55:ad:12:4b:57:a2:d1:09:5c:3f:45:ea:d8:8e:31:
92:b9:ea:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:40:06 2025 by rpki-client