Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee4408e2-a84e-3ff3-be5b-2ae2058a6000.roa
File: ee4408e2-a84e-3ff3-be5b-2ae2058a6000.roa (raw, json)
Hash identifier: e8ti5+DVZOjtfiQ+m3jWVfyXOnPePp1WiY/tIUcPZ8E=
Subject key identifier: 0D:9E:38:A7:6B:73:2B:9A:A9:B6:DD:AC:33:34:0C:8B:58:51:C7:6D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583BA87402BC4BF2E1821960C660
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee4408e2-a84e-3ff3-be5b-2ae2058a6000.roa
Signing time: Wed 20 Oct 2021 04:00:00 +0000
ROA not before: Wed 20 Oct 2021 04:00:00 +0000
ROA not after: Mon 22 Jan 2024 05:00:00 +0000
asID: 396982
IP address blocks: 34.170.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:a8:74:02:bc:4b:f2:e1:82:19:60:c6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 20 04:00:00 2021 GMT
Not After : Jan 22 05:00:00 2024 GMT
Subject: CN=7e5adf15-0520-4f09-8417-a0c2f96090e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:ed:8e:9c:e1:44:d0:57:a6:22:c3:5f:95:
c0:7a:b9:08:76:b9:ba:9e:8b:fb:52:7e:32:be:f5:
7e:0d:f9:5f:96:54:61:69:da:4c:27:b4:aa:2e:aa:
ca:56:b8:3b:4e:3a:c2:c2:8f:53:c8:f6:b7:fc:7b:
31:a2:5f:0f:b0:de:dd:14:db:0f:3d:2b:74:1a:f8:
69:96:6d:b8:bd:80:25:ec:91:13:0a:1e:f3:8f:92:
b3:47:62:2b:cd:bf:10:89:9f:62:9b:fb:d9:dc:da:
9f:11:04:fe:f8:b8:60:f7:bd:97:2a:66:c6:f5:60:
07:09:f3:5e:4c:95:7b:06:8d:b1:32:00:b8:50:b5:
bd:23:4f:5f:d9:41:18:aa:92:d6:7c:1d:07:70:32:
05:5a:5e:4f:72:1f:4c:fc:08:3d:0f:17:1b:2b:d3:
73:4c:0d:f2:e3:bd:59:0d:ac:4d:ee:d0:80:5f:66:
60:b3:ee:ce:af:7c:15:64:d6:24:e0:fc:7f:f9:a7:
7a:10:22:3f:08:5a:03:d9:6d:20:13:2f:10:ef:85:
02:ca:72:d2:77:3e:15:8b:40:92:c7:7f:5f:a5:a7:
43:b9:d6:8c:7d:c6:14:3d:f6:fd:a9:0e:45:24:82:
65:f0:e3:ea:96:d8:cc:60:77:fb:9e:50:e3:01:d0:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9E:38:A7:6B:73:2B:9A:A9:B6:DD:AC:33:34:0C:8B:58:51:C7:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee4408e2-a84e-3ff3-be5b-2ae2058a6000.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:24:1d:c6:40:f7:0b:81:25:d2:48:5f:30:0e:80:07:c3:04:
59:86:11:12:54:74:90:e5:4a:e9:31:a2:ab:3e:24:ad:a5:34:
1c:71:cd:8f:1d:3e:f8:f5:70:2d:4a:0e:21:55:56:d1:b5:52:
f2:6c:ee:f4:e3:77:14:6b:e1:9f:4e:74:4c:5d:7f:fa:49:80:
c7:20:13:97:34:d1:8d:27:8a:cc:65:8c:ba:40:92:53:35:e2:
89:82:bc:2a:ff:5a:bf:4e:6d:24:4d:66:c5:16:24:75:da:ef:
56:eb:a6:f6:0b:cd:e7:d6:e0:04:10:50:7d:dd:dd:95:4c:b9:
c4:2e:49:20:97:00:7a:38:2f:f6:b1:75:a4:e2:49:d1:3a:37:
10:cd:ee:15:29:06:ec:e5:55:8d:b8:62:b6:d3:7c:05:58:a4:
7c:68:80:c6:85:15:8c:b0:a3:23:9d:32:9c:f5:2b:23:c6:44:
89:41:a5:9d:b8:b4:cd:9a:a4:28:45:18:1c:38:60:db:32:fd:
ea:cb:55:7e:e6:bf:f4:84:4b:93:f2:bb:42:e1:c0:ec:2d:75:
c6:19:72:84:bf:d1:7c:82:63:bb:d9:61:d3:16:5e:87:53:71:
52:be:2d:ac:07:87:15:f2:47:09:fe:94:e0:96:b2:9b:a5:33:
f1:c7:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:39:55 2025 by rpki-client