Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eff8438c-7d49-3d57-8ea0-96b4f0a33185.roa
File: eff8438c-7d49-3d57-8ea0-96b4f0a33185.roa (raw, json)
Hash identifier: MUJ+ychQ0p7zUyqeNYGN5wDANmapMkpKYDhL+W/lUKw=
Subject key identifier: D7:3D:95:AD:48:E1:C8:0B:5A:CA:19:8A:CB:E4:05:11:D1:F2:9A:C1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A73356B03939EC5A65100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eff8438c-7d49-3d57-8ea0-96b4f0a33185.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.89.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:73:35:6b:03:93:9e:c5:a6:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=0f47c49d-0649-401e-9083-9d3ec6d0531a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:df:7f:48:87:1a:ae:ba:07:fe:29:86:be:
c1:23:5f:36:7d:bf:2e:1c:10:90:d1:35:c7:9c:c1:
5c:ab:57:1c:42:9e:1f:1d:7b:34:aa:a0:ce:07:bb:
1a:64:4b:f7:8f:98:40:96:b7:38:6f:0a:b9:78:3d:
9f:15:f9:8c:e0:b0:fd:a8:6c:51:0d:53:de:ec:e6:
e6:c7:3e:93:0c:ce:18:73:24:d5:e6:95:3c:fe:59:
52:2f:e9:60:ca:17:d4:a5:85:df:af:61:f8:eb:85:
ce:b6:37:13:2e:31:9d:22:f8:f0:43:83:00:60:0b:
ff:7e:bd:0e:49:27:4d:4d:17:90:7e:98:68:39:74:
9b:06:fb:ed:ed:2f:67:63:ca:42:3a:03:01:af:ee:
55:c1:ed:be:fe:2e:d7:17:30:98:78:95:d7:68:0c:
ac:c5:36:7e:4f:3e:62:5e:19:23:cb:42:07:48:1b:
d7:82:0f:c0:5f:ed:99:da:45:ae:f1:6e:69:a9:83:
4c:fe:3f:1d:56:02:e1:c2:6e:fc:53:5c:79:0c:51:
34:e8:64:03:93:39:84:9c:85:11:c2:9a:74:9f:90:
99:b2:2c:7d:d6:9b:65:4e:54:70:e6:de:b4:85:bc:
7d:71:33:ae:ce:7c:ad:aa:43:52:a9:5e:79:c3:24:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3D:95:AD:48:E1:C8:0B:5A:CA:19:8A:CB:E4:05:11:D1:F2:9A:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eff8438c-7d49-3d57-8ea0-96b4f0a33185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.89.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:cd:5e:2c:88:1e:43:83:67:1a:8a:1f:6a:be:4e:42:c8:1e:
53:c5:8c:04:79:3a:2a:75:64:73:15:ed:fd:48:0e:c8:74:a1:
4e:a2:77:7c:90:ef:c5:fc:af:a2:d5:ad:47:f0:da:7e:87:bd:
94:91:da:60:89:74:97:76:37:c5:01:8f:f7:3d:bd:c8:9f:4a:
b4:41:47:94:9c:0c:cf:54:e5:34:31:16:56:cc:91:d4:32:55:
c0:81:ac:3a:8c:f3:fa:dc:aa:7a:55:b5:e6:6c:fc:c1:80:0a:
70:bd:f8:62:49:19:6e:61:f3:24:b3:24:56:75:72:40:6b:43:
e1:dc:76:69:4d:c7:d2:ad:31:b1:e4:01:ac:f7:7f:ff:05:5c:
3a:12:c2:5c:84:28:a6:7a:ac:99:a5:75:85:17:a6:4d:b4:26:
8e:d9:d6:0a:a1:4e:a8:44:54:f8:34:ce:f9:15:b6:a8:e7:cb:
f3:45:5b:3a:cd:17:83:83:d1:c5:af:9d:cd:78:22:c3:21:f1:
e2:79:27:a1:2a:ef:2d:b1:9c:13:f9:60:1c:f0:b8:0c:19:8e:
3c:fd:3e:3b:18:f2:77:bc:0d:fe:ba:9c:d8:02:da:7e:98:27:
5c:88:c7:8d:11:22:3c:ab:8b:60:9b:2a:72:45:14:71:66:0e:
16:7a:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:50 2025 by rpki-client