Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2131499-1640-3a42-927e-c47a058e11fc.roa
File: f2131499-1640-3a42-927e-c47a058e11fc.roa (raw, json)
Hash identifier: pQRV7pNowOHQ1tRdJrI9a1EGYavRxDAHp7qdNartEZM=
Subject key identifier: 47:5F:67:5F:B0:68:85:78:38:25:15:DE:F2:FD:56:1A:04:26:31:85
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A02B62810B074B3BBCB2580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2131499-1640-3a42-927e-c47a058e11fc.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.139.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:02:b6:28:10:b0:74:b3:bb:cb:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8e84f675-6465-4e2d-812a-437b1c6ce086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:78:b1:38:9d:7f:e1:1c:38:d4:9f:fc:4b:
36:d5:a9:c7:3c:38:fd:25:6f:6f:60:52:04:40:0a:
05:fa:db:af:15:d1:4d:26:f9:a7:b8:2e:25:33:58:
a9:00:94:7d:0d:ba:f7:fc:77:e9:85:4c:ec:54:67:
e9:4b:22:a8:c5:bb:2c:54:e4:42:a5:6a:6a:60:15:
6f:2a:f0:ad:ce:1f:59:6a:a7:08:cd:92:53:d1:3f:
52:aa:73:cd:90:b9:5a:e9:b4:5f:67:e6:26:df:37:
18:97:da:56:86:5d:fb:b0:65:07:ed:b7:3b:e1:46:
bf:d8:60:2c:75:50:c8:7e:d6:e7:8f:e9:7c:e6:4a:
40:80:bd:7c:f8:d1:db:09:c1:a9:e5:0e:a2:2c:d2:
23:45:50:ff:20:0f:84:52:d2:88:02:a1:d3:06:81:
8a:43:01:3d:b1:c9:ff:38:26:fd:3a:1b:33:4e:69:
92:5d:13:95:b4:6b:51:34:0b:69:4f:ff:da:3d:0e:
0a:8e:74:43:74:2a:33:e9:f1:f5:a2:bf:fd:4f:68:
9b:3b:61:8f:a6:e3:73:2f:ac:55:92:a7:5f:f7:06:
f7:9d:09:25:ab:34:fe:30:33:ce:e3:e1:5b:25:75:
85:ae:71:27:ad:fb:dd:a6:35:0f:e6:37:ae:53:79:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:67:5F:B0:68:85:78:38:25:15:DE:F2:FD:56:1A:04:26:31:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2131499-1640-3a42-927e-c47a058e11fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.139.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:57:31:2f:44:70:f8:47:c3:6b:5a:11:38:49:e4:c9:c3:98:
ce:1b:11:00:9e:7c:fa:0c:ed:a5:db:30:cc:11:4c:52:a3:6b:
53:be:84:1c:d5:cc:70:a9:5e:7a:a1:a9:34:42:60:5d:30:ec:
a3:8b:33:30:c0:8e:9d:d8:70:a0:85:dd:54:55:47:2f:a5:4b:
92:93:61:ac:33:19:b3:62:5a:46:d2:f4:79:89:75:01:66:6c:
f9:52:20:a2:7d:c1:2e:37:42:b1:15:95:5b:03:bb:6a:6a:cc:
1c:47:1c:8f:f6:b8:e9:42:72:15:62:f0:b9:c3:81:48:a8:e3:
64:3b:ef:27:2c:4d:e8:cd:90:65:79:17:5b:e1:86:74:e4:6c:
ab:46:1c:3c:58:a6:d8:ab:62:fa:b2:cb:96:7f:bf:6e:f2:05:
d0:b8:3a:26:a2:cd:d3:e9:ba:dc:4a:9f:b9:db:3a:64:c4:dc:
71:f4:11:19:ac:53:d9:3f:27:82:40:de:33:2e:54:37:d9:51:
ac:29:eb:2d:32:c7:d2:51:0d:52:54:7f:e5:6a:11:32:e6:99:
19:7f:0f:54:81:05:e3:1c:8e:e3:da:cf:4a:cb:89:d8:ac:3d:
8d:cc:96:a9:8b:c8:48:20:7f:9e:2a:54:88:e2:91:8e:29:22:
88:85:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:29:28 2025 by rpki-client