Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21dcd43-2598-3e88-a41c-8859bd9b9981.roa
File: f21dcd43-2598-3e88-a41c-8859bd9b9981.roa (raw, json)
Hash identifier: PC7vdv2HWk9sb1yjQmVb9hk+Oa7UBK2Y/CBMb2Ihxyo=
Subject key identifier: C4:B6:38:9C:71:AA:04:DF:20:94:B1:A6:F4:A4:3A:64:96:4B:9D:CD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F277E560006A8978ADB000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21dcd43-2598-3e88-a41c-8859bd9b9981.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.75.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f2:77:e5:60:00:6a:89:78:ad:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f535d41f-a527-4cef-b872-0fa8dc9f3564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3f:48:43:e3:3c:e0:3b:4f:3e:70:f1:74:a6:
bc:ad:70:e6:50:e0:80:64:6c:02:28:b9:a7:c3:71:
27:f9:93:74:b9:27:47:7a:e4:9a:3e:89:f1:83:12:
1a:b9:2d:d7:bc:5d:88:5f:52:96:75:f2:bd:d5:e3:
09:a4:da:67:c0:69:38:bb:98:bd:76:09:89:a3:b5:
53:4c:47:d7:b2:53:88:6b:e1:e4:18:01:a2:43:f5:
9e:a0:22:f4:ea:67:14:2a:1a:f0:ec:30:9e:28:7a:
43:34:45:94:65:12:e7:66:63:50:d8:60:e0:9d:b6:
07:b3:26:ca:1d:db:a7:f7:1a:4b:3d:43:9a:17:28:
b9:3d:62:82:e6:63:65:83:8f:04:81:c8:24:c1:e0:
a2:15:8e:99:e0:2b:5f:59:85:56:de:5d:00:6c:c1:
2b:84:7e:a9:a5:c1:3b:26:f8:0d:c3:11:ad:2f:8f:
37:50:e8:a6:d4:32:ad:b1:ab:99:bd:60:2e:87:16:
c0:77:10:c5:32:e2:25:a3:89:89:01:85:b6:8a:27:
8d:72:c9:71:f5:60:04:1e:d4:1b:81:77:23:bf:0b:
e3:87:36:87:c1:dd:6f:c4:98:72:11:61:aa:04:34:
d2:c2:6e:05:4d:21:0f:16:e2:34:c5:a4:55:13:58:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B6:38:9C:71:AA:04:DF:20:94:B1:A6:F4:A4:3A:64:96:4B:9D:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21dcd43-2598-3e88-a41c-8859bd9b9981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.75.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:73:a1:c1:ef:19:7c:e2:50:31:68:ad:71:36:d2:e9:44:f6:
27:49:35:c9:81:e5:3b:73:a8:e2:d1:59:d8:89:b8:17:0b:eb:
a6:44:4d:4a:44:27:78:9c:b0:07:24:d5:33:dd:80:37:31:a5:
87:e9:2c:68:8c:45:c1:c9:a2:3f:b7:44:e2:db:cf:1f:ed:73:
9c:43:5b:91:da:ea:f1:24:35:c6:4b:3a:e2:ad:2a:18:fd:72:
e3:b2:65:ee:aa:83:04:cb:81:4c:9b:01:45:8c:90:89:72:58:
d7:10:11:d5:ec:d0:d9:d7:c9:f9:05:5c:99:4a:05:02:4b:6e:
27:3f:8f:0e:7b:05:cf:13:c5:93:d4:64:b9:cd:61:70:4e:eb:
a7:60:48:65:2a:67:67:88:41:78:78:b8:e6:37:ad:b9:87:78:
d5:10:7c:74:c2:de:3d:53:cd:58:7f:73:59:6f:de:6a:5a:3d:
98:78:e1:e7:27:5b:b3:7b:f2:1e:91:16:2d:3c:0c:cc:d5:37:
33:67:24:ca:a0:77:a0:17:80:b2:b2:ec:29:dd:83:52:08:5c:
27:f1:40:ba:7f:31:e1:4f:d0:f9:8c:7b:08:bd:3e:ce:3d:0c:
a9:52:e6:a7:73:cf:23:68:1d:15:b3:21:98:bf:20:e0:f9:53:
b7:b7:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:46:23 2025 by rpki-client