Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f44418b7-081f-3d88-87ba-2b935570a4be.roa
File: f44418b7-081f-3d88-87ba-2b935570a4be.roa (raw, json)
Hash identifier: OQpELgYfHXQoAMlbm51O6twa6UEcZHSAbCw9aBIWMuc=
Subject key identifier: 48:D3:7C:AB:A8:37:1F:B0:F1:19:F2:97:7B:62:25:77:42:4E:9B:8E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BE85998F37468E9287487400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f44418b7-081f-3d88-87ba-2b935570a4be.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Sun 29 Sep 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.154.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:be:85:99:8f:37:46:8e:92:87:48:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Sep 29 04:00:00 2024 GMT
Subject: CN=3d12a66b-fb9f-4040-81d9-f28a3ae767d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:7c:86:e1:c5:71:a5:b1:4e:86:00:76:77:
a9:2a:09:25:55:16:8d:28:42:75:f6:98:0a:81:32:
46:a3:ed:27:c4:21:57:74:74:be:7e:04:2c:db:42:
22:7e:23:9b:c7:cf:99:9c:17:2f:4f:ff:fc:be:25:
65:52:4e:13:c4:4e:a1:df:0a:d7:cc:3c:4d:f7:8d:
f3:eb:3b:e4:a1:5e:1c:43:0d:17:74:69:6e:4b:6c:
fa:5c:54:4a:51:a3:2e:24:8e:ab:9a:00:2d:58:c6:
0c:20:4e:bd:ad:58:ed:51:19:52:dd:b3:ca:74:41:
01:37:27:36:7c:4e:5e:9f:a2:0b:1c:a2:6e:f8:f1:
51:21:30:07:bc:d1:11:c0:46:b8:db:bb:7b:45:5e:
58:bc:72:50:08:2f:74:5d:29:51:eb:53:92:75:a0:
cc:13:a3:b8:ba:64:36:10:0b:04:f6:14:83:fd:38:
eb:a3:0d:2d:6f:05:46:fc:cb:da:a9:c4:40:cd:03:
b2:17:2a:08:b4:e6:11:fa:65:b5:14:cf:90:50:bd:
c1:3f:14:04:1b:86:d1:0b:66:0e:18:30:2a:95:7c:
39:59:40:77:21:de:1a:36:52:46:6c:9b:0f:0f:ba:
3c:f6:b8:b0:4b:41:c6:e8:01:49:00:1f:83:a6:c0:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D3:7C:AB:A8:37:1F:B0:F1:19:F2:97:7B:62:25:77:42:4E:9B:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f44418b7-081f-3d88-87ba-2b935570a4be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.154.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:82:fe:cf:e3:41:53:48:fc:1c:e0:b8:13:5e:6c:10:85:57:
44:5c:6c:d2:1d:58:13:a6:ca:95:23:75:22:1a:be:e6:96:1d:
08:d3:2d:80:80:00:1b:e5:93:b0:2f:03:22:05:6b:e4:14:69:
62:c3:b5:4b:05:12:26:d3:f1:74:17:1c:1b:55:d7:f7:23:31:
b3:a9:c6:e0:fc:35:89:2d:dd:62:41:46:ed:e5:b5:37:f0:de:
c4:f4:83:63:77:17:69:77:76:08:6b:aa:e6:0d:c3:58:7c:14:
23:9b:ba:77:a1:14:14:84:27:38:ea:08:3d:b1:0e:5f:1a:c3:
4c:95:85:e6:60:ed:53:71:61:7b:b3:7f:4e:24:ef:0c:a4:2f:
a7:98:51:4b:e9:ad:58:66:f2:40:8a:5f:04:df:c4:03:49:40:
36:69:e6:72:34:6c:a2:64:49:3b:f7:36:fd:a5:2f:e6:7e:75:
a9:af:95:85:9f:9c:b3:96:e3:61:40:68:f9:54:f0:21:ec:07:
18:05:79:5e:9c:e1:47:44:ff:4f:cb:af:ca:94:05:a9:ae:75:
72:c8:ed:47:e3:39:e9:6a:af:cf:aa:75:94:f8:a3:84:87:2a:
68:01:78:d5:f5:2c:50:da:f6:8f:37:51:09:6f:20:42:b3:7c:
10:63:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:01:36 2025 by rpki-client