Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7df6b53-0272-36e4-a2f1-8e9f9e78f3e2.roa
File: f7df6b53-0272-36e4-a2f1-8e9f9e78f3e2.roa (raw, json)
Hash identifier: +DRrJbEjCStUriYltNRLbbbeKs0c/cGYcMD5UkwLNBo=
Subject key identifier: 81:E5:34:9E:C2:65:BB:35:F3:C8:22:08:77:A6:CF:6D:D5:9D:EE:F1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285844720B601106E48DCA3D8821C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7df6b53-0272-36e4-a2f1-8e9f9e78f3e2.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 396982
IP address blocks: 34.159.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0b:60:11:06:e4:8d:ca:3d:88:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=8dc12f45-52fd-4747-9381-252a97e79d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:dd:72:3f:27:0f:4e:73:26:1e:45:97:bb:
1f:1b:23:82:eb:e9:02:f2:ab:73:82:d4:98:9b:c2:
56:48:cf:a0:c7:bf:a4:fd:ee:76:6d:2d:e6:cb:ae:
8d:c3:f4:48:02:96:e8:53:23:d3:0c:ea:84:70:2e:
56:89:2f:2c:4b:80:19:76:74:b5:cc:15:07:a6:a7:
eb:18:47:f4:54:1e:47:4a:e5:ce:2d:d2:d5:f8:c1:
f0:38:40:af:a5:8f:31:ce:db:bf:b8:a1:40:ff:f5:
30:8d:4a:63:02:df:2e:da:96:2d:c3:6f:e5:ad:8c:
ce:d4:4a:f4:02:e5:05:50:5f:4f:d2:f2:be:0e:71:
3f:81:14:9f:36:57:00:f2:d2:42:ea:df:41:af:54:
be:24:e4:c5:cb:34:22:a6:5f:75:5f:17:75:c2:8f:
a9:7a:41:00:de:97:84:a0:d5:26:65:28:73:5a:86:
44:77:b1:94:5f:92:b3:5d:3f:e4:7c:a0:da:38:03:
e8:5a:89:52:7e:78:64:9a:9c:00:d1:56:5b:a2:73:
79:d9:02:df:d0:8d:1a:12:e0:94:53:84:2b:9d:b7:
80:33:28:39:23:7c:99:35:f4:da:ce:b4:c5:55:8e:
ba:f9:0b:9d:28:4f:dc:cd:14:6c:7c:59:8f:db:4a:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E5:34:9E:C2:65:BB:35:F3:C8:22:08:77:A6:CF:6D:D5:9D:EE:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7df6b53-0272-36e4-a2f1-8e9f9e78f3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.159.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ce:9c:7a:e4:0e:cb:69:32:4b:6a:e2:17:b5:17:bf:2a:e1:
eb:9b:2c:d7:49:7f:50:30:1d:f3:e8:5d:b0:ae:52:4e:57:59:
20:48:64:dd:3d:b7:eb:a6:b6:28:a3:ad:70:15:a3:9e:b5:f1:
40:bf:25:b5:93:7a:55:b3:8c:04:91:46:e1:cf:a8:8a:fb:a7:
95:ef:b0:13:98:3d:2d:db:5a:11:76:5f:ed:29:c4:20:30:8e:
66:2c:de:1c:c3:94:44:25:6e:fe:d5:6e:23:78:86:3c:7a:0c:
81:a3:e1:73:22:d7:81:a5:be:70:66:ec:8c:39:c1:12:28:0b:
c2:66:7f:eb:8f:99:90:69:9d:86:55:a7:fd:c2:ad:6d:c8:e8:
f1:b6:6f:d0:f3:63:e1:e4:d2:9a:61:cd:f5:31:a3:0f:e1:ed:
a2:f9:ab:b1:02:db:f6:0c:e9:26:93:53:20:91:39:50:8a:66:
cd:7c:f6:ab:d0:3c:45:39:22:c2:2b:86:e0:d9:94:78:b4:06:
87:c6:20:b0:0e:c7:dc:6e:89:67:ad:0d:9d:c6:63:18:fd:26:
43:20:dc:6f:97:ca:a1:b9:af:3a:cd:af:fa:8e:b4:88:3b:8b:
65:84:a5:05:58:f3:2d:44:d7:1d:31:d2:69:af:cc:56:f8:b8:
68:55:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:46:51 2025 by rpki-client