Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f85127ca-a4f0-34b1-970e-eb270b88790d.roa
File: f85127ca-a4f0-34b1-970e-eb270b88790d.roa (raw, json)
Hash identifier: 6lbzrLiTjzZCAMsj6wYNhtf/Nqg4bqaSe91ZKfhaLwE=
Subject key identifier: 6C:88:C9:2F:10:39:84:8E:66:62:72:06:9F:76:27:B4:BE:B5:DD:D5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285840CAC50DC67695E8AAA89BF4C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f85127ca-a4f0-34b1-970e-eb270b88790d.roa
Signing time: Thu 02 Feb 2023 12:00:00 +0000
ROA not before: Thu 02 Feb 2023 12:00:00 +0000
ROA not after: Wed 07 May 2025 04:00:00 +0000
asID: 396982
IP address blocks: 34.128.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ca:c5:0d:c6:76:95:e8:aa:a8:9b:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 12:00:00 2023 GMT
Not After : May 7 04:00:00 2025 GMT
Subject: CN=91a85f3f-7041-49a2-9d9b-d2c7878cca8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:f2:2a:af:e0:cc:77:de:a4:89:28:02:ee:
2e:99:7b:51:d6:0b:06:40:a1:7d:2a:77:cf:3c:56:
dd:87:db:3a:74:f2:99:4a:18:a5:16:04:05:a7:a6:
b7:8d:23:b6:e2:a2:06:60:0f:bb:49:8a:39:df:05:
5e:bf:d2:5f:1a:5b:fb:01:f8:f7:eb:8d:98:be:0b:
53:5d:03:3d:50:d9:2e:43:30:76:ce:3a:21:93:0d:
a9:d3:90:0e:7a:ed:81:7c:2d:b2:73:25:b9:74:66:
d8:af:7b:38:e1:6d:02:81:9b:4a:03:bf:f8:35:36:
b9:49:45:a7:eb:6f:6d:2b:e8:03:66:d5:dd:be:32:
13:0c:a8:7b:a1:99:d9:54:bb:93:f7:ad:64:e5:fc:
b5:85:11:5c:a8:b2:e1:71:d7:45:e5:ef:7e:ea:a8:
5d:ea:b3:66:a8:5f:12:fa:a3:38:92:81:bf:b9:52:
a1:97:03:eb:a0:ed:f2:d0:e1:4b:45:c6:bc:0c:91:
5a:21:be:b3:b7:5d:fa:f4:1c:80:53:33:33:e2:e9:
af:2f:b7:a0:89:f9:eb:10:98:06:75:12:ac:8d:4b:
9e:15:62:c8:6a:83:0c:e0:16:5a:76:02:96:ee:65:
42:a8:e7:2b:3a:8c:0f:c0:96:fd:2f:8c:2f:a4:ea:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:88:C9:2F:10:39:84:8E:66:62:72:06:9F:76:27:B4:BE:B5:DD:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f85127ca-a4f0-34b1-970e-eb270b88790d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.128.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:ec:45:ce:30:8d:cd:62:7b:df:ec:e9:b6:cc:c0:00:26:41:
9f:68:e8:23:00:5e:67:87:23:80:a3:48:9b:97:31:45:7d:1f:
78:4d:5c:a3:f7:f3:44:76:88:82:15:bb:b5:a2:7f:5a:e7:f0:
39:5d:64:ac:51:ab:f4:00:66:35:8f:32:59:30:8f:e1:04:c6:
2a:a4:e0:6a:ab:b6:39:cc:72:20:31:4a:4d:fa:15:f9:b3:46:
cb:03:b3:b1:44:7b:97:b7:47:84:19:45:52:0b:66:f6:52:c8:
49:1d:06:3a:bf:ce:f3:17:54:3c:0a:1c:f7:e6:1c:46:cf:97:
39:11:a3:0c:3f:f7:14:f6:3a:8b:29:ee:e3:f7:ec:66:c2:20:
3f:81:0e:c2:ee:84:b8:25:19:e0:63:ab:f4:f6:c9:7e:66:7a:
a2:67:7d:41:f2:a7:ce:72:cf:d9:23:a4:ee:bd:4a:94:d1:5e:
73:d7:f2:6c:40:15:8b:b1:18:6f:99:7d:1d:6d:ac:fb:fd:6d:
cd:c8:bc:9d:2e:b7:f9:40:93:68:b3:e1:9d:74:db:45:68:c6:
51:68:44:84:8a:05:a6:47:4a:7d:f6:8b:3a:cd:ee:f9:56:d6:
02:79:dc:75:65:40:26:5a:05:88:a4:d3:b1:5b:95:61:4b:e9:
d0:64:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:16:52 2025 by rpki-client