Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8bd23e7-af95-3811-9eff-f6b1acaa0df8.roa
File: f8bd23e7-af95-3811-9eff-f6b1acaa0df8.roa (raw, json)
Hash identifier: 7xptfjAy/db9VYKdr78TvwKB1OXdMbVaADj0p7iJ0C0=
Subject key identifier: 20:0B:98:64:52:17:8E:AC:D8:B6:BE:F4:0A:93:5B:23:00:7D:10:EA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842D8335D24A3523535D7D5BC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8bd23e7-af95-3811-9eff-f6b1acaa0df8.roa
Signing time: Wed 09 Aug 2023 12:00:00 +0000
ROA not before: Wed 09 Aug 2023 12:00:00 +0000
ROA not after: Sat 21 Dec 2024 05:00:00 +0000
asID: 396982
IP address blocks: 34.44.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d8:33:5d:24:a3:52:35:35:d7:d5:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 9 12:00:00 2023 GMT
Not After : Dec 21 05:00:00 2024 GMT
Subject: CN=afec8c5b-a838-4477-9134-eacd53e1c0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8f:27:ff:c8:84:34:74:82:b0:16:d6:b6:aa:
70:3a:51:d7:67:a6:d6:c6:c5:7d:97:95:c5:bb:4f:
8e:11:86:c3:0c:2b:02:cc:fb:dd:38:0c:c7:ff:dc:
4d:c0:ce:eb:f3:cc:00:65:d8:dc:72:01:8b:a2:7b:
3f:69:24:17:2f:05:15:dd:06:14:2c:12:1c:7e:2a:
d5:82:a4:39:52:c9:41:71:36:95:50:12:92:96:7a:
34:b5:45:a9:e8:78:ad:b5:03:5a:c2:4e:30:20:5a:
1c:06:1a:57:fa:0a:a5:ea:b3:0b:a9:4d:bd:bd:a7:
27:d6:2d:5f:be:2a:2d:0f:2b:48:00:97:76:6d:9e:
2d:6a:6f:3a:e0:39:8d:f1:81:8e:5d:39:ab:3b:bf:
9f:ee:40:ae:3a:6f:47:a7:39:45:30:ce:4e:07:b9:
a9:1c:8d:3e:3a:e7:ac:86:58:d8:1c:06:58:51:30:
dd:b6:dc:06:fe:b3:86:bb:1c:01:eb:e9:14:5c:d5:
36:af:9d:f6:3a:3d:0e:75:a6:68:d9:eb:f4:c6:e1:
c2:71:97:6e:bc:3e:78:83:4c:48:d1:46:bc:77:51:
ec:43:9b:5d:db:53:ad:d9:5c:85:89:3d:84:1b:48:
cf:04:59:34:c6:b5:be:06:a6:89:6c:8a:4a:05:99:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0B:98:64:52:17:8E:AC:D8:B6:BE:F4:0A:93:5B:23:00:7D:10:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8bd23e7-af95-3811-9eff-f6b1acaa0df8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:83:d1:70:f2:b4:29:d6:27:c2:d7:2f:67:83:d2:0d:67:9c:
a2:11:40:3f:9f:f4:98:1e:0e:89:a6:ef:e2:9a:fe:39:b0:e6:
35:52:29:9e:c2:f0:4b:a2:79:bc:16:03:24:73:14:c9:66:4e:
d2:81:2d:67:ae:24:90:de:41:57:6a:f9:26:41:7c:86:25:40:
87:0f:f6:ba:22:59:d4:ec:d3:51:d3:4a:c1:62:ef:21:0e:f1:
14:06:60:49:a8:b5:06:68:07:58:9c:87:9a:b7:67:39:51:b2:
b8:9d:bd:32:3f:27:ea:60:e1:51:17:ca:e7:cc:1d:d8:0b:74:
dd:96:62:52:ca:9e:4d:83:90:5f:38:73:b1:a8:22:fc:e5:13:
56:f2:5a:26:91:ed:8a:7f:a2:dd:7d:96:a6:20:7b:72:16:8c:
80:45:d8:55:cc:d7:f2:40:e6:27:ec:b4:d4:bd:84:3c:0e:c7:
7c:0a:a8:f0:b1:1a:e4:ec:f3:5c:f2:7d:cb:5e:4a:ee:0d:30:
2e:28:66:a5:64:0d:3d:ca:83:6b:5e:24:c5:a5:a9:1c:03:60:
c8:c9:16:f7:f9:bb:82:9c:6e:9f:b3:41:4d:00:43:93:34:b1:
74:74:6b:6b:2a:b7:60:46:88:61:f2:02:78:93:36:8b:63:34:
1d:7d:ab:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:02:31 2025 by rpki-client