Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f925eae0-263b-317d-b53d-420cfe0b51df.roa
File: f925eae0-263b-317d-b53d-420cfe0b51df.roa (raw, json)
Hash identifier: ERIObRGVz/lwPy/CrtxJHkoAgBcKEb1oj8N9Vx+KJoI=
Subject key identifier: 4A:40:69:09:5F:41:ED:79:84:59:76:E6:D1:26:AF:00:17:E8:60:2F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A23CD483F66A66A7AB5D180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f925eae0-263b-317d-b53d-420cfe0b51df.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.84.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:23:cd:48:3f:66:a6:6a:7a:b5:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=73f4568c-6648-41b3-968e-c5a8b3d05dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:0d:ac:e2:c3:89:6b:36:b7:54:1d:77:5f:
53:be:19:90:6d:dd:c7:a5:a5:95:79:ae:1d:1a:71:
2a:2d:6c:cc:a4:6e:0a:23:e7:2d:ca:08:f5:20:41:
c1:4c:cf:22:be:28:2d:cb:b4:39:ea:f8:59:5c:fe:
49:c8:51:52:c9:c0:70:ef:33:37:ae:6c:3c:80:0b:
76:96:5d:b0:45:56:1f:69:f5:ac:45:e6:e3:b0:de:
61:d8:0e:b0:df:48:dd:db:26:b0:a4:10:fe:ab:86:
a4:c6:8d:5c:04:5f:d7:8d:34:89:02:00:57:b7:55:
95:0a:57:30:d4:47:4c:ea:d0:87:95:b1:4f:18:9b:
ed:1f:74:a4:74:c1:7e:4a:64:13:d5:51:04:76:af:
88:f3:9a:31:34:a2:62:a9:7c:f6:6a:00:e2:c1:e3:
d7:03:3c:11:d0:ce:d1:e9:36:a4:44:37:74:51:0a:
32:21:aa:c9:22:c7:7f:b2:39:51:98:ae:ae:80:e6:
fe:94:3c:01:13:94:2d:ea:29:c2:f2:0b:c3:73:73:
93:e3:14:7c:58:8a:1e:ce:73:41:50:58:23:73:81:
8d:d3:1b:60:2c:a6:ff:6c:01:1a:5a:26:36:cb:62:
6c:8b:73:51:3c:35:0d:6d:9e:46:c5:5e:4e:63:f6:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:40:69:09:5F:41:ED:79:84:59:76:E6:D1:26:AF:00:17:E8:60:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f925eae0-263b-317d-b53d-420cfe0b51df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.84.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:81:fc:90:11:bd:91:b5:bd:cb:6f:c7:2b:4e:f4:ce:d6:09:
07:39:e1:65:bc:8a:f9:cf:d7:a4:e8:3c:01:cc:0a:67:9d:0b:
3e:cf:d5:44:31:6c:c0:35:81:5a:1e:6e:69:40:b7:bd:10:29:
3d:15:d1:8b:c7:80:3d:41:10:2e:62:9c:0f:44:9f:ce:8e:a6:
57:65:03:e8:97:05:20:ef:07:a4:a0:86:72:96:11:d9:70:ef:
72:dd:36:fe:05:af:88:b5:43:3f:b7:c7:c4:4f:bf:05:2d:2d:
a5:4e:03:a1:11:66:e2:50:41:e2:02:94:58:2d:4d:93:ea:1d:
0d:3a:60:d8:a1:03:7b:56:13:a1:00:61:cd:33:73:7a:41:ec:
70:6e:dc:3e:f4:8c:2a:7c:03:83:20:e0:29:2b:e5:2f:11:b0:
e5:bf:8f:fb:00:83:ac:f3:bd:24:c7:a7:1e:06:df:cb:27:6c:
42:02:dc:a3:ef:15:06:b2:c4:28:bc:72:12:7e:8e:8e:4e:d8:
d1:e9:aa:ee:95:e1:83:f8:b0:a9:ea:0e:27:f8:cc:1c:12:01:
0d:a5:40:b9:79:33:49:42:b7:a5:0d:1d:0b:19:b9:2b:67:63:
cc:e3:b2:a9:e5:23:8a:03:cf:55:b1:63:53:6f:69:be:4f:a0:
02:e2:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:17:54 2025 by rpki-client