Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa5339d1-919f-3e01-9a9c-36d1009a7bec.roa
File: fa5339d1-919f-3e01-9a9c-36d1009a7bec.roa (raw, json)
Hash identifier: UqvIhZKyWYlTFlJUsqZ8SdE0QEIP44yUB1SK3fxVOyw=
Subject key identifier: 61:9A:4F:4E:35:B4:12:EA:10:37:54:27:F9:A9:A1:57:F7:EA:35:8F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F6C0FCDE93D13E78987640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa5339d1-919f-3e01-9a9c-36d1009a7bec.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.124.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:c0:fc:de:93:d1:3e:78:98:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3c683d18-bfd0-4c13-95e8-8500a8618194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:96:16:d2:cf:3d:a4:46:2b:08:23:92:e5:
c3:0e:96:2d:53:16:c3:a1:91:a0:5e:12:85:03:26:
c2:c6:77:c4:08:71:61:22:c4:30:1f:3c:75:b6:fa:
bc:50:3c:71:cc:56:7a:45:4a:33:21:c7:b4:82:01:
40:50:ab:94:e1:79:79:22:b8:78:b9:ce:e5:d4:2d:
c1:9a:11:14:ce:fb:80:68:16:07:d1:0e:93:d8:e8:
6e:6b:79:b0:33:e1:44:fd:e0:3b:61:d5:a4:87:97:
74:8f:8a:de:6b:3e:11:bb:f3:6e:1b:61:a2:db:a5:
f0:3f:b9:57:94:58:dc:ef:95:4b:f5:f0:d4:fe:4c:
2d:85:b6:af:a5:03:c0:da:33:d6:d4:c5:8f:3e:34:
9a:eb:78:f2:d5:74:48:9b:b9:c8:00:34:18:75:0d:
f6:24:73:36:a9:de:68:53:20:94:68:a9:d8:b2:ed:
85:d6:02:19:a8:49:5e:0c:22:bb:3c:b4:71:df:24:
63:8e:58:bf:53:5c:6b:71:8c:4a:a6:4f:c7:fb:ff:
e8:6e:9c:1e:78:43:6d:89:1d:db:0e:79:0c:28:f2:
b3:c9:25:78:05:b3:06:a9:6e:63:d9:bc:32:f0:01:
d5:e8:46:30:d6:84:e4:4c:37:6f:84:a8:a2:4f:11:
f7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9A:4F:4E:35:B4:12:EA:10:37:54:27:F9:A9:A1:57:F7:EA:35:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa5339d1-919f-3e01-9a9c-36d1009a7bec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.124.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:3b:95:b1:16:66:8a:8b:e8:cc:f7:49:89:0b:f2:c6:f5:44:
5b:a6:c8:ec:91:c9:c6:30:ae:33:5f:45:c5:d8:77:ad:5e:a0:
24:d5:94:fa:04:b8:c8:26:9e:5d:41:32:99:6a:29:fc:e2:72:
6a:b3:9d:63:0d:c9:fc:86:48:9a:af:16:8e:7a:29:df:0c:1d:
06:56:9b:be:01:e4:ba:f2:25:ac:08:8d:31:14:ad:a9:a1:70:
24:5a:84:5f:fc:d5:e2:df:7c:ef:40:6a:37:f5:8a:e2:df:9b:
95:94:32:0a:7d:c8:83:56:c1:91:46:cf:66:08:53:82:a4:6a:
2f:93:91:be:18:f6:04:74:30:8f:11:b9:36:49:5b:bb:90:4f:
52:98:e7:00:3f:b7:37:a2:8c:0b:13:f3:94:39:18:dc:e8:d0:
6a:d6:1a:4f:db:fc:56:d5:ab:83:1f:f1:9f:e2:b2:4b:f1:2d:
4c:97:96:d0:92:8c:53:b6:33:81:bb:ad:b4:d2:ac:cd:4e:d0:
c8:42:eb:a9:85:fb:fb:a4:8f:27:9c:7d:ce:1e:86:f6:55:1c:
a7:fe:aa:ba:66:7b:ae:21:2f:d3:7c:9d:c2:3d:4d:91:ad:74:
20:87:7d:df:2f:08:bf:3f:9b:62:c5:12:2f:d8:5d:a9:d6:2a:
9c:83:36:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:24:58 2025 by rpki-client