Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faa10851-26ae-3bd7-860f-740c06468c2e.roa
File: faa10851-26ae-3bd7-860f-740c06468c2e.roa (raw, json)
Hash identifier: og2qwpS4SIOTPv3TRc6p8NntxyARGQEC3OS31ZWDcdQ=
Subject key identifier: 94:DF:18:9D:97:CB:04:BA:5A:25:53:16:20:9E:A1:EB:81:A3:06:91
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583D20BF1B1B5DADC270A2C78F78
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faa10851-26ae-3bd7-860f-740c06468c2e.roa
Signing time: Fri 04 Mar 2022 05:00:00 +0000
ROA not before: Fri 04 Mar 2022 05:00:00 +0000
ROA not after: Wed 05 Jun 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.153.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:20:bf:1b:1b:5d:ad:c2:70:a2:c7:8f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 4 05:00:00 2022 GMT
Not After : Jun 5 04:00:00 2024 GMT
Subject: CN=161e3f0d-ac50-40c8-8c9b-aca6bed94488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:26:48:aa:aa:b3:de:a0:04:73:01:77:d7:
c3:8a:e7:4c:e5:c4:66:7d:08:4f:ca:ad:eb:38:1a:
ed:cb:c5:5d:3c:66:ac:2b:77:5f:c6:6f:9d:06:ea:
a9:8e:a2:82:8e:4d:c3:1a:0a:a4:0b:61:71:b4:a8:
9a:ca:b4:6b:75:88:1e:0f:a6:ae:d6:20:e2:30:ca:
63:0e:6b:92:78:59:e1:da:4e:26:6a:2c:af:04:ac:
a1:92:5e:75:d3:06:92:22:c7:7c:a6:ee:f4:c0:31:
52:ad:a5:f6:e7:0a:9b:ee:41:fc:6b:bb:da:bf:48:
1b:bb:bd:f5:75:cc:e8:1a:a0:c1:88:cd:6f:0f:6b:
1a:b8:d1:f9:02:48:99:25:17:ec:29:db:73:c1:38:
54:3c:bd:f1:99:2e:c7:3e:ac:86:b3:c7:ab:ed:9f:
7e:9c:06:e7:61:e1:fc:a0:64:91:25:76:84:05:9a:
99:01:87:39:d1:d2:0f:72:1e:f1:52:29:a1:c2:a4:
b7:b5:18:a7:2f:0e:c9:69:fa:a7:4d:7e:5a:28:d9:
1a:a1:bf:f9:f0:aa:6d:cf:c2:d6:e3:a3:4e:1d:69:
53:56:6e:ea:c2:00:6f:0a:86:d6:35:da:f8:03:52:
25:1e:b5:50:28:00:1b:ac:df:7b:1c:10:77:ca:76:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DF:18:9D:97:CB:04:BA:5A:25:53:16:20:9E:A1:EB:81:A3:06:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faa10851-26ae-3bd7-860f-740c06468c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.153.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:61:2d:4c:20:f5:e3:59:63:bf:0c:15:a6:11:3c:0f:fa:a0:
60:49:35:82:58:c5:18:7b:36:f3:6d:00:d0:9d:7f:25:6f:62:
19:2e:08:db:ed:ef:91:b3:1a:6b:30:74:4b:40:9f:0e:05:42:
21:0d:35:56:b4:cc:4e:c1:48:5c:b4:d0:e3:a9:8a:f4:b7:a5:
1c:e2:dd:40:12:4b:75:7b:63:d9:bf:1c:c5:8c:e2:b5:8b:33:
6a:9f:bd:d5:5d:82:90:16:fe:96:78:b4:21:ab:47:fc:43:89:
59:42:06:10:e2:97:28:74:92:95:1a:fe:92:a3:dc:2d:df:89:
5e:b2:10:5d:aa:a7:5e:5a:9f:4e:cf:82:32:d8:ee:67:53:d9:
22:08:f7:37:e1:39:6f:02:8c:ba:3a:bd:98:0c:3a:d3:28:ff:
4c:07:41:08:aa:80:e9:c0:2b:b0:da:8c:d5:e6:9c:c3:19:2f:
22:a2:50:ad:4e:32:56:3d:e7:70:b3:25:53:3c:01:ef:d9:55:
ff:dd:6f:54:41:52:68:48:d6:e8:b6:3c:9a:41:62:fa:b3:a0:
33:4c:fc:6c:c7:41:23:80:c2:7f:2d:f0:ba:8a:a0:aa:8f:5a:
b3:08:74:4b:96:1a:01:fa:60:d0:57:76:fe:fb:a1:36:41:1c:
d8:04:5a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:32:01 2025 by rpki-client