Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb080670-975c-3a89-a2c0-85a6fabe3ac2.roa
File: fb080670-975c-3a89-a2c0-85a6fabe3ac2.roa (raw, json)
Hash identifier: YqblkL7ajRw4bq5XZfTjuibaHc/G55xOnGo/iVbXKvo=
Subject key identifier: 58:2B:AD:57:76:68:E4:5A:3E:5F:44:C8:34:57:5C:4A:87:C5:D2:F8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EC0CFC01E3490712DF61B0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb080670-975c-3a89-a2c0-85a6fabe3ac2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.76.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ec:0c:fc:01:e3:49:07:12:df:61:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d49e1ebc-dac3-436c-9890-d794b8a437c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:b5:59:f7:1f:41:d7:cd:38:63:b9:60:09:
a6:78:09:d5:ea:36:e5:8e:85:70:08:9b:b5:7d:f1:
0e:74:6e:f1:67:7b:02:23:6f:54:e0:b2:4d:e1:13:
e0:94:45:a0:2f:39:78:aa:23:3c:ca:22:78:21:21:
39:ec:72:4f:f7:7c:c9:06:60:a7:10:be:ae:6f:a6:
01:4a:a1:47:e0:76:a9:5e:ba:5b:6a:31:82:ec:57:
d2:23:35:69:7f:8f:c1:0a:88:d7:ec:16:30:20:2f:
1c:99:84:55:1f:b9:a9:7b:2b:ee:92:3f:03:14:00:
22:b8:f0:c2:a4:a7:e2:e5:ba:1f:24:1f:50:de:f6:
74:10:41:4f:ac:b5:37:a9:5a:32:5d:f7:ac:f0:82:
39:ab:5b:b9:7c:dd:88:68:95:da:08:d2:be:24:bc:
7e:05:82:6f:bc:20:f7:17:29:1e:56:6f:45:c9:fb:
dc:e4:33:f5:00:68:bb:a4:29:9d:b4:e7:a9:94:c3:
0f:45:22:f4:91:34:0f:bb:3f:e4:cf:57:ae:35:ae:
b4:c4:1c:c7:5a:40:77:92:65:38:6d:43:b5:93:2b:
dc:4f:bf:29:b0:5d:38:07:4b:da:5d:87:5e:b7:36:
b0:66:02:90:6b:d0:e3:18:5b:53:7e:f9:b7:e5:4b:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2B:AD:57:76:68:E4:5A:3E:5F:44:C8:34:57:5C:4A:87:C5:D2:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb080670-975c-3a89-a2c0-85a6fabe3ac2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.76.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:6c:33:ca:9a:d3:f1:1f:42:7f:2d:3b:19:31:7b:9d:5f:9b:
d0:06:a9:65:47:86:dc:1d:0c:b1:f4:c8:84:d8:9a:f0:e5:13:
41:c3:19:bf:90:32:56:c1:66:79:1f:cb:93:1f:19:e4:f4:dc:
b0:db:e5:a2:39:6f:41:d3:70:ff:da:45:1d:5b:37:bc:7e:91:
db:e2:67:81:e0:82:ab:6a:87:c2:a8:a7:75:08:9c:f7:1a:30:
60:30:b8:c0:80:f7:8c:25:e9:47:bb:12:5b:43:df:40:54:40:
02:10:8c:ee:55:9b:c2:d7:08:aa:42:b8:52:a1:d6:f8:ab:4f:
94:fe:45:79:18:f6:ce:e4:b2:41:fe:28:ba:0b:36:fe:26:7e:
e5:93:ed:6d:88:60:d4:1c:21:bf:f2:3a:c4:18:dc:43:39:26:
29:a7:5c:d3:2f:54:65:af:30:3d:0b:2c:64:58:c3:fe:24:00:
ee:37:ff:49:f7:51:40:18:20:f9:61:d7:65:56:6f:2e:5e:bc:
02:75:dc:02:8c:25:1d:4a:15:52:2a:d4:82:40:a9:71:07:81:
5e:0e:c8:4b:bc:16:96:5d:ac:e4:60:68:7e:02:f9:ec:da:de:
5f:36:b7:69:08:63:c7:5d:59:cf:34:14:9b:52:f7:25:42:c4:
3e:4b:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:44:42 2025 by rpki-client