Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb32a4e9-f480-3c5c-b53c-6b2238ca8c7a.roa
File: fb32a4e9-f480-3c5c-b53c-6b2238ca8c7a.roa (raw, json)
Hash identifier: DF8wZoPA0SCfOMquIgOp45z0KqXfK6OJE0JE31+G9nk=
Subject key identifier: 49:FC:AA:C5:D8:09:FC:86:B0:B9:4A:4A:14:61:11:2F:8A:96:40:BC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A190F925AB408B653A4F2D8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb32a4e9-f480-3c5c-b53c-6b2238ca8c7a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.119.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:19:0f:92:5a:b4:08:b6:53:a4:f2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f8c69620-737a-4bb2-825c-4d912775a0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:3d:c9:f8:6e:a7:bb:6a:d7:36:31:11:e6:
d9:fa:1c:38:fb:ff:8c:a7:ac:32:89:81:38:11:10:
17:a0:30:8d:fa:fb:79:87:86:0c:e1:d3:df:ed:b0:
0a:e9:ae:df:2c:9c:4a:ce:d9:d7:ed:c3:fd:50:8d:
2b:a5:43:f6:20:f9:53:be:bb:ff:94:ee:b6:58:7b:
a8:e5:f7:d0:23:f5:4f:2c:f0:c1:94:60:af:9d:be:
7d:2e:48:6f:c2:39:9d:12:ca:d4:d7:1a:ab:69:95:
af:b8:d9:03:fd:76:bc:d3:d4:c0:bf:b0:74:42:62:
c9:fe:8b:95:46:2f:08:f9:8c:21:6c:38:f4:a0:cf:
c9:06:13:be:dd:94:ea:ac:ca:c7:29:04:3c:9d:fb:
3e:ce:cd:fe:72:90:06:d5:1d:e0:fb:aa:e6:17:fd:
91:d2:3a:dc:db:6c:0d:bd:47:96:0e:be:97:26:70:
68:65:04:e6:5d:95:fd:cd:6c:da:35:ee:92:1e:26:
69:d4:9b:51:0e:39:08:36:7b:06:c8:9c:c7:cd:bf:
10:d2:2c:73:98:dc:03:5f:7b:3e:f9:36:0b:0a:06:
eb:cb:0f:16:93:5d:ac:9e:e9:54:be:74:69:75:6e:
a5:80:ca:cc:8c:d5:d5:b7:fc:09:10:b0:ff:ca:9d:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FC:AA:C5:D8:09:FC:86:B0:B9:4A:4A:14:61:11:2F:8A:96:40:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb32a4e9-f480-3c5c-b53c-6b2238ca8c7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.119.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:7a:02:c1:d4:82:c9:84:97:bc:4e:e1:ed:a7:44:0b:58:7a:
d1:54:ab:99:11:84:da:b3:c5:80:69:af:69:3d:80:2e:9c:ba:
87:3a:21:b5:da:cc:80:f8:65:78:3c:4a:e6:f2:ce:17:41:7e:
44:10:18:9e:d1:13:d6:c1:c5:8c:87:85:51:4e:56:cb:06:28:
44:2d:55:7d:0b:a3:b5:57:ed:bf:6d:16:0b:b3:ea:f9:45:13:
bc:f0:8e:58:1c:07:6f:2d:cd:ed:1a:12:7a:a0:ce:94:5d:52:
41:f3:1b:84:32:4f:6f:de:79:1e:41:b4:e3:83:5d:9e:ee:fd:
90:98:57:03:49:ef:51:92:12:2d:89:00:80:07:db:3f:92:29:
76:7f:de:64:5a:f7:ec:4c:2b:a4:04:d5:1c:50:66:5e:de:69:
01:34:15:27:69:a9:0a:8a:d0:7f:15:cf:0c:52:90:5b:21:cd:
ec:49:54:db:1f:03:c8:f1:b8:d7:7a:27:17:dc:b7:74:0d:ab:
84:98:30:62:e4:8a:16:19:44:81:6a:62:85:f3:75:6d:50:78:
0d:f3:82:92:4d:1b:50:f5:04:12:ba:58:fc:3f:50:64:ca:e8:
49:db:6f:22:77:25:8a:47:77:8d:fb:45:b9:f3:3f:e2:a1:a8:
6b:23:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:26:32 2025 by rpki-client