Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd2c3711-2029-3e65-b33e-d0e1d3551fd3.roa
File: fd2c3711-2029-3e65-b33e-d0e1d3551fd3.roa (raw, json)
Hash identifier: Sspb8xcpR1Wzz+M3vO1SxnsjSAhi6ZYLmHjmVA2qzM4=
Subject key identifier: 61:61:6F:42:03:0B:B7:5F:8B:69:DB:D8:56:91:B7:E0:45:86:50:4D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A52C83A312BFE6AA75980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd2c3711-2029-3e65-b33e-d0e1d3551fd3.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.109.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:52:c8:3a:31:2b:fe:6a:a7:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=51f333bf-0b54-4c6e-ba29-59b68d53df00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:10:e5:2d:0b:ea:fd:d8:bb:6b:de:ae:99:d9:
73:f4:d5:ca:9c:35:d3:18:a0:d9:ad:6a:23:6a:15:
e7:69:cc:9f:45:08:20:a5:8c:c6:f6:41:bc:49:d4:
88:c4:e9:53:42:38:94:00:b9:8f:f0:81:3e:5f:97:
a3:39:32:44:fa:a2:43:30:e4:2a:66:c5:6f:bc:9d:
4e:b7:80:89:4c:00:27:44:69:19:2b:0a:26:4b:20:
14:ff:a5:f9:22:3e:b7:24:e8:56:eb:e2:3a:29:61:
9a:c0:56:74:45:8f:ae:1f:26:cf:98:59:8b:03:c6:
4c:6f:2e:7b:f7:c9:d7:63:30:af:7f:59:ef:fc:5a:
0b:82:33:41:5d:81:3c:a4:99:cf:95:5d:4c:5f:5c:
19:3b:a0:85:7e:59:dd:f9:be:d9:bb:86:4e:e7:0b:
e1:f9:cb:2c:27:78:73:30:88:84:6d:9a:2f:28:c7:
47:a6:a6:8e:e0:02:7a:a0:90:d1:17:26:4c:48:7c:
e5:14:0b:62:a2:b8:66:2c:b6:99:37:10:67:62:20:
18:59:3c:63:c9:30:bb:ca:02:de:b6:b6:e1:d4:98:
37:60:f9:30:52:e4:da:6a:29:f3:ab:97:9a:9d:03:
e8:ad:f4:21:4c:09:81:81:f0:89:58:5b:b8:3b:ff:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:61:6F:42:03:0B:B7:5F:8B:69:DB:D8:56:91:B7:E0:45:86:50:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd2c3711-2029-3e65-b33e-d0e1d3551fd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.109.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:37:80:03:e5:51:12:fe:77:41:31:07:5f:87:92:2d:d2:ef:
9d:96:9c:34:b0:1a:70:83:d3:b6:d0:3f:c1:1c:1b:28:79:01:
04:72:f7:e3:30:c3:1f:a3:f0:1b:1f:a3:46:db:27:64:b2:89:
20:35:d4:0c:d0:e0:c8:9b:5d:67:8f:e4:f1:f5:87:b1:96:fa:
00:cf:dd:3b:8d:0c:c6:cf:1a:d5:dc:3b:78:97:2e:e0:e2:52:
b2:da:e7:ce:41:bc:8d:dc:64:f6:7b:ef:e1:8d:92:56:3e:df:
b5:be:a1:61:8c:fd:47:31:aa:30:22:d6:2b:07:b9:0e:c6:2c:
d7:10:e3:0a:a0:43:33:31:3a:8c:0f:71:35:f5:14:00:15:04:
c6:32:fd:7a:48:6d:64:d3:8e:41:dd:f1:8e:42:49:93:b2:17:
a4:7a:d0:c1:4f:98:0e:a2:0c:19:86:77:38:2e:d7:51:61:d2:
ef:5a:50:bb:25:f8:63:7b:c5:4a:0a:c3:9c:ba:32:11:c0:ed:
ac:85:03:6f:fd:20:33:56:64:ea:42:b2:de:03:9f:65:59:9b:
2f:c9:16:03:e9:f3:98:49:7e:cd:7d:fb:4a:01:ac:2d:12:70:
08:d0:42:c7:93:26:9d:1e:ab:ee:8a:7c:a9:fe:7e:b3:1d:90:
39:b0:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:02:01 2025 by rpki-client