Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff9224f1-7182-3f6a-b62f-7abb10779668.roa
File: ff9224f1-7182-3f6a-b62f-7abb10779668.roa (raw, json)
Hash identifier: sZh0bT8Tyxxe7kmUIUuxDqb5AqUsJ0DL09jBa6bUtNU=
Subject key identifier: 17:C1:E4:CD:9F:4D:A2:7C:E0:A9:03:A2:31:FB:91:C9:FB:14:20:B7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FAC739352AAA4177AF0480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff9224f1-7182-3f6a-b62f-7abb10779668.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.125.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fa:c7:39:35:2a:aa:41:77:af:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2acf22e2-c168-4be0-a203-bda63e1397d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0c:9c:01:ab:6e:27:91:c5:5f:ac:8a:44:8c:
3e:05:87:82:66:d2:9a:70:48:69:3f:44:44:90:a8:
bb:37:3f:61:cb:93:82:be:44:36:73:04:90:87:15:
45:0a:d9:5f:76:a6:79:49:79:fe:fc:e3:3d:b6:59:
fd:1e:02:b9:44:d7:2e:a9:b2:fe:19:7f:5e:33:3b:
38:fa:0b:f0:54:9e:54:72:a8:2b:1b:cb:fa:42:f8:
90:ed:a9:2a:96:e2:93:c5:f4:3a:9a:9f:f1:e7:1c:
c9:2f:5d:a1:36:7f:f3:b9:0f:2d:f3:7e:b0:d2:67:
a8:82:34:90:f9:b8:aa:a7:32:d3:4a:0f:e4:85:c7:
2c:61:4e:f7:5d:b3:92:28:01:fd:43:4e:00:2e:2d:
85:5b:72:41:5a:7e:64:54:c8:b8:e2:e6:be:b1:26:
79:4f:66:75:96:4e:8b:2f:9f:85:e8:22:6f:aa:cc:
99:b8:fa:54:a6:59:6c:2b:f3:b9:a2:79:3e:dc:6a:
f0:ca:b7:97:54:72:e3:6b:7c:70:02:f7:b2:da:57:
b9:39:02:06:f7:e5:dd:cb:f3:51:67:70:7c:f1:39:
d0:ba:26:72:fa:92:67:91:87:6f:dc:01:46:e9:0f:
9c:80:d0:d0:40:07:a8:74:a5:ef:54:73:03:48:42:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C1:E4:CD:9F:4D:A2:7C:E0:A9:03:A2:31:FB:91:C9:FB:14:20:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff9224f1-7182-3f6a-b62f-7abb10779668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.125.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:65:99:89:a9:b8:b9:58:05:8f:f9:15:06:ba:6e:cf:b4:28:
01:77:a9:c9:c2:71:2f:e2:cc:21:de:02:3c:7e:f8:45:7b:5f:
92:3a:ba:3a:a3:d1:c6:c5:9f:16:a1:76:bd:74:85:52:fc:b6:
76:27:9d:e2:c6:3e:b0:6d:46:93:12:e9:f3:44:e0:4a:d8:8e:
b2:93:df:81:68:34:ab:20:ae:d5:b9:e8:df:d7:a7:f2:f8:65:
4a:98:8a:c5:22:a0:84:c4:08:c5:71:63:2b:56:1b:09:31:72:
88:4c:13:f2:88:29:96:96:78:39:ac:de:95:8b:c6:2d:9f:11:
fc:fd:de:fe:a1:3c:2b:61:49:bf:c2:ad:b8:36:a6:90:99:1f:
ba:f4:27:84:35:6f:7b:87:f6:7d:b5:4d:f4:64:d1:7e:94:ff:
9c:da:11:21:1f:74:7d:48:1c:96:3b:d5:d0:2d:d4:f5:95:4e:
d1:2e:f8:d1:89:72:9b:80:28:36:77:53:70:f5:e6:66:00:b1:
0b:3b:bb:10:3e:fe:f1:34:0e:2b:5b:00:bf:ce:de:49:55:4c:
f9:e8:a8:18:47:de:2c:c7:d8:ed:49:c0:95:b8:89:07:a4:14:
cf:05:1c:45:da:25:e2:b6:6a:2f:b5:36:a2:0f:7b:ba:e4:8d:
68:aa:1c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:57:35 2025 by rpki-client