Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34fa4976-5074-36d4-83b2-bf20a93a31ee.roa
File: 34fa4976-5074-36d4-83b2-bf20a93a31ee.roa (raw, json)
Hash identifier: 5vq2l37HUUXW5ebs2T+JABz1lx1eTDd6RyPOLZUQgDE=
Subject key identifier: 7F:53:E3:6E:D2:87:92:7B:79:C7:84:41:DE:C0:CC:AE:11:93:BF:C9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A5CEB400C940BE0FF8440
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34fa4976-5074-36d4-83b2-bf20a93a31ee.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 34.104.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:5c:eb:40:0c:94:0b:e0:ff:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=b3fa035a-3c35-47b1-b07b-ec90a8c983cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:ad:38:d4:67:7a:06:50:16:d5:2a:04:9a:
6c:de:a5:ef:3e:38:7d:50:b8:35:5e:1b:ee:f3:d3:
0f:a4:b5:14:89:21:1c:95:57:7d:9c:aa:fc:24:c1:
4e:2c:a0:8d:6e:10:7b:69:4d:a2:e8:9b:b5:b5:2d:
7f:a4:e3:a3:65:ad:fc:97:c5:3d:95:54:52:3b:f8:
bf:c0:97:21:9d:35:3c:46:34:ea:a6:77:85:98:d8:
06:7b:dd:55:17:b5:c0:2c:67:9d:48:ec:e7:a5:f4:
27:58:da:45:cb:11:ae:32:a3:e0:73:cf:8d:4f:b5:
b9:ea:9f:3e:34:5a:21:0c:d5:e8:18:ef:dc:52:a0:
05:98:03:4a:d7:2b:78:a7:ac:a4:a9:38:c3:53:bb:
f0:87:08:b2:84:39:3b:3f:51:40:2b:c3:d4:d2:b2:
43:cb:5a:78:22:5d:dc:5b:a4:f5:dd:5b:9c:2f:30:
d8:37:29:00:b3:69:09:e7:b4:2c:9b:7f:d9:a0:7f:
7c:31:7c:30:07:8e:45:1b:b0:2c:5b:63:93:95:f3:
60:ba:8a:6e:d6:b7:57:b0:fb:67:92:07:9d:cb:f3:
c6:ec:17:76:97:97:96:d5:a7:ad:6f:da:c0:3c:09:
df:88:87:68:be:af:18:a5:a3:5d:d8:a9:7c:f1:bb:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:53:E3:6E:D2:87:92:7B:79:C7:84:41:DE:C0:CC:AE:11:93:BF:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34fa4976-5074-36d4-83b2-bf20a93a31ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:7c:55:27:da:b5:29:9c:07:13:c4:df:cd:03:d0:d1:20:73:
0d:4b:35:dd:71:64:d7:a8:cc:9c:03:b1:f1:b3:79:99:9a:90:
16:c5:0b:2b:d7:4b:36:8d:b8:a5:47:66:c4:8f:42:10:1a:6f:
af:77:79:90:c4:96:7d:ca:de:53:f8:da:9a:82:9b:b3:d9:eb:
24:36:61:29:b6:d3:9c:00:cd:be:de:c6:3c:12:b8:36:e6:66:
2d:67:01:77:96:9e:7a:c8:8f:0d:03:4a:e0:11:5c:9f:32:71:
96:1d:f4:02:67:24:7b:14:d6:05:1d:6f:2c:4b:81:12:36:24:
ba:47:6b:88:70:31:1b:21:5f:e2:c1:1d:c5:cb:a3:6b:c4:a9:
f7:46:44:42:8f:aa:c2:c9:5b:e8:99:53:02:8c:ba:34:7f:1e:
9b:37:87:e0:a6:73:a1:76:d4:b1:dc:6f:21:3f:c2:91:14:9c:
f6:1f:1d:ec:27:56:8c:7c:c3:26:9f:d4:e5:98:eb:f1:07:e8:
4c:13:13:fd:36:fd:c4:6a:3b:6d:20:35:b9:b0:a8:08:8c:17:
b9:e0:c1:34:05:fb:b3:1d:63:f8:ae:da:ee:6f:d3:c3:d0:7e:
e4:a1:bb:ae:e5:eb:37:78:35:29:6c:2b:b1:7f:85:d6:76:ef:
76:56:53:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:16:57 2025 by rpki-client