Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fea0012-5f4e-3967-8ca4-0ecea6b373a8.roa
File: 4fea0012-5f4e-3967-8ca4-0ecea6b373a8.roa (raw, json)
Hash identifier: cd1deHOFFg57l5oe6bK6ElU21MlN7VqDh4ZsQdfweaU=
Subject key identifier: B7:6E:76:5B:0D:83:08:1A:EB:9D:7B:33:35:AE:08:EB:26:95:DF:CB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A66CB0BADB4702E905C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fea0012-5f4e-3967-8ca4-0ecea6b373a8.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.156.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:66:cb:0b:ad:b4:70:2e:90:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=9063ea81-e2e3-4209-9c85-deac55d8671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:bc:e1:1b:1a:c6:41:c2:7d:0e:9f:2c:f7:
86:68:f0:7b:eb:ad:af:c7:a4:c4:8d:6f:7e:68:45:
fc:40:66:9c:7d:78:73:39:f7:1c:66:8f:fe:4f:0e:
34:24:c6:b5:2c:de:17:ab:0a:a3:98:04:d9:f7:2f:
d0:96:01:80:45:88:8c:62:42:30:56:84:29:2d:b1:
2e:97:b2:75:73:c0:13:2e:f1:5b:93:81:73:06:3b:
cd:0e:0c:4f:dd:6a:ff:f2:17:ea:c4:b2:23:d6:c2:
60:ff:d4:33:12:2d:bc:77:c3:e4:8e:c7:45:e7:06:
04:63:39:36:40:4e:91:1e:c1:fc:70:e0:06:04:40:
7e:37:f1:57:ec:3a:6a:69:f3:1e:7a:4b:00:24:64:
f7:2f:0e:84:2f:3a:68:11:ea:4c:f8:0c:97:0b:9b:
19:92:fa:df:a6:6c:f9:eb:d7:51:da:70:52:75:4a:
44:59:46:6b:96:c4:3c:50:d1:4d:da:16:7c:3c:f9:
fc:40:52:2d:6f:1e:d5:81:f3:ca:4d:90:cd:3a:56:
99:64:43:4e:c9:5f:f7:dc:b6:30:38:73:5a:82:09:
a1:1a:41:4c:39:f8:21:38:f5:e3:b2:65:d0:b9:cf:
6a:9a:a4:0d:fe:f7:76:31:4c:be:29:fb:af:1a:2d:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6E:76:5B:0D:83:08:1A:EB:9D:7B:33:35:AE:08:EB:26:95:DF:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fea0012-5f4e-3967-8ca4-0ecea6b373a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.156.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:77:2a:68:bf:63:84:17:fe:aa:8a:6c:f3:0d:3e:f9:44:df:
7d:d4:ef:d6:5f:3c:69:67:3c:eb:c8:68:29:59:8f:64:33:46:
a0:0c:cc:55:8b:b0:94:50:75:a9:64:85:4b:9f:76:be:35:7d:
f1:e8:92:03:45:17:b5:8a:9d:ab:d8:1c:cf:fb:ae:12:3f:06:
0e:7a:19:6a:c3:ba:00:38:3d:cc:e6:ae:26:2a:e0:99:58:7d:
5a:de:47:f5:6e:0f:2d:da:1f:f1:66:1f:aa:e4:c9:b9:01:f9:
99:6b:56:3e:90:cb:47:f1:7e:7a:2e:11:b2:1e:74:5f:03:4f:
68:af:6e:33:f1:68:ae:5d:7b:c6:6c:ee:5a:fd:50:05:3a:e1:
6b:f3:94:d7:c0:2e:14:91:46:bf:87:ea:79:cc:23:c0:c6:2b:
fb:45:9a:4a:df:7e:e5:31:b4:e5:d1:e5:9b:ea:0a:75:09:cc:
46:88:14:7a:8a:7b:5d:b5:53:9e:4b:bc:58:75:df:ac:94:f1:
a7:66:f9:0e:9b:b4:ac:ae:f1:b7:51:d8:86:39:13:e8:b5:71:
0c:3f:16:1e:4f:62:96:ab:62:02:4f:23:ae:5d:16:fc:8d:b3:
8c:4e:6a:e7:ee:dd:71:91:11:a8:22:da:0e:e9:45:4e:f0:2d:
5e:20:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:36:06 2025 by rpki-client