Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/065c9ce3-44f9-3d2c-aaf5-f3368a599613.roa
File: 065c9ce3-44f9-3d2c-aaf5-f3368a599613.roa (raw, json)
Hash identifier: UMb0stWSyNqfAxiwobJi8V0L3vatraQXm/dzk3MAOTA=
Subject key identifier: F9:87:F8:65:9A:C0:AD:27:02:18:7E:CE:6A:1B:12:D4:15:3E:EC:35
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A5E4DEAF3AF40EF1F516C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/065c9ce3-44f9-3d2c-aaf5-f3368a599613.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.103.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a5:e4:de:af:3a:f4:0e:f1:f5:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=cba7658a-050f-4b67-acd7-0d3cd350b245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:09:c9:47:5b:50:45:9e:89:53:3f:7b:0d:
3d:46:4c:ed:30:0b:ae:ef:28:26:79:4f:f3:75:d1:
54:b9:8c:ad:7d:b4:e1:ef:cd:99:4f:00:f1:65:6b:
a8:7b:6e:b3:82:4d:ff:36:91:e8:f0:0c:2c:e0:79:
ec:ca:a2:ba:c5:ca:b9:18:e6:59:bf:2e:76:30:1d:
be:1f:c7:72:5d:e1:cf:9d:ed:92:4a:35:06:c7:83:
c9:cc:83:33:d3:74:6c:ee:d7:bf:9d:27:b1:74:63:
07:c1:b7:fe:79:20:b3:38:1f:0c:d7:bf:2a:8f:a7:
95:41:75:74:26:e3:b5:cf:57:c9:41:04:2c:4f:bf:
4c:3d:1f:df:7c:9e:ac:43:82:f3:c4:3b:b2:19:f0:
dc:3b:ac:5f:73:01:00:89:3f:96:8e:5d:e9:53:0a:
4c:e5:08:da:e1:23:d8:16:48:e2:69:3f:12:5e:71:
52:be:6b:7d:2f:8f:ec:99:86:c0:d3:f9:5d:b7:4f:
ce:56:3b:8d:8b:72:ab:77:52:bc:a9:af:cc:ae:9a:
58:03:76:8d:c9:3d:98:8c:ff:bd:68:26:30:ff:13:
1d:fc:4c:fc:1b:fe:3a:f3:a7:7c:92:ee:03:d4:a3:
c3:83:1c:fa:90:f4:25:42:f3:99:44:36:63:e7:fa:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:87:F8:65:9A:C0:AD:27:02:18:7E:CE:6A:1B:12:D4:15:3E:EC:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/065c9ce3-44f9-3d2c-aaf5-f3368a599613.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.103.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:76:63:08:8e:3d:dc:94:33:61:5d:36:41:4f:07:6a:ec:2a:
aa:6d:6e:fd:85:e1:6c:2a:aa:c4:53:0f:b9:b1:7e:38:a4:9d:
ca:5f:0a:00:c3:22:92:e7:1f:39:df:6e:5d:87:07:83:b9:f6:
f7:52:9b:32:ae:8d:64:f0:54:46:ec:ab:3e:6b:da:f1:e5:04:
2e:b0:86:4d:c9:39:b4:1c:67:44:93:39:8f:9e:90:94:60:ba:
b1:02:dd:a1:a1:51:69:57:d5:16:81:e7:1d:bb:f3:2c:d0:6f:
48:b5:16:ff:a0:3a:ee:e0:04:b3:fd:41:20:67:1c:8f:df:4a:
e6:29:69:71:37:11:30:54:c1:7b:20:80:b6:0d:90:0d:0f:41:
aa:cd:4f:19:50:85:7b:6d:54:36:fb:b6:c2:56:d9:27:84:87:
17:f1:78:17:b2:9a:04:5f:8c:78:83:eb:5e:5a:a7:55:e8:ac:
4d:cd:ea:68:ee:44:55:56:e2:9d:16:d5:4b:50:8a:6f:47:33:
d8:76:b9:80:7a:78:22:eb:ff:87:91:77:54:83:a9:7e:cd:91:
a7:8d:69:3a:3e:7d:b5:82:ac:8a:76:bf:bf:db:9f:bc:9e:31:
29:3a:0f:f2:98:bd:1f:9d:03:5b:cc:2f:ae:f7:9e:a3:0b:4c:
f0:3b:a5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:30:17 2025 by rpki-client