Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10ebd733-f5c9-3b15-9564-c42afa43b822.roa
File: 10ebd733-f5c9-3b15-9564-c42afa43b822.roa (raw, json)
Hash identifier: GxJj5Wrwu1tuFgDnBZLUPLCB9t0rumSsbvvYOvwmUr8=
Subject key identifier: 2E:5A:DB:7E:B8:03:E7:B2:AD:23:D6:94:44:E5:82:DF:8B:5D:C0:16
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B342A890B37DC38E5CFEA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10ebd733-f5c9-3b15-9564-c42afa43b822.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.106.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b3:42:a8:90:b3:7d:c3:8e:5c:fe:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=40c3e0fb-fd52-49d2-93f3-126970603be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:c3:f4:0a:02:41:c9:2b:f1:0b:e4:94:52:
59:c7:e2:dc:c3:4e:82:f2:20:4f:f2:58:be:d6:ec:
a1:69:63:1e:89:9c:70:a2:c5:8c:4e:d5:4b:5a:14:
b6:a4:90:da:43:aa:e7:4e:c2:ec:54:4e:11:72:74:
e2:b3:35:dd:b6:34:07:1f:2d:ac:db:44:aa:5a:09:
8c:fe:da:1e:b8:55:81:72:9a:92:55:0d:1c:61:eb:
e9:1a:d2:b5:ae:3f:90:3d:3d:e0:28:c0:66:b8:69:
c2:8c:47:7d:0d:18:16:cd:66:37:4c:00:11:9f:05:
82:d0:40:09:86:c6:16:fc:f4:6d:d2:92:ce:ae:e7:
10:4f:34:5c:ad:d0:e9:4c:39:4d:c9:a7:e7:e7:b3:
3c:13:cd:26:cb:7c:17:33:e4:70:d3:96:92:ed:80:
5c:07:34:26:d1:55:53:85:5a:43:bc:a7:29:93:6a:
b4:41:bb:e7:30:46:9c:44:fd:5e:63:19:46:fe:84:
45:c3:13:c6:24:46:b9:e0:7c:fd:9b:7a:82:40:4f:
89:d5:96:28:09:c1:fd:be:7b:fa:0e:c0:bd:c9:bd:
f0:ea:69:ed:57:35:67:74:9e:ca:81:7e:40:63:2d:
a1:4d:0c:48:d6:e6:97:c9:c8:bc:fe:95:5f:5d:3a:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5A:DB:7E:B8:03:E7:B2:AD:23:D6:94:44:E5:82:DF:8B:5D:C0:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10ebd733-f5c9-3b15-9564-c42afa43b822.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.106.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:63:b4:4f:d8:56:ec:0e:e7:bd:67:3a:4d:5e:6c:8c:56:07:
12:ff:e4:23:2c:ca:ec:57:1e:f9:5f:f2:58:8a:b4:05:3b:d4:
ad:80:e7:92:60:89:cf:aa:99:2a:9a:52:fa:08:b6:cc:5d:4b:
78:ef:ce:d8:41:db:9e:67:1c:d4:b7:c4:0b:0e:a4:53:25:21:
8d:b5:9a:8a:78:03:ba:81:38:0c:68:cc:83:15:24:af:6d:9a:
73:4a:ca:56:50:78:b4:b7:10:e9:a1:5c:90:51:52:04:a5:44:
5c:52:5a:a6:99:65:d6:51:bd:e7:35:ca:90:f9:6d:95:f8:8e:
2f:80:2f:b9:af:a5:46:9f:7c:3e:a2:96:82:5c:39:a6:0e:8d:
1b:4a:04:d9:0d:f7:ba:64:a0:cd:cf:47:c9:d2:07:4e:d4:eb:
53:23:bb:b5:d1:f1:48:ee:ef:f5:eb:eb:09:bc:6c:d3:58:8b:
1e:f1:19:94:7e:fa:ac:56:2c:7d:b1:80:e4:4b:40:18:7c:6a:
21:e5:a3:65:43:b9:e0:59:ec:69:ea:dd:2e:ff:c9:a1:40:43:
7d:5f:30:a3:44:9e:0c:91:e3:0d:93:5b:be:d0:9f:bd:f5:3e:
5e:11:88:c3:9f:4a:df:7e:4d:17:57:62:ba:00:7f:4b:53:fd:
a3:0f:64:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:29:47 2025 by rpki-client