Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a104e66-c497-3fa7-b014-e18ed395a637.roa
File: 1a104e66-c497-3fa7-b014-e18ed395a637.roa (raw, json)
Hash identifier: A4O78I2fA/1ltaRoNv/tiv5b1IZj3gJRZ5Lvxvl4K7s=
Subject key identifier: 97:D0:4A:D7:55:43:F1:34:64:19:78:16:32:80:22:5A:32:B8:27:9D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A3DB08BB1ECADB28D16E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a104e66-c497-3fa7-b014-e18ed395a637.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.100.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a3:db:08:bb:1e:ca:db:28:d1:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=3e2889a3-6189-4c50-a132-da05f1343eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:25:c5:af:ba:93:37:92:f8:23:b1:15:c4:26:
ca:71:4a:e9:fd:36:00:6c:ab:c4:e5:49:80:2f:e7:
dd:cb:ba:d7:80:15:bb:1e:71:f2:54:97:e2:a8:1d:
c2:5a:8a:1f:52:5b:11:55:30:b2:af:db:d3:a8:87:
dc:c8:9c:90:85:2e:1a:a7:b3:2a:cd:72:f4:c3:5c:
08:1e:f7:80:69:98:48:b4:a5:b6:fa:77:41:0f:cd:
70:db:51:fe:38:a8:eb:da:63:a6:26:04:bd:47:da:
a0:c5:ba:f8:89:40:8d:9b:49:4f:12:80:94:7f:57:
1c:cb:85:cd:21:80:eb:e8:fc:ac:96:f1:cc:34:bd:
99:36:44:46:95:c9:b6:dc:a7:0a:36:14:2b:53:e2:
22:65:ae:f7:9c:16:bd:43:8a:d5:b4:27:ea:36:1e:
6f:5d:12:89:30:e3:9b:d0:e9:08:be:bc:19:f4:1a:
d0:ed:d7:56:7b:5b:f7:a6:25:b1:82:81:27:db:c6:
7e:a2:c0:05:34:3b:77:3f:5b:26:72:0c:b9:85:be:
11:03:c3:41:d2:ed:6c:77:9c:9c:0c:03:ce:de:4c:
0c:ee:b2:09:2a:61:74:a7:e7:25:c7:ce:4d:01:e9:
51:f9:6e:af:16:0b:21:c9:3b:37:23:43:61:77:2a:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D0:4A:D7:55:43:F1:34:64:19:78:16:32:80:22:5A:32:B8:27:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a104e66-c497-3fa7-b014-e18ed395a637.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.100.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:15:69:2e:d3:f1:2a:92:d7:9d:66:84:ef:f5:31:3a:87:48:
bf:ca:79:e0:a0:c3:8b:9d:2f:0f:11:4c:38:10:e0:94:ca:44:
dc:dd:43:a9:75:af:26:88:91:5c:4b:f5:be:44:79:ca:51:b1:
e0:37:0d:ea:25:71:3b:93:52:e9:e7:c8:b4:b4:22:26:db:c3:
2e:6f:d9:09:43:a9:52:25:23:09:c5:94:e4:41:52:82:b3:79:
ef:48:12:5f:93:50:d2:58:d6:a3:15:49:71:0f:7e:93:b2:fc:
f8:af:38:22:19:b6:14:b5:8d:41:d7:ff:60:bf:56:ab:69:a4:
25:32:fc:f7:63:e8:c8:1e:40:51:dd:b4:b6:10:d9:87:02:41:
ee:78:7c:82:98:ea:35:db:49:73:75:31:ed:7c:c9:d6:51:f4:
fe:13:7f:f2:d3:0d:1d:3b:9e:fc:c5:9a:25:6a:17:31:8d:30:
16:ff:2d:b1:9b:8b:84:7b:9b:7f:bc:3d:13:5c:5a:bf:fd:ff:
1d:d0:0f:b7:57:a4:0c:ee:5a:21:86:ef:3e:ea:10:53:b9:a7:
34:e7:0d:eb:33:2d:8c:0e:78:ee:5f:0c:1d:60:ce:a4:9d:3a:
b5:86:3b:be:00:85:14:7e:f3:bf:e5:bf:f3:df:47:18:bc:25:
82:42:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:46 2025 by rpki-client