Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a7fb3bf-ad3d-3121-91ac-d0631e279d3a.roa
File: 1a7fb3bf-ad3d-3121-91ac-d0631e279d3a.roa (raw, json)
Hash identifier: hX/1qyFnRfZX1dZWEbw3Fi8iI7GAPP46Ulp3/1r3L7g=
Subject key identifier: 0F:18:FE:7A:F1:F9:0E:4F:3F:86:E9:17:91:5F:FC:5D:2C:5B:F1:7D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A61E3160C9096BEB78BB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a7fb3bf-ad3d-3121-91ac-d0631e279d3a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.70.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a6:1e:31:60:c9:09:6b:eb:78:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=dac9da02-0fda-4e52-888c-3dbedf565483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:1b:9b:fc:4a:cd:a7:79:70:7d:98:2d:e6:
8c:b1:5f:24:65:16:2a:e6:fc:d1:23:ae:32:49:0c:
ab:83:b0:3c:a0:f3:40:0d:79:c8:60:37:34:7d:2e:
67:ad:4f:00:ce:cd:f4:49:30:a6:30:09:e7:2e:08:
6c:2e:b5:fe:4f:b8:c9:b3:77:13:61:82:8d:47:12:
1b:9c:d0:57:c5:cd:1b:85:89:d5:42:3b:19:51:8a:
7e:58:03:73:46:fa:2e:df:d0:4a:3e:ce:45:dd:71:
df:42:e2:47:33:3a:19:d4:b5:d4:4d:9c:b3:48:98:
96:dc:12:de:ef:b1:22:30:33:0b:f0:48:a0:f1:62:
d2:8c:17:d3:20:20:2c:8f:0c:67:c1:ef:78:52:fb:
3c:a0:b6:00:bf:7d:62:35:8f:e0:2b:27:d3:85:46:
b2:b5:a8:94:e2:e7:8e:7e:40:0c:c2:3a:50:09:df:
20:84:39:e8:f4:ca:ef:06:c1:00:da:7b:72:f1:f2:
d0:44:dc:a5:94:13:5e:de:b5:33:9d:5b:17:50:18:
66:97:91:3d:82:a4:3a:4c:f4:fc:1c:ed:11:2c:23:
14:c4:98:be:cd:d2:23:5a:f8:26:d9:b5:3c:d3:6a:
a7:92:81:f1:35:2d:d6:17:66:09:e0:8d:b0:6d:0f:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:18:FE:7A:F1:F9:0E:4F:3F:86:E9:17:91:5F:FC:5D:2C:5B:F1:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a7fb3bf-ad3d-3121-91ac-d0631e279d3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.70.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:5c:ec:ca:26:5e:ad:ee:18:41:8e:b8:42:c6:74:42:ed:8d:
b2:cf:03:2d:7f:45:fe:13:94:c2:92:b0:d8:52:31:54:94:e0:
39:80:80:d7:c3:dc:f4:c1:92:b4:8f:76:cc:81:80:5a:60:6a:
04:2c:e4:ae:75:dc:12:4d:31:54:46:48:d0:02:e8:81:9f:67:
17:3b:dd:f3:22:b5:4f:5e:b0:76:2d:1e:dc:d2:9d:47:f4:f6:
60:d2:92:e0:2d:af:47:32:93:50:c8:e1:79:ff:56:44:c4:79:
af:7f:58:12:7b:c4:4f:84:59:53:2e:e2:46:ee:e4:93:e5:ce:
9a:02:ea:20:0e:2b:be:d5:d4:3d:fb:a8:e4:59:f5:6a:d9:9f:
d6:ff:36:40:0c:14:90:1a:2a:76:f1:ea:d6:59:2b:03:eb:a5:
5d:99:a6:21:88:14:7d:82:0a:1e:67:67:51:42:f4:2d:d6:7d:
0b:3d:d0:22:97:d2:6d:4b:4d:15:b8:fb:ee:4b:1b:43:b8:a6:
a5:7e:b6:fd:2f:91:23:d9:06:f1:31:72:69:50:d6:ad:ba:84:
6f:cb:1f:b4:60:81:98:01:b2:17:18:c1:8f:f8:09:60:7c:1d:
78:3a:e6:0b:1e:95:83:35:8f:84:a7:0f:5b:c4:43:4a:05:aa:
f5:fd:4d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:07:21 2025 by rpki-client