Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3964c4be-34ad-3309-8f5d-cffcd6e6f9ea.roa
File: 3964c4be-34ad-3309-8f5d-cffcd6e6f9ea.roa (raw, json)
Hash identifier: 7QeUxCrpR5KapS83fMFEDnwuiQnPispUvK2nAFdob0w=
Subject key identifier: 1C:93:F3:E2:52:51:B4:B1:B2:37:9E:70:88:6A:CC:BA:0D:C0:29:F0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C2A17099C202DBDAA456AA
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3964c4be-34ad-3309-8f5d-cffcd6e6f9ea.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 34.96.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c2:a1:70:99:c2:02:db:da:a4:56:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=1e04f7ea-94a1-4795-a264-7552785fda22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:41:4d:61:2a:11:3c:28:7d:35:87:b7:26:
c8:52:b8:cc:7c:3d:ed:95:42:39:6e:c0:68:23:50:
2d:49:29:54:5c:86:f7:2b:85:aa:f1:7e:15:62:1e:
fd:40:6d:06:9e:ce:b8:c0:f9:d3:b7:72:32:fc:1a:
06:7c:b6:d8:e4:ed:7a:54:25:fc:24:31:23:bb:b4:
4b:be:e8:0a:07:ea:9c:3f:14:ea:b8:c4:84:ca:53:
52:c9:d1:47:62:44:a5:9e:e8:0e:c7:bc:22:dd:7e:
9f:34:17:40:5c:8b:a3:46:15:9c:89:b6:1d:2a:e5:
a9:a5:aa:2e:bb:ac:6b:0f:2d:6c:b6:e8:79:5a:ae:
5f:e1:a0:df:43:63:b7:79:45:9c:a9:ee:1d:ff:7f:
af:a8:0f:1e:8c:7d:05:17:2d:af:ff:e4:5b:32:69:
88:81:34:a6:df:13:df:d3:d1:d8:a6:56:71:8e:5f:
48:18:ad:43:72:23:2c:1b:e0:81:59:0e:e5:73:2c:
96:9b:62:4c:be:12:43:0c:d8:c2:6f:b9:b8:c8:7f:
c2:77:a4:c5:10:31:ee:9d:ff:b4:a7:5c:4b:8b:2a:
4a:0f:1a:8e:d8:a1:c1:17:25:1d:bc:77:92:5c:07:
fb:2b:36:8d:ce:50:b7:af:d2:ac:73:73:34:b5:1c:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:93:F3:E2:52:51:B4:B1:B2:37:9E:70:88:6A:CC:BA:0D:C0:29:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3964c4be-34ad-3309-8f5d-cffcd6e6f9ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.96.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:09:9e:dc:0b:e1:c0:72:19:f5:e1:3f:35:4c:22:98:19:d8:
e1:40:fd:98:d5:e9:75:e0:aa:28:b6:ab:a7:53:6f:59:ff:1d:
1b:55:a9:c1:71:0a:e4:61:31:4c:7a:41:d3:8e:ed:10:a7:95:
9c:f5:4d:12:ff:f4:fb:97:8a:3d:07:9f:56:9c:bc:01:e3:6f:
1d:48:bb:e6:b1:92:0c:d5:5b:1d:a6:5a:55:99:ab:13:b6:8e:
fd:de:a5:13:9e:18:07:41:0c:c7:8d:3a:69:f8:1f:86:a5:e6:
d0:cf:48:4a:85:a8:a8:1b:47:cc:79:10:4d:5c:f6:cc:d8:b9:
8b:6c:1c:87:f5:30:77:d5:3e:9d:88:8a:13:9b:83:8e:14:6d:
f4:8c:e0:2c:e9:e8:da:93:48:e2:36:72:37:48:e5:4a:8f:ec:
51:c4:06:87:60:c8:3d:f2:45:66:87:db:47:45:e7:a8:b2:0a:
a8:bb:48:08:7c:79:6e:4e:37:cd:57:97:43:10:dd:91:eb:da:
9e:12:a4:64:6d:7d:74:eb:62:c1:27:01:5d:0e:1f:c6:92:76:
6f:3d:34:fa:7d:9b:b8:92:a7:c9:cc:d8:d0:4a:d2:15:a9:0a:
57:bd:b7:7c:32:22:4d:83:41:9b:c8:36:d5:ee:0b:16:de:ed:
c3:31:68:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:42:08 2025 by rpki-client