Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cad981a-285c-31e5-8aca-b54ebf96ee27.roa
File: 3cad981a-285c-31e5-8aca-b54ebf96ee27.roa (raw, json)
Hash identifier: qO7/eXXl6KNclbAzEzdzEzCuHS7TXOqGx/IQqf2eyfM=
Subject key identifier: 9E:74:C3:66:4F:DA:91:BC:B8:96:97:2B:46:FA:62:9E:F4:23:55:C4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BBC47E0AF7A449E2254458
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cad981a-285c-31e5-8aca-b54ebf96ee27.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.148.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bb:c4:7e:0a:f7:a4:49:e2:25:44:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d5f3aaf4-cdea-467c-b23d-207c5b272c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:de:07:a0:70:b5:0f:22:c1:c7:7a:97:1f:
1b:f3:80:45:21:f5:2f:a4:d9:34:d5:99:f0:74:ba:
4e:24:9d:b3:b4:2c:34:6b:75:c8:71:f6:e6:81:33:
d4:be:b6:ca:a6:51:2e:0d:7f:a2:1e:36:ef:76:12:
1f:0e:a5:15:e2:ba:bc:2c:10:ac:e7:a2:76:85:0e:
45:62:23:a9:92:e0:55:d9:57:b6:eb:ee:98:93:7d:
65:8d:c3:ec:1f:25:14:33:e8:be:0e:3c:38:c9:2a:
83:dd:a6:74:ba:48:00:d2:27:9a:60:a6:10:29:4d:
22:05:c0:7d:d9:f8:ae:e5:81:2e:0d:4b:14:b2:1e:
e2:26:f0:b3:c9:3a:0e:89:90:ac:72:52:6a:2d:d8:
d8:c7:7b:c9:6c:99:84:30:11:26:b1:46:9f:2f:e4:
8b:f3:60:5b:49:79:e3:ff:3a:be:4b:91:10:e3:8c:
d6:c1:48:79:f5:79:5b:5e:16:9e:7d:4b:a1:48:a3:
7f:03:d2:bf:1b:dc:6f:47:e3:30:a6:f6:5b:6f:1f:
d9:8f:34:7d:6b:c6:07:2e:5c:b6:38:4c:61:18:e1:
74:dd:9d:73:49:97:bd:9d:c2:ef:6c:45:bd:37:93:
49:36:d3:b5:fc:93:83:34:d2:07:4c:37:d0:24:19:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:C3:66:4F:DA:91:BC:B8:96:97:2B:46:FA:62:9E:F4:23:55:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cad981a-285c-31e5-8aca-b54ebf96ee27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.148.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:1c:a6:9f:04:26:4a:38:ab:72:80:ea:7f:09:6b:7c:f9:5e:
b0:57:5d:bb:f1:5a:d8:59:20:ef:88:64:d6:1a:12:b2:5c:5a:
05:a4:39:90:5b:56:75:7d:dd:ab:72:6c:55:e0:a8:80:d4:3e:
1d:3e:59:76:e6:d8:f5:76:b5:8f:68:a8:4b:b7:84:47:ac:4d:
45:be:8a:83:6e:6f:a7:76:25:6d:82:4b:df:c3:a3:2e:2b:37:
2c:2c:7c:d6:9c:c0:ff:b1:c3:f1:79:6c:0c:ed:6c:3a:9c:3b:
e1:24:8d:43:9d:5b:6c:e0:8b:eb:d0:78:84:d5:69:32:17:8b:
11:65:7e:94:2b:46:68:14:89:ce:70:a2:02:d5:82:22:8b:fd:
40:e5:d6:c9:bc:e7:6d:b5:36:27:da:d7:51:e4:ce:ec:ef:c3:
70:04:34:5d:0b:78:24:ed:9c:62:c2:cd:76:49:b3:f7:60:45:
b3:d5:cc:22:5e:92:9d:2c:b9:ca:21:68:b8:a8:93:57:b3:53:
1b:ad:8b:14:4b:b3:73:06:d2:66:47:e7:40:31:58:03:aa:96:
de:cc:f3:89:40:95:b5:96:79:ce:e6:1f:36:f3:7f:88:09:75:
e0:cc:84:8f:fc:61:bf:9f:93:62:0a:c2:3d:4b:7c:92:f3:f6:
a2:af:dd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:57:52 2025 by rpki-client