Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/400d4fb0-ee53-353f-b8b4-6e77949380d4.roa
File: 400d4fb0-ee53-353f-b8b4-6e77949380d4.roa (raw, json)
Hash identifier: 1GgrSzHoli5kwOb8++XvWqshOBOsflUgXCBvgf8j2T0=
Subject key identifier: 4E:86:E6:8F:D5:2A:71:D8:30:6C:8B:E6:4A:7C:AF:02:7A:94:98:A9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B638E514F0EF9E40D57D40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/400d4fb0-ee53-353f-b8b4-6e77949380d4.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b6:38:e5:14:f0:ef:9e:40:d5:7d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=8055027c-d383-4633-a2ca-7c3a04a88330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:ed:5f:ee:04:e2:b8:9d:23:41:8e:41:de:
92:64:e2:40:58:1e:b5:48:c7:01:f6:97:52:51:3b:
69:44:1d:12:c2:06:de:34:d9:93:0d:72:7e:7a:e7:
e1:f4:4e:7a:60:d5:76:32:ac:a4:f3:95:51:30:be:
d3:5f:4e:43:23:98:f7:c0:03:1b:0c:cf:46:2b:ac:
98:3d:a6:11:f5:a8:05:d7:44:07:1a:27:ce:d2:8b:
db:f5:f6:4b:0d:fc:1d:e0:9a:07:0d:95:9b:81:56:
2e:94:da:7b:94:3f:86:d2:1f:84:7f:6c:d3:55:91:
72:91:dd:15:6b:dd:f1:1b:c6:74:8e:d2:2a:2d:9f:
c2:2a:08:e0:11:99:cd:aa:5f:5c:ea:cd:e0:5e:4e:
26:ad:51:f6:63:15:28:00:d9:d7:a9:e0:af:f8:92:
6f:52:7d:62:d9:44:c3:23:89:ae:9a:f8:5b:2d:7a:
0c:97:8f:09:81:b9:b7:1f:db:fe:0f:46:cf:60:7f:
b3:6a:f3:90:db:5e:4f:bc:13:d0:47:e3:16:e5:92:
3a:33:e4:4d:a9:cf:3c:48:ef:5c:24:fe:b4:2d:ec:
6a:ec:63:9a:74:3c:67:9f:c5:b1:4d:ae:e5:bb:01:
46:aa:45:6c:76:49:85:c0:df:1d:04:84:07:9b:54:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:86:E6:8F:D5:2A:71:D8:30:6C:8B:E6:4A:7C:AF:02:7A:94:98:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/400d4fb0-ee53-353f-b8b4-6e77949380d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:f4:b0:7b:f5:3a:70:03:ac:22:3d:09:57:f3:91:01:91:26:
4a:81:f3:04:12:f0:ee:80:e4:99:74:08:d4:2b:14:47:e9:dc:
e4:67:99:86:c8:e4:22:95:2b:90:ba:92:dd:ff:22:c4:7d:36:
ee:1f:ee:d2:f9:8a:8f:ce:dd:88:d1:cc:9c:cf:6e:ad:a8:05:
85:54:c9:79:5c:31:84:f8:4a:3a:07:28:00:b8:30:b1:3d:b7:
e7:14:98:1f:c6:f5:2b:4b:2c:ad:7f:b9:ee:88:6c:dc:8d:d7:
19:d3:29:14:ef:12:d0:a1:ff:d8:80:bb:76:06:97:8d:bd:ec:
08:ee:25:d0:6d:fb:30:ef:64:19:ce:d3:8f:8c:7b:d0:42:b9:
27:99:a4:f7:50:61:5b:8e:a8:9a:1c:4b:9b:c8:2c:24:e5:7d:
19:24:84:ec:f8:fa:8a:0e:d4:56:28:c5:12:a0:bb:13:da:08:
5e:1b:41:16:5c:37:9e:84:98:9f:91:06:fe:b8:17:1e:88:70:
12:2b:cc:35:07:bf:6b:ad:8a:9f:0e:12:17:67:9e:0c:02:ea:
e6:d0:f3:e5:3d:62:0f:e9:39:c9:ec:8a:61:3d:bd:f3:cc:0a:
a8:09:d8:e8:85:26:87:21:54:27:fb:ec:6d:33:18:97:4f:33:
1f:f0:43:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:27:42 2025 by rpki-client