Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43f4cb8f-8dd0-31f8-a460-5b2c1e87752a.roa
File: 43f4cb8f-8dd0-31f8-a460-5b2c1e87752a.roa (raw, json)
Hash identifier: JDJNdzGO8m+cFSLzVknUDxBXQVSoyMVPHYqRf+pCeyY=
Subject key identifier: 1D:22:5E:D4:C5:ED:C0:DC:40:95:6D:04:56:EE:79:01:83:8D:FB:92
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C3FF6079B2C97AB74FE080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43f4cb8f-8dd0-31f8-a460-5b2c1e87752a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.140.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c3:ff:60:79:b2:c9:7a:b7:4f:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a10a972f-f80f-43fc-aa9d-cbda7aecd8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8f:40:36:fb:88:36:95:74:73:68:cb:1c:6e:
1d:10:63:ac:4b:c0:d7:a7:8a:c5:ae:38:1c:ea:12:
41:ed:95:1b:50:1a:52:1d:44:77:47:78:a0:45:d5:
b0:6b:1a:31:cc:cd:db:51:12:95:3f:7b:fc:54:b8:
fa:e1:b0:0d:53:05:17:eb:91:1e:9a:cd:6c:5b:04:
d5:7b:fb:29:bb:a0:61:9d:b2:e5:b8:dc:62:0c:f9:
10:71:ec:cc:30:d1:fa:90:d8:3b:8c:b9:1a:5c:54:
0b:7d:60:b9:16:89:49:ef:8a:6c:02:c4:f3:c3:10:
34:b8:63:af:18:9c:14:68:50:77:f0:c3:68:52:06:
1c:3a:1a:fe:5f:40:24:4c:d3:ff:b3:30:44:8d:b0:
3c:04:13:50:28:41:94:c8:22:e3:b1:49:15:32:14:
f3:40:53:93:56:9d:dc:25:67:2e:3b:c3:fa:e0:c7:
0a:6d:54:43:15:c1:7f:fa:01:84:19:fc:5b:57:6d:
7c:71:a6:c1:3a:03:e4:ce:9c:8d:07:d7:ae:8d:cb:
c9:f4:bc:73:04:b5:0e:e1:9f:4c:b6:37:27:b8:c9:
29:4d:ab:9c:0f:14:68:18:e7:47:62:e8:06:fa:d0:
8d:ce:36:a4:3b:81:a2:f2:83:45:2f:2c:ff:8d:94:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:22:5E:D4:C5:ED:C0:DC:40:95:6D:04:56:EE:79:01:83:8D:FB:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43f4cb8f-8dd0-31f8-a460-5b2c1e87752a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.140.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:ff:fc:ca:0a:84:f7:c9:78:c1:0d:c2:c3:02:94:46:a9:58:
48:1d:34:b1:47:20:7e:51:21:a6:5c:af:14:9e:07:23:96:61:
39:d5:92:a6:34:45:20:a6:aa:3c:6b:d7:dc:3f:82:d3:df:e4:
af:b6:5f:eb:de:8b:d0:06:28:e4:22:4a:88:ee:04:6b:43:de:
f1:c3:f0:88:18:82:ef:e7:de:68:d6:6f:7f:9d:9a:c2:51:6b:
34:cf:3e:89:2c:f3:3e:3c:58:cd:f7:8a:83:87:d9:fe:61:ed:
ae:b1:ea:a1:54:ac:16:74:28:96:a7:40:09:b3:cb:37:85:30:
29:3b:da:f1:60:b5:79:d9:62:2a:82:2d:93:0c:1c:e0:21:fd:
45:f7:1d:f2:7f:b5:7a:83:ad:82:27:58:74:6f:a5:63:3f:ab:
ae:86:f0:e6:d4:3b:35:a9:e7:63:3d:36:64:06:a9:84:ba:9c:
85:08:a9:2c:13:62:b5:34:64:be:82:77:9d:f4:0c:d3:06:e8:
19:ca:85:a9:df:02:dc:70:0b:75:00:b3:88:bf:ae:06:cc:11:
7c:ec:b2:c6:13:eb:0e:04:c0:34:cb:84:e3:f6:37:f4:fd:41:
a6:bc:da:53:0a:f6:d4:ec:ce:14:14:71:58:0f:e6:1b:67:31:
2e:f9:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:40:15 2025 by rpki-client