Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/555d58f3-e1e8-30ce-ba84-151bd7245057.roa
File: 555d58f3-e1e8-30ce-ba84-151bd7245057.roa (raw, json)
Hash identifier: hz3UGT3/JymHtak3YwQ7x/vQH9hm8ahj4bZeFmRUHBk=
Subject key identifier: 64:07:13:43:C5:F9:F5:B3:1B:D5:66:79:DF:3F:54:72:D1:AE:B4:D2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA79F7AE7A8C1CE4B63E25340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/555d58f3-e1e8-30ce-ba84-151bd7245057.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.87.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9f:7a:e7:a8:c1:ce:4b:63:e2:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=7a72df9a-d0d3-45c1-89d1-f891fe0f966e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:ab:6d:68:83:81:a6:4a:bb:c1:c9:e9:03:
bf:61:e9:d3:fe:f5:91:e8:99:dd:33:65:c8:3a:ed:
ac:25:ef:70:a0:4b:b2:6e:6a:92:c6:c9:96:88:ad:
d6:96:c2:5f:c1:db:47:8a:0b:0a:1d:19:02:7d:ca:
9e:65:6d:fc:92:0d:54:ac:b0:fd:43:e3:76:9b:97:
b4:c8:f9:c3:52:82:d0:5c:3c:91:ba:09:96:26:b4:
00:11:fc:a2:e1:e2:cc:cd:eb:ee:42:2e:d9:74:95:
6b:f4:7f:16:d3:0e:6f:c3:9f:d7:81:73:ba:10:29:
6c:f8:c2:cd:4e:c7:5d:7d:b0:96:32:ef:ea:53:76:
09:90:2d:c5:d0:66:c5:dd:cd:44:fc:3f:d0:cc:ff:
52:22:1b:cc:38:12:69:0b:99:ae:0c:02:89:e9:0c:
68:42:72:45:75:76:f6:d2:8b:76:3f:2e:24:b0:17:
02:6a:45:70:6d:29:51:40:e7:a5:7d:96:84:91:32:
38:dc:36:da:89:9b:7f:86:52:de:2d:2d:e7:c9:e5:
a3:b7:f6:b6:c1:db:78:f6:36:b2:87:b0:36:d7:fc:
4e:f8:7d:55:fe:44:80:58:42:72:ff:b3:df:83:22:
e4:d9:0b:f3:10:f0:6f:90:b9:70:b5:ee:49:08:e0:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:07:13:43:C5:F9:F5:B3:1B:D5:66:79:DF:3F:54:72:D1:AE:B4:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/555d58f3-e1e8-30ce-ba84-151bd7245057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.87.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:b9:e7:13:bb:33:ce:59:65:b0:c7:04:0c:10:7b:2f:ec:46:
13:23:37:ef:2a:87:8d:64:bf:78:a1:80:06:e0:ee:25:0f:72:
a7:c9:cd:1b:cd:ea:a8:52:db:fa:ae:1b:8a:64:b3:83:5d:00:
38:39:f7:da:0e:fe:42:fa:00:3b:1e:e4:9a:da:d2:63:de:49:
a0:35:97:36:65:af:61:55:8b:ef:98:b6:1c:9c:b6:69:23:99:
68:37:4a:7f:b6:89:a2:20:ca:fe:8a:b2:f5:4b:92:ca:77:82:
c6:f9:b0:63:9a:24:75:92:db:7f:60:f6:b7:96:47:0c:7c:4f:
84:78:c0:1d:cd:ab:f0:0b:c5:81:94:f5:1e:0d:3f:e2:90:87:
03:97:b5:dd:e5:0c:68:b6:6c:6c:e3:e7:b9:43:eb:ca:6c:c7:
52:32:67:05:66:43:66:9a:c2:83:07:f8:85:0f:5f:da:ed:97:
1b:e3:6e:f4:c2:d9:6d:a1:30:bf:39:ba:3a:2b:55:58:b3:4c:
7a:ac:d4:ca:df:de:d0:7d:ca:a7:27:25:c2:22:ae:2e:b7:f4:
45:11:28:90:9d:f0:b5:61:2c:54:7f:a8:ff:22:56:92:72:d4:
b1:6c:4a:55:99:e1:38:a6:49:76:07:e1:96:ed:52:2a:05:2a:
4b:97:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:54:09 2025 by rpki-client