Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/59fc2688-d0d2-3897-84e8-89ed8db7e428.roa
File: 59fc2688-d0d2-3897-84e8-89ed8db7e428.roa (raw, json)
Hash identifier: 8KeZrkxz6Yz5LnUM13d5vxIkQ5K+NK+sNPuP5u7h/ZA=
Subject key identifier: D1:B2:47:67:87:CF:36:22:42:31:FC:5B:48:DE:D9:0F:93:CD:5F:1D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C5A9C21D1D30ADDABE1FA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/59fc2688-d0d2-3897-84e8-89ed8db7e428.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.109.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c5:a9:c2:1d:1d:30:ad:da:be:1f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=b23133d2-0e03-4e2a-93c2-e72f09ab5d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:cf:17:2a:d2:fb:fc:aa:8a:7d:42:a8:4e:
b2:7c:d7:91:74:35:80:30:5f:1b:19:96:29:c1:cf:
79:b3:bf:70:8d:d6:61:d7:4a:e0:7f:24:32:f1:b6:
fb:ed:d4:b2:d0:e8:dd:76:90:b9:ce:9a:8b:66:8a:
56:ae:10:4e:97:79:be:83:16:43:f2:e9:82:da:59:
4b:38:13:aa:51:69:77:7c:8f:af:b3:54:92:89:0a:
d9:b5:1b:54:0a:5b:39:65:03:84:ad:83:37:51:c2:
6c:70:82:b0:ef:61:04:d2:12:c3:bb:12:a3:2c:79:
41:d5:3a:03:c1:0f:cf:1d:dd:79:24:2b:f5:b8:0e:
77:73:bf:37:e9:6a:5a:17:a6:11:f1:19:8c:b8:3d:
f0:3e:ca:07:0d:bb:a8:3a:2f:ef:0f:65:9c:46:6a:
fc:72:87:89:51:5a:97:45:bf:be:e6:c5:48:82:62:
bb:52:3f:6a:9f:02:63:27:b5:d8:a2:6f:8e:7e:88:
22:25:32:b9:bf:35:47:3d:ac:7f:a1:d5:91:93:c9:
f6:0a:75:5e:42:25:7e:b9:56:a2:46:00:38:79:e4:
04:a4:ce:42:45:ac:c3:eb:4e:d7:8e:db:0b:bf:96:
d4:c3:63:6a:9c:3b:0c:59:4c:e3:5c:19:86:04:11:
65:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B2:47:67:87:CF:36:22:42:31:FC:5B:48:DE:D9:0F:93:CD:5F:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/59fc2688-d0d2-3897-84e8-89ed8db7e428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.109.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:b2:6c:74:18:23:3c:63:87:ce:f2:08:6f:95:b1:70:20:78:
d2:bf:34:cd:c5:c6:9e:a7:8a:9c:88:ff:62:ed:36:61:1e:d6:
a9:9c:90:ae:d3:36:e9:27:52:47:6d:16:fb:b7:3b:d5:47:d1:
74:0e:80:67:f8:44:1b:9e:93:da:89:c9:91:16:3b:3c:9d:05:
fb:0e:5c:11:3f:10:68:cf:88:c7:2c:39:39:db:52:c9:14:11:
27:3d:50:32:c3:82:7f:46:ff:a8:bb:b2:06:f9:07:68:49:63:
31:a5:85:69:ba:d3:52:3f:4f:e8:6e:23:25:30:cf:59:81:5b:
37:e8:83:ee:9d:2d:5f:f2:5f:5f:0f:47:65:cd:11:c8:9c:3c:
8a:3f:b8:f3:7f:8c:e7:86:2b:6e:bb:79:b7:e9:0c:7d:11:24:
f7:23:b2:af:8a:1d:4e:a9:06:39:75:a2:b0:14:08:8e:a1:38:
f6:cd:e1:17:e0:4b:49:f3:30:a7:a4:2c:19:71:0a:0f:cc:0c:
c0:99:ee:0b:41:50:b3:22:bb:03:9d:11:e9:61:99:dc:8a:79:
ca:52:63:c8:de:05:5d:ce:de:9e:4a:08:4a:1c:d4:45:72:40:
36:85:e0:4b:04:37:07:8a:15:21:1a:64:b4:b1:44:c0:04:b7:
7b:75:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:08:44 2025 by rpki-client