Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68b877a6-a813-3e9e-8b18-6912fd7faf42.roa
File: 68b877a6-a813-3e9e-8b18-6912fd7faf42.roa (raw, json)
Hash identifier: e3VyAkUvmHFTD6TgzQp6x9R6f0FynG+qrhjNjHIzOLo=
Subject key identifier: C1:0C:B2:28:7C:51:4A:7C:E4:A4:01:45:71:B3:F5:CE:EE:6F:8B:39
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A82E52FFCC440D27F9F140
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68b877a6-a813-3e9e-8b18-6912fd7faf42.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.87.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a8:2e:52:ff:cc:44:0d:27:f9:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=138ce030-385b-487a-b18f-91e123b1edcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:bf:cc:70:a6:67:91:55:04:ec:b5:82:aa:
4e:27:30:ac:c8:c7:50:c3:2f:db:03:06:e3:69:35:
b3:1d:e8:47:fb:11:0e:d2:b5:64:a7:84:28:0c:05:
eb:70:37:88:22:b1:57:6a:00:dc:6d:73:64:45:dd:
a0:4d:a3:ed:68:00:3a:25:67:33:9d:25:b2:6c:6b:
62:fb:e2:4d:a1:92:11:52:6f:e9:3d:7a:69:54:e8:
fb:c5:1a:46:ed:07:4a:4e:f7:68:8c:fa:03:aa:7d:
fa:dc:55:61:9d:ad:8d:b9:e9:34:d7:90:f5:96:21:
fb:cf:71:39:e1:ae:ad:34:a3:7f:d2:e8:21:cf:6b:
12:cd:46:b0:16:7b:e1:aa:00:1e:93:be:aa:b1:7b:
e6:32:e5:bc:75:5d:88:ae:4a:72:a0:1f:72:09:ec:
e8:9b:d5:d9:6a:f0:bb:11:10:b2:1c:0e:08:10:18:
1a:bb:2c:9e:b1:e4:7f:c3:03:c1:ab:74:52:0e:5e:
79:2d:08:d8:56:7d:d8:47:dc:f1:65:76:fb:b9:59:
43:32:21:5f:62:89:ab:a1:9e:64:c6:4c:8e:2f:9b:
9a:5c:ea:20:66:8f:60:0e:61:83:47:e8:78:c8:2b:
4c:7e:72:58:19:5e:7b:59:6f:53:e3:2a:91:d0:5d:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:B2:28:7C:51:4A:7C:E4:A4:01:45:71:B3:F5:CE:EE:6F:8B:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68b877a6-a813-3e9e-8b18-6912fd7faf42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.87.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:8e:e0:c9:75:95:f1:7b:a9:3d:b1:2a:bc:0d:82:89:83:66:
34:54:ab:ba:d7:b2:80:1f:5b:07:9c:f6:23:6b:fa:d7:ee:72:
75:9e:f4:04:65:59:cb:a0:db:eb:a8:01:7d:56:91:77:4f:5d:
b6:f9:f8:46:18:af:a2:6b:71:95:a0:a5:6e:f6:10:51:8a:d8:
86:ac:51:45:69:9d:ca:bf:7a:3b:7a:ba:22:44:b0:73:21:17:
a7:6a:91:76:36:30:4b:b5:59:4f:68:e3:63:3c:16:e5:cb:8d:
37:8e:0d:b5:c5:59:e7:ba:0b:ec:19:71:60:8a:09:d4:9a:a5:
4d:89:09:55:43:ff:66:91:94:57:38:69:f3:2b:9d:9f:49:be:
f4:cf:a0:fc:31:e1:f8:d9:26:4c:03:0f:5b:11:da:61:eb:e0:
09:54:99:fd:f7:87:2f:15:60:92:ec:58:04:ed:9b:7a:dc:75:
9d:4f:0a:32:c6:fd:0e:83:4c:2b:b1:9f:a9:8b:19:ed:e1:fc:
b9:50:65:70:d0:3e:58:2b:9c:0d:9b:fd:e4:19:43:95:88:06:
30:91:13:27:ea:97:f1:1b:3b:fa:cd:38:7c:a3:24:b2:df:43:
7e:cf:db:c2:19:d5:ef:4a:6e:49:ca:ff:17:94:7b:1a:2e:98:
c4:45:cd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:48:35 2025 by rpki-client