Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76ec5155-339d-3ead-a97d-8fb10e6d5569.roa
File: 76ec5155-339d-3ead-a97d-8fb10e6d5569.roa (raw, json)
Hash identifier: PsV6xTFdI5Iy/OpVJvzDN9EWIXPifWMSm+/0rp4CJtA=
Subject key identifier: 64:45:5D:83:DB:D4:F5:DC:0D:83:67:A0:50:02:ED:4F:6D:F8:72:1E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C519BCC2BC43D29C86F7C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76ec5155-339d-3ead-a97d-8fb10e6d5569.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 34.144.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c5:19:bc:c2:bc:43:d2:9c:86:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c113d1ce-20db-4d34-be46-c0618dd9cb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:7f:ef:6e:8c:c5:a2:20:c9:fc:f3:9c:94:
4e:20:ce:70:6e:14:3e:0b:92:7a:6d:d0:31:eb:ef:
f7:dc:30:a7:b6:1d:cb:30:28:bd:c4:cc:4c:06:15:
d3:c6:b4:20:bd:2b:6a:ef:50:c1:34:38:d1:21:84:
6c:c8:d7:f1:11:8a:8a:57:8b:66:38:b8:c1:10:54:
f6:e3:d5:46:0a:fd:68:f8:f9:92:25:12:15:05:5b:
19:ae:9e:2c:fc:f1:75:c5:f6:a6:8b:5f:d8:ef:97:
73:32:ed:4f:0b:ed:2b:1f:6c:b9:6d:82:ed:5c:b5:
a1:a9:33:d5:c6:ac:10:1c:47:41:f2:04:f8:a4:b4:
1d:d2:03:21:c1:ed:2f:d3:8b:f9:11:71:22:ce:8c:
64:1a:1f:bb:1c:da:e7:2d:05:b2:4f:69:cd:5e:53:
3b:33:17:03:3c:21:c1:67:09:18:97:82:18:94:a1:
56:0e:f8:31:ab:28:14:ae:cc:8e:0a:c7:b6:f7:0d:
32:55:0a:b5:b5:fa:81:50:51:c0:b8:1b:df:62:ea:
06:5f:bb:48:a5:35:c4:0f:66:6d:8d:93:25:4d:43:
65:f9:3d:9f:c8:b6:9a:4d:e0:57:9b:9b:51:40:19:
ff:f5:83:0a:85:e1:8c:77:e3:3e:74:83:d9:7e:b4:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:45:5D:83:DB:D4:F5:DC:0D:83:67:A0:50:02:ED:4F:6D:F8:72:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76ec5155-339d-3ead-a97d-8fb10e6d5569.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:0c:53:36:18:46:c4:81:1d:4e:0d:7e:ac:ce:8a:35:dd:b5:
b2:22:a8:4c:8a:66:0a:de:c8:ae:d0:c2:75:3a:52:79:9a:30:
c3:09:af:4d:16:8a:1c:ee:6b:2b:94:5f:92:01:3f:5a:46:a5:
3c:dd:e8:03:53:ca:ae:f0:b2:f1:65:7a:87:93:db:d1:4a:b3:
0f:ba:8a:08:4b:3f:68:fd:a6:ba:ee:7c:c9:6a:18:ba:91:c0:
c5:dc:ca:37:19:47:ac:3b:b7:32:99:00:6a:d3:3e:92:f1:77:
ff:c9:ee:f5:a2:63:d6:8b:38:4d:ba:f3:56:b6:86:55:2f:d9:
a1:c4:23:cf:77:38:24:09:99:80:b1:98:af:cb:9b:ca:74:08:
2e:43:1f:d9:33:74:16:8c:8f:2e:38:54:d9:81:ae:cf:52:3f:
a8:1f:28:f3:4c:0c:8c:a6:55:a7:44:a0:ab:69:b0:62:6c:10:
69:5f:a6:87:02:21:8b:44:31:33:97:aa:c5:5f:0d:10:7b:e1:
1c:63:53:bc:23:fb:e6:93:41:5f:03:0e:22:3d:ed:a3:41:5b:
0d:c8:a8:9e:c4:31:8d:3d:41:f0:b6:f7:fc:62:eb:ee:24:e2:
94:d1:08:2f:f7:c2:62:cb:20:71:fe:03:d9:73:c2:88:a3:e8:
17:bc:67:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:35:59 2025 by rpki-client