Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7861dd18-c669-3ea8-8dea-8ce4a0db1f98.roa
File: 7861dd18-c669-3ea8-8dea-8ce4a0db1f98.roa (raw, json)
Hash identifier: 1U8on1d5IB0uIbuGvEOoTy8MJ+s5yYgNu5zzzp4Okp4=
Subject key identifier: 3C:AB:3B:0B:46:BB:1F:30:23:BA:6B:7F:B4:6C:B5:93:A3:B3:AE:0C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C50A6C424770E90F0E92A8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7861dd18-c669-3ea8-8dea-8ce4a0db1f98.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.97.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c5:0a:6c:42:47:70:e9:0f:0e:92:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=0996247d-e516-4f70-ab51-9e5ec28cf671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:f9:09:00:4e:e8:45:6c:d0:b3:49:dc:a2:
25:37:55:87:36:a7:39:bd:92:e4:30:ae:ed:31:2b:
49:3f:3a:7a:18:84:f8:c2:bc:6b:6f:ac:5d:9e:df:
ef:16:85:2a:05:b4:ce:76:72:42:54:ff:32:b4:a2:
11:f3:30:d3:93:29:de:ea:ee:8c:61:a1:e6:a0:c1:
2c:a9:e4:04:3b:de:7f:2c:19:90:18:b3:37:9d:d7:
06:06:26:82:08:f2:bb:86:c0:db:77:1e:57:1b:87:
bf:12:ef:11:86:93:5d:0f:a2:39:c2:9f:fb:a2:0b:
00:b4:3c:72:0f:95:5b:e9:be:da:e0:a1:0b:4a:9b:
34:3d:c4:7d:28:ff:2d:71:b1:ca:64:f4:50:9b:4b:
af:92:1c:d8:a6:70:40:ca:be:d2:e6:d4:00:bb:06:
e3:53:e7:ca:19:85:f2:29:29:11:c3:00:64:e6:0b:
8c:2d:6a:92:29:c1:47:09:b7:fc:05:a0:ee:19:a5:
b8:ae:4c:ce:01:d8:e7:d7:2a:6f:f8:1e:21:04:ff:
2c:0c:1c:77:a2:4b:70:22:70:1f:a7:45:65:7c:8a:
f1:12:73:60:51:10:8f:05:1f:d8:2d:a6:7a:9d:e0:
e4:7f:82:27:c2:9b:28:7c:1b:46:1f:c0:df:ae:20:
53:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:3B:0B:46:BB:1F:30:23:BA:6B:7F:B4:6C:B5:93:A3:B3:AE:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7861dd18-c669-3ea8-8dea-8ce4a0db1f98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.97.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:64:2c:d8:02:9f:4a:21:55:76:fc:05:8b:83:58:9c:54:02:
b0:bc:6a:c4:df:6c:ac:49:91:29:44:b4:14:ec:0a:2d:6e:db:
d2:2f:b7:a1:0c:b4:a6:c1:b9:33:39:73:04:f9:64:02:ee:87:
8d:18:f1:8f:a4:56:9b:b0:da:f5:48:7f:99:5c:1f:41:35:49:
0f:47:6d:9d:2a:f4:99:a1:a7:f5:bf:a5:00:04:79:7c:a9:3d:
79:27:57:df:a9:53:8f:33:1a:71:d0:0c:23:14:ac:bf:2e:36:
f7:ef:40:c8:22:15:cb:26:5e:90:38:39:80:04:32:74:cd:9a:
98:64:d9:a0:fa:2e:c3:55:9e:46:be:45:10:ab:48:58:b5:f7:
62:1e:93:33:77:68:11:31:3b:a4:8c:4a:2b:3d:ec:8c:ec:c4:
fb:d2:88:c4:a9:f7:60:fc:95:5b:23:d8:cc:ee:b2:3e:ef:05:
ad:40:7f:df:31:45:db:19:a5:46:57:eb:43:44:ca:58:15:0c:
d0:7d:d8:4e:14:5d:ac:a1:05:7c:dd:09:8f:ac:ac:82:12:e8:
5f:0a:7d:ba:3f:73:0c:13:9d:f8:5a:7a:4f:b0:0e:4b:2f:0f:
d4:1c:db:20:0c:f4:c8:1d:dc:82:35:94:b5:87:b3:f3:44:1f:
64:9f:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:39:13 2025 by rpki-client