Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a5b5b3d-a416-3379-b801-ce4b28bb2bb7.roa
File: 7a5b5b3d-a416-3379-b801-ce4b28bb2bb7.roa (raw, json)
Hash identifier: 7TJ3rLVx+Ud7ZLbO48rU+gYZRz1MCwQc5bRuA4coSUI=
Subject key identifier: 02:5C:B2:12:AC:5D:A1:B2:75:D7:D9:97:DF:D0:11:72:63:2D:C3:95
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A6C9D107EA34C4591E1300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a5b5b3d-a416-3379-b801-ce4b28bb2bb7.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.69.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a6:c9:d1:07:ea:34:c4:59:1e:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f81125ff-1b7f-4a3d-bc12-bac0812100d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:68:be:4f:48:fb:d7:d9:85:ad:49:8a:3a:
e3:2d:8a:8c:22:8d:78:1a:db:d2:87:1b:90:c7:e0:
c0:92:70:e3:25:22:02:46:59:3b:19:4d:0a:5e:b8:
80:c1:3e:0a:9d:d3:23:b5:e0:4d:75:e9:66:ea:4e:
01:df:42:50:aa:cc:9e:ad:cb:19:80:61:d0:7e:41:
19:ed:42:33:19:5d:44:cf:ee:ee:ad:c6:12:ed:c9:
3e:95:40:28:1d:ec:81:6e:03:6a:b6:d1:34:7c:40:
3f:8c:65:d6:0c:99:f6:6c:ce:6f:d9:cd:52:be:c4:
87:48:66:09:bf:e3:7a:c0:61:73:5f:c2:34:2e:70:
b0:35:23:f5:bb:6a:f6:19:d0:d5:e0:82:2a:7a:10:
24:5f:c2:1f:8d:3f:36:cb:44:6f:2a:c3:81:8f:24:
90:7a:65:2b:74:77:b9:0d:07:17:ea:dc:41:e2:8c:
15:16:22:b6:ce:cf:60:7c:19:33:c7:b5:b7:0e:46:
d8:e6:ae:ba:25:02:5a:96:5f:c0:6e:3c:46:a7:25:
e3:ba:ab:90:31:06:6a:aa:5b:9c:26:44:93:08:b0:
54:df:0b:4d:42:be:fc:0d:96:c3:24:bd:1b:2d:77:
ee:4a:fb:ba:c6:1f:f1:56:35:bd:de:93:be:ab:05:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5C:B2:12:AC:5D:A1:B2:75:D7:D9:97:DF:D0:11:72:63:2D:C3:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a5b5b3d-a416-3379-b801-ce4b28bb2bb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.69.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:88:83:9b:10:62:1d:32:51:7e:de:e0:80:0f:3a:ea:4f:0d:
9e:03:57:fb:8a:04:01:75:37:7d:ba:82:7a:3a:a7:cd:40:98:
58:58:56:f6:9f:ce:53:b1:44:2e:8d:3f:ed:41:31:45:c7:27:
fe:d6:28:de:ca:19:34:8c:f9:86:6a:9a:1d:52:e8:3b:69:6a:
40:45:82:f5:3d:88:e4:8e:b9:91:fa:ef:67:49:03:e6:5a:58:
b2:1f:55:f6:13:f0:06:45:a3:b3:db:04:4d:1f:b1:b4:49:eb:
84:e3:e1:b0:40:2f:3d:7b:5d:3d:9e:2b:3e:a7:aa:ac:56:44:
b0:29:ec:85:8c:ac:42:f9:40:0e:ef:a0:e1:b0:79:29:46:2b:
36:f4:9c:0e:bd:67:7d:e8:db:31:f2:59:a3:72:79:cc:e0:a7:
09:2e:54:f6:41:66:2a:f8:39:5f:96:dd:7a:b7:39:4e:3b:fb:
dc:78:82:0b:a0:8a:b5:ba:55:57:d1:d3:6a:47:6b:5f:61:46:
bc:8b:ef:e0:7d:ee:14:49:6c:ea:8f:09:23:fc:5c:2b:90:9d:
c1:b8:1c:34:d0:2f:c5:24:43:74:c2:ae:ca:95:86:b4:64:2a:
2d:16:02:55:4a:35:9c:23:20:be:64:e0:f6:83:92:45:1a:4f:
81:f8:c0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:02:33 2025 by rpki-client