Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/832ebdfc-1d16-3245-b71b-d463327186c7.roa
File: 832ebdfc-1d16-3245-b71b-d463327186c7.roa (raw, json)
Hash identifier: MkZohu2qTVDQpRCYeKSklZQkyuiukXDHLku/KTHdMAs=
Subject key identifier: 10:29:41:C9:62:7B:6F:D4:5C:E7:F8:C9:C5:D9:8F:48:62:BC:93:0F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A17E6E29ABCCF0E985FB60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/832ebdfc-1d16-3245-b71b-d463327186c7.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.176.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a1:7e:6e:29:ab:cc:f0:e9:85:fb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=dc07141b-7b0b-4cc0-8909-4f907077326c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:76:d6:01:d9:e8:eb:8c:66:3b:27:87:4e:
ed:d6:48:82:e2:49:6b:64:05:f7:63:5f:af:d0:e8:
4c:7b:46:42:40:e0:07:26:48:31:3b:e8:1c:4e:3e:
7c:3f:e3:17:11:48:42:4a:6c:92:b5:67:3d:e6:4e:
e9:9a:9c:10:19:6f:cb:18:0e:00:fc:f3:92:a8:8f:
9e:64:62:8b:43:54:17:40:26:05:10:f1:d0:2a:e1:
54:2c:b8:aa:b1:be:92:8a:e7:66:b5:5f:88:66:cb:
74:db:22:66:a9:e3:18:31:20:87:88:0b:96:d6:16:
41:ac:91:50:9b:d8:18:fa:ce:07:3c:95:47:71:82:
91:cc:93:74:6f:26:ae:45:d5:98:41:59:cd:3c:e0:
2e:10:11:50:39:fd:b5:15:cf:3c:87:10:de:82:0f:
83:5b:22:11:a2:9a:cb:8d:47:24:0c:a7:0e:bb:7e:
5d:65:49:22:a3:a5:c4:63:40:8f:fb:77:b4:63:c8:
97:91:3b:a8:a2:21:46:08:94:57:ed:ca:4b:59:10:
28:18:e9:cb:70:87:e9:85:b7:bd:4b:b0:65:a6:26:
28:0c:27:43:cb:d1:9d:1c:32:9f:16:e4:f7:00:a4:
de:66:be:60:19:0e:f4:0d:67:a8:2a:d7:4b:08:c2:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:29:41:C9:62:7B:6F:D4:5C:E7:F8:C9:C5:D9:8F:48:62:BC:93:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/832ebdfc-1d16-3245-b71b-d463327186c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.176.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:f0:c3:9c:e7:92:a9:4f:18:e2:e5:00:5c:a5:10:6c:29:b0:
bf:a5:d8:6e:84:5c:12:58:a7:7c:58:2b:7c:6c:cf:11:fe:8d:
98:64:03:b1:d0:77:ae:9c:1d:47:71:32:39:8d:01:de:51:aa:
3b:21:be:ab:c8:48:e5:15:0a:1f:9e:12:da:55:e3:8e:98:dc:
52:0c:c7:42:a3:2e:18:67:6e:3c:b1:c8:ee:b0:9c:e5:11:a4:
31:f9:28:1f:17:f6:52:0b:68:d9:6e:32:4d:0b:28:e9:52:0e:
62:8e:b1:92:1e:94:48:02:34:17:83:d4:4d:1a:23:cd:f7:9d:
1c:37:18:7a:f5:93:ce:3c:53:51:89:17:52:db:65:58:87:04:
aa:6c:d0:c5:5a:17:26:15:91:ab:a7:1e:c5:53:b8:60:c8:f2:
46:92:b2:94:06:d6:1e:af:ef:53:82:60:5a:cd:31:36:0a:72:
e7:d6:7c:ba:9c:7c:11:80:d7:a5:d3:57:a3:35:43:10:cb:37:
8b:1c:7e:1f:f3:6c:65:3e:ac:a0:bd:21:1c:ec:df:e8:73:d1:
b8:1f:e3:4a:68:4c:ef:42:c1:b0:44:6f:18:17:0b:e2:7f:c0:
a7:3f:40:ce:1a:66:c0:99:1f:09:c8:3c:2c:f5:e6:6a:2e:cd:
89:12:86:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:08:14 2025 by rpki-client