Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8472cc35-4656-3cfa-8e42-89a90f228539.roa
File: 8472cc35-4656-3cfa-8e42-89a90f228539.roa (raw, json)
Hash identifier: Mid85wDxaAj96j2P5OoOtn0ZBTiTHJ1PrgDgr9vmYBM=
Subject key identifier: AC:10:48:C8:E0:FB:E6:55:EF:DA:C3:8A:30:A9:1A:6B:84:B0:D1:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285839B8D03001A87835815769B3A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8472cc35-4656-3cfa-8e42-89a90f228539.roa
Signing time: Mon 26 Apr 2021 04:00:00 +0000
ROA not before: Mon 26 Apr 2021 04:00:00 +0000
ROA not after: Sat 29 Jul 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.103.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:b8:d0:30:01:a8:78:35:81:57:69:b3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 26 04:00:00 2021 GMT
Not After : Jul 29 04:00:00 2023 GMT
Subject: CN=2ee2cf57-ddb5-4211-abee-198928a3e96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:db:b6:3f:6f:16:0b:8e:65:0c:e8:47:0f:
cc:0c:b4:bf:d6:f9:b9:d0:71:21:00:22:32:fd:e1:
ab:a0:7d:a6:74:f1:95:3a:1b:b7:8b:e2:c2:ee:cc:
69:ae:39:8f:d4:cd:79:de:4a:67:52:74:2e:c8:1b:
63:17:ea:9e:e2:22:3d:25:1f:b2:f3:a7:3c:15:84:
f2:19:3f:e9:3b:d6:a3:ce:5c:29:d4:74:fa:57:c5:
ae:e6:59:cd:81:f4:97:18:21:f4:a8:bf:28:7b:ed:
1c:7d:91:b8:00:69:1d:c3:25:8e:3e:b4:1d:03:aa:
f1:e5:44:6e:27:78:ef:0e:1d:89:a6:51:07:6e:37:
45:66:fc:94:11:40:31:22:ba:3a:ce:a4:6f:d3:a3:
46:9c:da:a2:78:92:6f:10:de:b0:00:d4:32:73:bc:
84:15:dd:02:cd:68:b4:37:1b:c7:12:98:bf:8e:6b:
3a:a3:0a:c1:46:08:58:8b:03:58:00:e2:9b:4a:82:
bf:76:84:02:d2:8c:3c:b4:9c:3d:c1:d3:00:f8:6b:
7b:1a:03:8d:1d:43:3c:f8:2a:7f:16:b8:99:76:d7:
25:bf:3c:62:86:88:54:b5:36:5a:bf:7e:6e:db:6c:
5b:d2:ca:42:06:28:85:96:e9:6b:f7:7d:98:a2:d4:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:10:48:C8:E0:FB:E6:55:EF:DA:C3:8A:30:A9:1A:6B:84:B0:D1:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8472cc35-4656-3cfa-8e42-89a90f228539.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.103.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:8e:cc:77:39:af:ba:23:31:e8:c5:9f:18:e1:cf:bb:cd:45:
6e:88:b4:81:67:2f:5d:20:80:e5:2c:4c:42:f0:a2:d5:ff:09:
8a:f5:bb:f2:44:46:4f:81:e9:db:13:8a:8a:90:96:5c:c8:07:
55:a9:21:5e:ff:23:cb:bf:53:10:a5:9f:f2:7b:6c:0c:5a:92:
f5:84:e7:d9:80:01:b1:cf:80:f3:fa:91:82:93:f3:69:c7:f7:
fd:c9:69:64:cc:0d:b9:c0:ee:2c:8b:79:f1:8a:25:36:c0:82:
db:0c:6f:fc:6f:4c:38:6d:cb:33:c2:15:9c:48:4f:32:19:5e:
8a:28:5a:da:93:69:5e:24:67:0b:8d:d2:82:e9:30:94:4c:44:
35:a9:d2:e2:6f:48:95:44:3c:88:a4:e3:45:21:9f:0f:6d:8e:
f6:bb:65:75:fd:f4:f8:e9:0b:c4:7f:d2:20:29:89:9b:d0:37:
49:b2:a8:d0:b5:ed:3f:94:7a:28:20:41:d6:86:c5:f9:ce:78:
98:4b:c0:a6:51:f7:49:27:ee:0c:a6:5b:68:9f:f1:20:1d:e2:
41:87:44:53:d4:91:72:36:7c:77:d1:52:ba:26:ae:af:b4:55:
df:05:3a:12:e4:c0:4b:a4:f9:d0:b4:3c:36:58:08:c6:f3:fd:
2f:62:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:12:56 2025 by rpki-client