Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/857b2dca-8456-397c-a88b-f0b80e9b725b.roa
File: 857b2dca-8456-397c-a88b-f0b80e9b725b.roa (raw, json)
Hash identifier: A093motPEJjrn/QjhXYgJsTi/MoiOt+zheKgRjnTvD8=
Subject key identifier: 17:21:58:2F:D2:8A:85:CE:39:7D:72:6A:7B:53:87:2C:A0:24:6A:A1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C05DF8D59BF4F759FF9200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/857b2dca-8456-397c-a88b-f0b80e9b725b.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.148.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c0:5d:f8:d5:9b:f4:f7:59:ff:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=42d87e9a-e4d1-4f59-a9b0-9e70c252a863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:ea:de:f0:a1:b7:31:87:da:f3:d7:73:9d:
67:5c:05:a2:a5:22:26:a8:fe:88:f7:b0:17:ad:55:
73:35:6a:db:17:31:16:7f:d3:8a:65:e3:76:21:78:
00:bb:ae:e9:f2:6f:2f:31:01:0c:f3:6b:2d:18:8e:
b6:89:bc:f4:af:46:bd:d9:cb:22:d6:5b:3c:02:ad:
47:91:08:be:b7:47:25:f3:47:d8:4f:35:bc:9c:5c:
74:48:77:ef:42:d7:f3:f3:e2:d5:fd:05:c4:20:a1:
19:24:0a:52:6d:67:01:90:1f:31:59:77:8a:46:8e:
6c:f9:51:f9:5c:a4:48:a9:6e:bc:ac:6a:f6:80:d1:
f8:5d:c5:35:12:3a:9a:0a:f1:2d:d1:51:11:46:6b:
65:bd:6b:e6:d9:e3:6c:53:f9:96:2a:74:d0:8d:ba:
0b:e1:3c:66:44:6d:f3:0e:d0:4f:3e:4d:00:85:6f:
f2:bb:43:11:b7:77:83:a5:c7:17:08:22:7f:d3:7b:
0f:f4:48:85:6e:3e:56:8a:75:2f:57:2d:16:22:ac:
ef:c3:ca:99:60:e8:8b:b4:d6:cc:74:2b:ad:cd:ff:
c3:56:fb:8b:a5:5d:5d:f4:f7:d6:65:ac:b1:a1:d1:
0c:d9:75:65:59:96:7b:a6:a3:fa:22:db:86:fb:2d:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:21:58:2F:D2:8A:85:CE:39:7D:72:6A:7B:53:87:2C:A0:24:6A:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/857b2dca-8456-397c-a88b-f0b80e9b725b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.148.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:16:e1:48:94:ac:69:b2:22:33:17:8e:92:97:ab:21:ad:c0:
df:54:7e:d4:dd:14:0c:6f:74:31:df:2a:c0:c3:fe:02:ea:8c:
74:df:2a:7b:1b:0a:a6:87:e5:cb:7d:38:a3:8e:59:d7:8e:61:
35:e0:d1:c7:f1:3e:14:e3:32:64:33:8a:96:9b:53:da:81:1e:
8f:b1:a4:e1:72:70:b3:57:30:14:cb:35:c0:31:82:52:5a:c9:
ff:75:86:39:16:0a:e9:7a:2b:bf:fb:68:2b:46:e1:17:c2:b6:
7e:f6:82:27:7c:8a:cd:f5:c6:55:a7:25:28:5a:bb:e2:0c:7e:
d8:3a:67:57:18:31:25:e6:f7:09:f8:cb:81:75:59:8f:89:be:
6b:7f:03:84:22:cf:44:92:a9:b6:80:13:b6:8d:26:9e:b1:87:
ec:2d:7f:89:8e:eb:61:fd:fb:81:c7:a6:c0:af:a6:a4:b2:76:
ea:c4:47:b1:74:a6:52:9e:67:1d:08:67:34:fc:97:d3:a2:f7:
46:a8:e5:ce:d5:71:8f:ae:24:4e:96:55:7a:39:06:89:77:6c:
23:8d:27:3d:73:48:31:03:9d:86:5c:1b:3a:d9:45:43:92:9f:
de:30:20:84:11:d2:68:cc:5a:fc:fd:0d:69:04:ff:33:47:09:
25:51:ec:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:59:00 2025 by rpki-client