Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8665d7ea-dba5-3309-99dc-4c3404a99ef2.roa
File: 8665d7ea-dba5-3309-99dc-4c3404a99ef2.roa (raw, json)
Hash identifier: 8LkXS2xn4SE3IkE91oRgqx/NWqJWp8+dwBtZnbT29/s=
Subject key identifier: AB:BF:1C:FD:D9:86:2B:C9:71:E2:18:15:DE:E5:05:5C:58:BB:63:54
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BAACC64DB001E20CA21BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8665d7ea-dba5-3309-99dc-4c3404a99ef2.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.89.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:ac:c6:4d:b0:01:e2:0c:a2:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=50bbd385-15ac-4616-92dc-b055a6fe40fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:2a:82:55:40:80:06:01:12:71:b9:77:f8:
c8:41:7a:98:d3:3b:62:69:dc:5a:41:71:18:4e:76:
0c:0c:98:b0:65:a4:aa:55:0d:9a:83:ea:88:d8:29:
93:f7:17:b0:9c:38:18:9d:cf:65:5f:c6:e4:42:36:
0d:97:21:b6:e8:9f:79:21:59:fc:40:24:a8:2a:95:
22:ca:1b:96:d4:f2:49:52:fc:a1:38:e2:d5:c5:03:
6d:62:7a:11:33:44:f7:bb:ce:29:ef:0a:c3:7a:3d:
2e:8e:ab:57:81:47:6e:af:ee:b7:f7:81:1e:40:8a:
3e:dd:e9:1a:43:67:5c:b8:ce:0b:05:56:9a:6f:95:
ad:c7:6b:67:2c:79:89:8f:a1:7b:28:41:7e:b9:d9:
d0:76:8a:f5:c8:8d:da:25:ba:c1:70:76:0f:21:6d:
d3:3a:8a:7b:a5:50:e4:c7:0f:3b:60:71:b3:be:df:
e9:c4:b6:59:6d:e9:e1:68:b3:53:1e:a5:3a:57:84:
ce:6c:27:2a:b5:90:d9:a7:92:a6:78:57:47:ba:54:
eb:56:27:ef:6f:b2:ec:d0:15:b4:d1:b5:ac:24:99:
81:33:e2:16:ec:78:7d:96:ee:7c:08:cb:dc:a3:16:
27:64:63:37:2b:69:9b:8b:26:9d:04:85:0f:4d:c5:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BF:1C:FD:D9:86:2B:C9:71:E2:18:15:DE:E5:05:5C:58:BB:63:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8665d7ea-dba5-3309-99dc-4c3404a99ef2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.89.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:93:e8:f7:bf:34:f4:17:f3:1d:d7:fa:9e:d8:15:28:f0:86:
55:48:c8:d3:bf:3f:30:48:b2:7a:45:a2:e5:a5:be:31:12:e3:
02:29:e1:63:f4:4f:f5:25:f0:fc:71:8b:d9:88:46:7f:81:33:
d1:ed:36:ad:8f:dc:05:27:44:48:52:b9:b7:56:fe:a9:c9:8f:
50:47:83:33:04:33:5c:a5:7e:75:9f:55:c0:75:3c:48:f8:fa:
e4:f2:51:82:28:87:59:d1:92:42:cf:6a:2b:fc:6c:e4:da:3c:
c6:35:8a:ca:ee:bb:60:b9:e1:ac:ea:90:15:4d:72:23:83:df:
da:e7:b8:b5:a1:e5:f1:fa:f6:e2:92:f0:33:69:ef:61:f1:29:
38:43:2b:d1:f0:18:31:b5:80:71:5b:4e:94:84:d5:ac:e5:75:
68:23:91:a8:47:c5:f7:78:5e:34:26:19:8e:2d:a7:ec:01:08:
89:2c:c2:9e:79:14:d8:42:59:7b:7b:9f:49:52:ff:fc:24:19:
7c:53:2f:ae:f8:6a:1b:b8:83:ff:a3:4d:ca:b0:52:9b:6d:df:
3e:20:e6:59:ab:d2:fb:20:94:80:ef:e4:59:23:30:21:47:09:
9e:bd:08:dc:b4:6c:ad:fb:59:e5:e5:c6:d7:2a:72:bf:22:e8:
1b:a7:24:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:48:31 2025 by rpki-client