Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fcd4ad5-888c-3990-8ce7-0138f837218e.roa
File: 8fcd4ad5-888c-3990-8ce7-0138f837218e.roa (raw, json)
Hash identifier: GnkJWm2ToCzFhGQ90EJIU2DA56r51RoeIfe14/6UDZ4=
Subject key identifier: A1:6E:3F:A5:2D:82:98:8D:4A:74:4F:C7:C8:1B:80:E0:CF:71:D2:5F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A0E5AC9FD180423FF58980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fcd4ad5-888c-3990-8ce7-0138f837218e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a0:e5:ac:9f:d1:80:42:3f:f5:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=b167fa17-fb8f-4be7-a489-23f78b03cccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ea:d4:21:00:7e:80:c4:3c:bd:7c:c9:78:f4:
6f:21:10:a6:cc:8c:60:82:4f:79:6d:13:c1:6b:fc:
b8:71:cc:fc:d5:f9:2c:d2:cc:b6:36:d5:15:21:8c:
fc:78:9b:62:04:d1:1d:76:64:fb:bf:58:86:f0:c4:
1e:7e:ee:91:c4:23:cc:0f:94:4b:da:ae:ae:a9:c5:
3e:13:66:79:f1:f7:be:6b:e7:72:bb:82:0b:7d:1d:
14:5f:34:64:8a:0a:ed:73:45:e4:8c:cc:20:f6:13:
76:6c:47:ef:11:88:d7:83:c3:f8:0e:f1:ea:32:06:
7e:6c:ff:93:80:83:02:da:6c:af:b7:02:04:0f:2e:
54:fb:31:bd:97:a3:ae:87:a2:19:ef:a4:d2:8a:53:
14:a4:f0:c4:91:fd:39:75:82:b3:94:c0:7b:63:0b:
e1:27:cc:1c:1e:52:1b:0a:37:79:b8:39:b9:04:c5:
ef:d6:13:fa:3f:01:cb:a0:64:e2:60:69:07:26:0a:
1c:81:18:3f:62:7a:d3:30:8f:50:c4:4f:b2:8a:19:
2c:09:a4:2a:af:93:68:0b:4a:53:e2:81:af:91:31:
77:91:12:08:08:1b:ad:b2:11:b8:3c:fc:ca:4b:d1:
ae:86:b6:fe:14:07:bc:01:66:fc:1a:8b:ac:1d:88:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6E:3F:A5:2D:82:98:8D:4A:74:4F:C7:C8:1B:80:E0:CF:71:D2:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fcd4ad5-888c-3990-8ce7-0138f837218e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:0f:aa:75:7e:7c:f4:ea:61:98:fd:67:e4:88:b8:a9:11:ed:
0d:f5:df:b3:6e:8e:2e:04:41:5e:b3:ec:93:e6:27:52:8d:4e:
97:5c:8d:a0:3a:f3:fb:d0:08:c2:d5:d5:c5:eb:2e:f1:0e:f9:
f6:dc:53:56:aa:06:f7:6a:47:4c:67:67:c5:fe:2b:d7:bd:5b:
85:99:0d:20:63:c4:00:15:b6:71:95:e4:e7:9e:76:7c:6c:a0:
39:9a:9f:b9:a5:f7:48:ee:71:30:da:9b:64:32:fb:28:cf:fb:
9d:e3:8d:d8:03:66:0e:ba:f9:7a:bf:f3:13:11:40:25:a9:bc:
e2:13:94:18:22:aa:2f:97:0d:f0:df:da:3e:5d:3c:22:1a:0d:
c9:ea:b7:c4:ae:cd:30:3b:50:9b:39:f0:48:d7:3c:5f:6b:bc:
34:a3:06:3a:09:55:f4:99:29:98:51:ea:fc:a5:96:a3:a0:cd:
b9:81:bf:38:9e:dc:18:c8:a7:53:f9:e0:ba:98:2c:fb:c1:73:
b4:b6:57:f4:c7:b0:9c:0e:40:67:cb:cf:30:02:22:1b:1b:dc:
1b:12:aa:55:73:70:f6:1a:23:92:fb:5f:e9:23:ee:8a:c0:de:
a5:30:7e:6a:a6:2d:54:76:19:9b:67:b2:63:5c:57:2d:bf:9b:
b5:bc:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:02:44 2025 by rpki-client