Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/920601b4-d9e6-307e-91b7-cb3e085111f2.roa
File: 920601b4-d9e6-307e-91b7-cb3e085111f2.roa (raw, json)
Hash identifier: 0/fMlVfWLGoGydsv8S1MUEOTiilUJIGZrR0+S3DRM8k=
Subject key identifier: 4A:B4:4E:2C:8D:71:98:AB:A1:A2:42:FA:A5:69:D4:52:55:FC:7B:76
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A1FDD639B2B40CCD242000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/920601b4-d9e6-307e-91b7-cb3e085111f2.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.70.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a1:fd:d6:39:b2:b4:0c:cd:24:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=02677bb3-5466-4e7e-8468-a134a7362c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:94:26:40:2d:ba:02:aa:ea:d1:3e:be:27:
4e:2e:24:83:fe:87:f3:36:f5:52:ca:0a:16:7b:e8:
cf:6d:b1:07:74:15:cf:77:31:9b:9f:6a:24:a2:17:
8d:94:72:66:c9:18:3d:da:1a:5f:46:24:af:42:b7:
30:46:62:4a:e8:12:14:55:36:df:ae:9b:84:19:1f:
6a:68:3e:5e:da:22:e6:e6:17:d3:84:a3:31:a2:1e:
dd:53:bf:41:d8:ad:33:26:14:8a:aa:4a:25:bf:d0:
31:03:4a:ff:4c:36:1a:81:36:9f:83:a8:cb:cd:5b:
8a:e4:ea:c9:10:9c:99:f0:7f:69:1e:bb:9d:68:12:
06:8a:55:cb:86:bf:5a:9e:4b:0a:7e:e1:b0:b9:85:
4d:f1:37:7b:ee:41:38:d6:15:81:dd:1b:99:48:1e:
e8:85:1c:a2:79:9e:c6:f3:f6:9e:82:c0:63:63:1d:
91:6f:8d:cc:24:0d:f5:18:4f:9a:b4:92:76:13:89:
83:5d:43:4a:72:f1:e1:af:c9:0a:70:ec:73:d1:af:
53:7e:ca:66:b9:3a:00:55:25:ef:1c:8b:4c:81:d7:
ef:8f:7d:64:e3:b8:dd:fa:e1:df:49:39:0c:2e:94:
12:0c:08:ba:1b:5f:8b:d3:d8:e5:90:d9:50:3c:dc:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B4:4E:2C:8D:71:98:AB:A1:A2:42:FA:A5:69:D4:52:55:FC:7B:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/920601b4-d9e6-307e-91b7-cb3e085111f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.70.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:5d:12:e6:48:eb:60:18:0a:4e:a8:33:53:9e:c0:b7:09:73:
52:f8:29:58:f3:8c:cc:2e:11:5d:61:5d:0e:11:f8:d3:2e:70:
bb:d8:b1:5f:cb:7c:60:ae:5e:7d:26:af:a0:0d:ce:42:a2:7c:
e7:59:d6:6d:4e:f1:fc:8f:e4:4e:64:df:78:16:4e:00:96:57:
4e:0d:8d:a2:74:45:06:7f:70:5b:9d:95:a1:af:57:d2:54:a9:
d1:1b:f8:c4:d4:79:33:6a:c6:9c:e1:37:26:b4:e6:dd:77:af:
5f:d3:e4:18:e8:37:a0:d5:fd:01:bf:85:d9:1d:7c:b5:ca:e6:
60:7b:2d:a8:00:e1:7f:2a:68:c0:eb:93:30:61:43:e9:9d:f8:
bf:6c:ce:25:f8:2c:31:f7:a4:1b:f6:67:0a:5c:0e:af:2d:7f:
ef:04:01:d9:b7:0a:66:ab:89:4e:12:80:07:a8:0c:94:d3:ba:
41:1c:c3:62:89:b4:7f:5a:16:cd:f7:95:31:e5:a8:ee:79:5b:
31:65:08:bd:d1:33:85:3d:b0:0f:d5:ab:00:6e:2e:8f:de:d9:
90:5a:c1:44:1f:7d:38:da:f1:18:0d:e8:1b:40:43:87:d0:8f:
b8:cf:62:a5:ef:20:0c:7e:32:70:08:be:29:7d:b0:46:30:0e:
2c:7c:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:20:14 2025 by rpki-client