Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/93c6a1a3-139b-3684-81e4-fb1988d12ed1.roa
File: 93c6a1a3-139b-3684-81e4-fb1988d12ed1.roa (raw, json)
Hash identifier: Blsj+3ywB6MEAD15Yike7TCuleqJhXgR3C/A+zyS0ng=
Subject key identifier: 82:E2:E3:5A:21:F7:EB:10:E7:01:2E:C2:35:BF:B6:BE:47:94:21:0B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583BA87422958900FA97F82DF000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/93c6a1a3-139b-3684-81e4-fb1988d12ed1.roa
Signing time: Wed 20 Oct 2021 04:00:00 +0000
ROA not before: Wed 20 Oct 2021 04:00:00 +0000
ROA not after: Mon 22 Jan 2024 05:00:00 +0000
asID: 396982
IP address blocks: 34.173.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:a8:74:22:95:89:00:fa:97:f8:2d:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 20 04:00:00 2021 GMT
Not After : Jan 22 05:00:00 2024 GMT
Subject: CN=86a926d1-d614-4e38-87c2-d4df07a6d11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:c4:9f:70:91:44:e1:7a:1f:31:97:2e:f7:
ee:d0:73:12:a5:d8:fe:2b:89:49:12:0a:be:33:c8:
72:54:eb:1a:e1:a9:b6:cf:55:ae:f3:af:c0:84:1c:
ce:26:b5:bd:c7:94:f6:06:e3:7a:0f:f3:43:14:97:
69:bb:e1:1c:d8:01:4c:07:2d:03:62:90:fa:ee:9f:
1f:2d:19:52:65:9f:ff:64:3c:b4:09:95:68:53:61:
5c:34:68:c8:21:fe:69:af:a5:e4:c1:68:20:02:33:
ae:29:6c:19:a6:41:a4:2f:65:98:dc:14:90:25:00:
a9:1b:70:31:bb:36:43:10:69:68:4a:1d:d8:92:b8:
ac:e6:10:12:35:58:7c:15:3e:0e:3a:66:0d:7d:bf:
e4:f8:6e:fa:63:e5:ac:18:ef:f3:6b:e4:88:51:95:
9c:dc:18:e9:6a:58:7c:3b:fc:d2:bc:9e:51:cc:9d:
9b:13:0a:a8:3e:96:49:6b:4c:e7:8a:b9:00:b7:a7:
27:39:d2:0e:d6:b9:8f:8f:6e:df:8e:22:19:d9:0c:
28:a6:26:15:76:5a:35:b3:34:a9:58:69:79:da:ba:
7a:60:06:e8:2e:dc:4c:a0:dc:ee:29:72:aa:2e:f3:
c1:cd:8f:17:33:d1:31:77:97:bf:0d:4d:b8:e7:a6:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E2:E3:5A:21:F7:EB:10:E7:01:2E:C2:35:BF:B6:BE:47:94:21:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/93c6a1a3-139b-3684-81e4-fb1988d12ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.173.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:6b:2b:0f:1d:f9:ed:6d:60:ed:0e:29:48:0a:2d:33:3a:a5:
10:42:ad:ca:ea:13:57:10:d8:b3:4b:20:f4:ef:a0:44:9e:66:
4d:b2:2e:03:da:f5:09:31:d1:ac:af:6d:61:72:11:dd:c0:1e:
2f:6c:46:a0:29:e8:42:20:3e:15:d5:4a:1e:9b:94:f4:81:a5:
ac:5c:78:6e:77:6b:7a:d6:af:52:e7:52:4a:5b:95:1f:8c:20:
a4:53:bf:78:0e:99:da:c0:5f:2e:6b:f2:04:21:26:f0:4f:90:
9b:66:73:6d:01:7d:25:a5:46:19:67:bc:43:3e:bb:9d:86:64:
d2:b5:f9:aa:b2:27:66:a7:e4:18:32:7f:3f:0b:73:82:55:85:
81:8f:3d:55:35:01:95:57:13:67:13:84:1e:aa:cc:54:28:09:
1a:4c:39:29:b9:8f:c7:84:af:1b:d6:33:91:4f:1c:9d:b1:5b:
bd:d4:2b:da:d3:7d:63:18:ba:2d:35:3e:cd:18:f2:32:2c:40:
3f:ec:1c:70:7a:51:83:18:d7:a7:1d:56:22:f7:a9:77:ce:a8:
29:02:b4:9e:e3:8f:dd:0e:8d:ef:dc:bb:cb:b4:40:92:63:95:
a8:ca:8a:c7:a9:b6:85:60:7a:4f:67:57:a6:32:4e:70:38:1e:
ef:4a:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:07:15 2025 by rpki-client