Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b8b3f38-3d13-3881-b9f5-b6e6f04d4f0d.roa
File: 9b8b3f38-3d13-3881-b9f5-b6e6f04d4f0d.roa (raw, json)
Hash identifier: sPF/Uios74zneFqG9/wpSVU3zzAfdZOfFstT7DoSMnQ=
Subject key identifier: D2:42:70:94:62:EF:87:A4:86:61:F1:D3:2F:0D:82:75:8E:13:C2:08
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A52C55D0E75441932AFAA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b8b3f38-3d13-3881-b9f5-b6e6f04d4f0d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.119.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a5:2c:55:d0:e7:54:41:93:2a:fa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=76d38a35-da94-420c-9836-2d7dff7ed485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:54:52:5f:25:ee:b7:d2:2b:da:74:e2:51:95:
bf:79:6f:ec:1c:44:4c:57:68:e3:30:37:3b:dd:72:
df:83:48:dc:cc:ed:04:16:6c:ec:64:af:f8:5a:f9:
90:7c:4e:50:c2:8e:6c:e5:d7:38:a4:4b:68:0a:c0:
e0:c8:d4:34:0b:d7:09:ef:6c:86:8e:a0:0e:76:19:
db:0e:5a:55:43:a9:e1:ce:6c:0c:8d:cf:ff:fd:46:
87:c9:92:9f:54:2c:05:76:b1:a5:f3:f4:81:de:69:
d1:30:c4:e7:90:c6:55:b3:c3:16:b5:6a:cb:02:48:
7e:e4:67:e2:95:d9:a2:f6:ca:54:94:c9:d7:43:12:
eb:48:2e:d2:98:43:e7:48:dd:df:ce:32:5a:2e:33:
d7:22:24:91:fa:e7:d6:73:5d:36:d9:25:cf:90:53:
df:38:04:b1:6f:6c:60:3d:67:f3:60:fb:8d:b7:5d:
8d:71:3b:52:76:34:f1:88:ce:99:86:9f:03:fc:dd:
9d:47:d1:a6:4c:c1:eb:d1:c7:3e:f5:b3:dc:12:0c:
5e:c6:5c:65:05:a8:3d:7b:cc:5e:25:6b:61:83:df:
91:79:a1:e5:50:12:0b:42:5e:f8:d6:fc:3e:cb:1b:
e0:3c:69:3d:88:9b:d2:80:7f:91:df:d4:3f:da:f7:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:70:94:62:EF:87:A4:86:61:F1:D3:2F:0D:82:75:8E:13:C2:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b8b3f38-3d13-3881-b9f5-b6e6f04d4f0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.119.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:f0:9a:fc:31:c5:8e:c5:a5:ce:7f:27:59:83:3d:30:b9:4e:
39:3e:7e:ea:83:b1:22:ab:1e:58:59:bc:09:3d:e5:12:fa:02:
e3:e0:f2:b1:06:62:c2:10:2a:cf:01:46:5b:d9:ba:9b:05:ae:
96:86:c2:24:e2:62:f0:ec:80:30:97:9a:01:b6:b4:7b:a4:8e:
aa:c9:2d:fa:59:6d:0d:21:c1:46:10:37:f7:28:a3:39:49:0c:
12:7d:fd:11:20:e8:2c:8b:f4:c2:53:33:0d:09:f5:2f:53:aa:
e8:cb:eb:64:54:24:75:fa:98:bd:e9:32:68:9c:80:98:7e:46:
b3:4d:67:55:91:67:db:ea:1f:69:96:c8:99:e0:27:22:a2:8b:
3e:be:89:80:0e:16:62:bc:f5:aa:61:59:26:9d:0f:46:c1:74:
2e:b1:53:34:5f:96:ee:94:f9:11:b1:e4:0d:5d:3e:3c:5b:08:
f1:3f:4a:99:bd:bd:75:a1:57:0a:bc:f0:46:85:57:e6:37:01:
9d:f9:a0:da:2f:fb:41:c2:be:20:78:25:65:df:a0:25:ce:9f:
41:38:aa:56:6f:a9:a9:b2:0c:95:09:7c:21:f8:9d:bf:a4:70:
12:52:4f:98:a2:31:47:24:c5:24:4a:f9:3b:12:3a:1e:c1:c0:
01:3b:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:55:52 2025 by rpki-client