Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9a4ce9f-5b8a-34ee-87a2-c9151d35b032.roa
File: a9a4ce9f-5b8a-34ee-87a2-c9151d35b032.roa (raw, json)
Hash identifier: yUINTGa0wxBjX3c9S6KAlRPemnN4bTx6i+oP1kw0w0Y=
Subject key identifier: CE:90:53:F6:4B:EB:F3:A8:A2:74:F1:25:F5:EA:C7:AE:A9:CA:39:78
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BB325EEECBED4F988CA900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9a4ce9f-5b8a-34ee-87a2-c9151d35b032.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.100.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bb:32:5e:ee:cb:ed:4f:98:8c:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=7998a411-ede2-470d-9928-ce26c02d0054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:17:7b:cd:2f:e9:ef:af:97:5e:82:7c:84:
48:27:29:0b:99:94:e1:d4:cf:f0:8b:c4:96:f6:d1:
9b:b3:0e:8d:18:c9:9c:2a:aa:58:7a:b7:13:7c:10:
e6:e4:c2:49:33:25:39:83:a5:f1:ed:ca:41:22:62:
e1:5c:9f:38:e4:57:51:39:d6:1d:bc:65:4c:2d:ab:
66:ef:7a:16:cf:a7:79:2f:ab:11:c6:cb:fe:4f:51:
2d:a3:4c:88:69:93:be:b1:ed:e1:e6:a1:a2:27:7a:
da:df:b3:98:0d:19:b5:73:68:1a:d0:e2:ad:bf:c5:
7e:bc:53:01:13:20:9b:eb:48:37:4d:a0:30:15:c6:
9d:28:5a:ae:dc:08:dc:19:7f:99:44:14:c0:6b:be:
7c:90:d4:22:3f:5c:cb:47:17:91:46:77:19:d7:a8:
2a:85:43:d9:2d:0d:a9:c0:7c:53:e0:f6:c4:8a:dd:
0f:4e:e0:84:00:cf:04:77:5f:90:3b:26:55:cd:6a:
32:4f:6f:2a:a1:d8:c8:a3:69:78:51:6a:42:27:05:
02:d6:3c:28:38:3c:d3:4f:4d:74:ff:0c:53:1f:42:
34:5b:32:35:c6:3b:ae:fd:25:11:38:b8:ea:a6:0c:
59:55:36:ea:bb:b2:03:aa:c2:5f:7c:cf:57:81:0f:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:90:53:F6:4B:EB:F3:A8:A2:74:F1:25:F5:EA:C7:AE:A9:CA:39:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9a4ce9f-5b8a-34ee-87a2-c9151d35b032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.100.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:83:18:ae:47:94:a1:65:cb:b3:bf:b4:10:cd:92:99:98:d6:
be:69:68:1f:76:ae:89:ea:bd:6a:0d:6f:86:5f:9f:bb:fe:82:
69:a5:07:f7:00:41:b6:1f:7d:bc:19:fe:b0:df:4e:9a:1d:3e:
d3:55:c1:28:a8:a8:84:a3:d9:3a:6e:15:46:de:24:bb:33:a2:
b3:6e:69:ba:ba:1b:c3:cc:6f:d2:f6:35:8c:80:48:fd:41:dd:
5c:85:9b:4b:82:1d:ad:45:74:98:77:58:a9:50:29:85:99:4a:
e2:55:ca:ef:83:f9:e6:19:0b:46:4b:6d:ce:6a:38:50:bf:1b:
88:d0:c6:d4:07:5d:bd:aa:2c:50:c6:74:80:78:5d:45:f9:79:
8b:50:db:87:da:69:3e:e2:1a:72:d7:68:34:cf:5a:7f:6f:23:
6d:aa:4b:34:60:1a:47:e8:a6:a0:48:65:7f:b1:dc:25:32:50:
6e:a8:6b:af:e7:82:b7:03:c4:09:bc:27:de:ae:ff:91:6d:11:
25:27:44:07:c0:8a:fa:5a:45:4b:35:7d:94:f1:8b:90:51:fa:
98:97:84:bb:9e:86:48:91:b0:20:ff:70:d9:bc:68:ae:99:24:
49:fb:b6:ae:90:34:b3:9f:a3:bb:b5:2b:f4:7c:b3:1a:2c:f4:
83:66:81:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:27:35 2025 by rpki-client