Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acb3056d-7aac-3beb-a493-4985e10aa2ac.roa
File: acb3056d-7aac-3beb-a493-4985e10aa2ac.roa (raw, json)
Hash identifier: Lt2gq/xf7yCumIa3ZQGEFmpd6SAQHvUj0T3ev4KoXdI=
Subject key identifier: A9:85:5A:DD:A4:84:40:AC:AF:ED:80:17:03:EE:CA:67:E4:21:DF:ED
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AD101D68F9C560B25C3998
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acb3056d-7aac-3beb-a493-4985e10aa2ac.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.107.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ad:10:1d:68:f9:c5:60:b2:5c:39:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=0c6a716e-f447-4c16-9a43-3f47e7359508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:74:d5:21:74:81:cc:1a:dd:63:49:5c:8f:
ff:87:a0:dc:cd:6d:c3:5a:e4:0b:e3:60:39:7b:ae:
fb:ec:d6:5c:77:e5:53:ab:ed:a4:bc:00:28:00:0e:
b2:38:3e:c9:ed:e0:09:66:b0:22:39:01:e7:8a:36:
12:e0:2b:8e:f3:02:af:80:d9:a6:f4:75:89:6c:23:
7c:8c:3c:5d:92:db:6b:ae:ae:34:e1:2d:ad:c3:29:
20:4b:aa:01:59:7b:ea:04:9b:d6:a4:bd:91:81:80:
61:a5:bc:af:c3:14:c6:80:7b:ae:7c:07:90:02:95:
8a:c3:0c:de:fb:6a:b0:65:9c:8d:71:b8:b7:68:b4:
77:ca:c0:fb:93:d1:46:9b:78:e8:91:51:ba:81:d6:
51:a0:2c:4e:43:c9:15:8b:a2:1e:49:3a:b6:68:78:
db:7a:1c:e8:84:7b:42:3d:56:e2:72:5a:a6:82:fe:
5c:79:1b:2c:ce:26:89:bc:a8:de:79:8d:b4:ad:11:
57:ec:b4:0f:03:98:23:fb:c6:35:c2:c3:a2:2e:28:
88:57:bc:68:ea:07:a9:2a:95:08:61:d0:dc:ad:d8:
cd:91:5c:6e:77:f4:c9:16:f6:7a:dc:2c:30:7a:c9:
92:be:8f:42:55:70:5b:a2:85:53:30:09:de:a3:09:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:85:5A:DD:A4:84:40:AC:AF:ED:80:17:03:EE:CA:67:E4:21:DF:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acb3056d-7aac-3beb-a493-4985e10aa2ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.107.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:0d:06:64:68:20:80:07:64:41:0b:bc:43:86:e9:1c:18:52:
2a:98:b3:92:d0:ac:65:6a:57:33:70:ed:86:12:30:6e:f2:f1:
ec:5d:df:84:f4:b0:59:c3:28:98:77:9a:a0:0f:80:f4:1c:69:
6e:bb:f6:a1:a8:75:25:97:b2:88:fa:74:68:9f:9e:d0:5a:32:
61:47:ec:82:da:93:db:96:c2:5f:83:9a:f1:1d:11:2c:0c:fd:
eb:b0:b2:92:80:cc:ca:02:cf:a2:1b:c6:a9:bb:37:65:ac:cf:
53:15:e0:d5:3a:75:43:3b:3c:f1:9c:f9:bc:a2:c1:d8:a7:87:
1b:17:09:c6:0a:cc:11:84:f0:58:77:c4:d2:34:3f:7d:6f:49:
b5:fe:af:0d:b8:60:84:39:35:cf:3a:3f:99:c9:7e:58:b2:0b:
b5:88:76:c9:35:09:c6:b1:d0:97:da:7e:62:72:b0:b7:a4:81:
fc:97:d8:b8:27:c2:f9:9c:77:d8:b2:81:73:6c:31:12:b8:e0:
5f:30:59:ab:20:a7:81:42:a3:4d:ea:35:04:71:b6:a0:c8:9e:
77:6d:3f:dc:f0:8b:9d:7e:52:c5:38:f4:b1:bd:39:f2:69:0f:
57:a3:08:4a:52:6a:e4:96:31:32:08:01:2d:01:f9:73:6d:e0:
9c:46:05:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:19:11 2025 by rpki-client