Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad017c26-f3a1-3d7c-8657-d4c805f4ee2c.roa
File: ad017c26-f3a1-3d7c-8657-d4c805f4ee2c.roa (raw, json)
Hash identifier: vPQXYJ7Whrs4Qp28lskVb7DUCTj+yGJXHezo3SA5im8=
Subject key identifier: 9E:6B:E9:0E:49:E3:E8:E6:DB:50:7F:EC:18:EA:BA:AD:4E:BC:37:8D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C359CFC38460AB19B37280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad017c26-f3a1-3d7c-8657-d4c805f4ee2c.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.74.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c3:59:cf:c3:84:60:ab:19:b3:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=26940911-3967-4101-91d3-cb315aeaf8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:3a:72:a2:86:64:5e:52:bf:43:7a:1c:55:
db:29:12:ed:68:80:fa:a5:29:cc:7c:e7:73:a0:e1:
58:71:8b:06:af:a5:d0:8d:fc:4c:0b:6d:ff:50:e4:
55:f0:f7:3e:b5:91:8f:c2:cf:1e:db:24:b4:e7:cc:
b0:8a:61:aa:ef:0e:65:30:bb:7b:69:f8:79:c5:5e:
8e:a2:f3:dc:15:06:dd:77:9b:c3:c3:49:54:d8:f6:
d1:75:2a:77:80:89:e7:b0:ff:df:14:b7:39:d6:71:
0f:23:2f:ca:cb:9f:08:c1:06:4b:c8:38:19:1a:c3:
c1:9b:2c:d1:6d:d8:f9:f6:6e:d7:37:52:a0:6c:32:
78:f4:e7:36:80:ad:90:78:37:33:e9:ab:11:fe:77:
b9:c4:67:88:0d:fe:2b:88:16:e6:57:24:fb:79:35:
4e:01:2d:b4:07:5f:c1:d1:48:e4:14:cd:ce:6d:c0:
2f:84:1a:ed:79:d3:75:30:9a:50:bd:95:5d:2a:5f:
f3:92:13:c5:d8:8b:7a:8b:47:56:5a:31:16:e7:79:
d0:99:01:24:33:7a:1a:7d:08:2b:e8:25:56:ed:e7:
33:5c:74:b8:06:61:66:3c:bb:3f:d0:72:b5:ba:5b:
7a:14:1c:7d:c5:1f:a2:50:ab:39:80:5e:6c:51:5c:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6B:E9:0E:49:E3:E8:E6:DB:50:7F:EC:18:EA:BA:AD:4E:BC:37:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad017c26-f3a1-3d7c-8657-d4c805f4ee2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.74.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:45:00:03:ec:87:65:4d:ff:c0:cf:50:39:84:75:89:5c:f2:
60:44:73:7c:bc:78:e3:8a:56:5b:7e:10:17:75:98:99:8f:d9:
56:4f:e1:94:c2:6a:b6:e4:23:d9:92:93:54:2f:d6:82:29:7f:
36:2d:ea:a5:b3:1d:9e:94:ae:e0:51:0a:30:0a:69:ce:a9:79:
38:38:b2:3d:60:17:6a:08:fe:51:d1:4a:5f:88:cc:de:16:98:
79:c5:d7:da:a7:3e:51:e4:5d:d4:c7:c6:f2:7b:18:ca:7b:7a:
20:ee:d1:89:c5:ad:77:3b:18:02:ba:c5:94:c5:1e:51:74:2a:
fd:aa:2d:d6:5a:8d:d5:94:ae:a8:f7:c3:2c:8e:ac:ba:05:0c:
55:de:ae:16:58:d9:bc:34:73:d6:c7:de:5f:c2:7a:8c:eb:bb:
86:f1:c5:be:aa:bd:13:e9:c4:80:7a:f2:48:9e:e8:ea:63:9c:
2b:77:32:6c:fe:c9:f3:ca:4b:b2:ee:de:a2:4c:19:d0:e6:e1:
d0:d7:03:71:30:ef:ed:8c:3b:57:fc:c8:a3:58:a5:b2:80:d5:
be:08:0d:df:f5:9f:58:62:82:b1:1d:6c:5f:f0:25:e0:6b:ca:
f1:25:93:8e:b3:dc:37:db:86:ce:4e:d2:92:cb:42:96:86:06:
fc:7c:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:35:33 2025 by rpki-client