Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5883af8-28b4-3bf8-a736-ac0ff7df5b58.roa
File: b5883af8-28b4-3bf8-a736-ac0ff7df5b58.roa (raw, json)
Hash identifier: 4qLf6jaTvEm61r8lFMjecz98mCJqvkEy7A34z0JRA5E=
Subject key identifier: 7D:CA:11:0E:3E:E6:07:E5:2F:6E:F1:1A:EC:74:1F:7C:8A:F8:CB:6E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B90EE52ECC2313FEDD5A40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5883af8-28b4-3bf8-a736-ac0ff7df5b58.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 19527
IP address blocks: 34.189.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b9:0e:e5:2e:cc:23:13:fe:dd:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=ed1f7f5d-43b4-4399-9a0b-805af755cd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ba:f4:30:b8:ce:cd:0e:ef:2d:7f:e0:9f:3c:
b4:b1:d0:9a:4b:25:9f:29:60:11:5d:63:e5:03:7b:
23:75:75:ef:44:61:5a:a2:16:0c:15:25:37:bc:a1:
ab:f2:8c:ca:16:cf:4e:63:85:2a:97:06:69:ed:a8:
e3:d6:d2:5d:43:ec:83:a8:81:b7:df:65:e2:69:3c:
88:24:29:72:8c:90:47:d0:23:d3:c5:ab:92:f1:e7:
26:8d:9c:67:2b:c9:5a:45:37:f8:56:ad:77:bb:48:
5d:42:a0:cd:d5:57:43:50:8e:68:06:0d:4f:c1:e1:
45:b1:03:68:21:45:21:7b:a0:a7:bc:74:53:28:bf:
79:ff:81:fc:da:8b:b4:8c:31:8d:fe:6d:90:7b:d9:
e2:4f:a1:0b:6d:88:30:79:a8:20:3c:02:8e:d0:f5:
61:dc:1d:7a:f9:dd:d1:42:ad:94:72:68:87:88:07:
19:e7:98:9c:07:9d:5a:1e:ee:79:27:f0:0f:46:c7:
82:fd:ba:4c:de:4c:23:7d:f4:68:33:8e:ad:87:08:
2e:6f:0a:7f:be:ed:96:19:2e:95:ba:bc:3d:9d:0d:
9f:20:4f:7c:be:74:b1:3e:e7:2c:b6:9f:b6:66:40:
75:ea:a1:08:87:c4:0b:fa:06:e9:ce:0d:b3:07:02:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CA:11:0E:3E:E6:07:E5:2F:6E:F1:1A:EC:74:1F:7C:8A:F8:CB:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5883af8-28b4-3bf8-a736-ac0ff7df5b58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.189.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:5d:a3:12:ac:8c:e4:ac:2c:73:9d:4a:49:42:a1:06:43:d0:
92:96:f3:4c:ab:6c:fb:0c:6c:32:65:74:59:20:95:76:53:23:
ae:48:27:d7:03:7a:d6:af:cb:e1:21:7f:05:d1:8e:a8:ba:74:
69:dd:ef:09:2e:18:40:b1:3d:ba:51:ec:82:e9:0d:db:98:b5:
7c:b6:26:36:4d:2d:d8:43:ce:12:1a:11:dc:d7:c6:09:72:83:
46:df:2a:67:49:17:47:4b:cd:83:0e:50:87:33:6c:69:b4:a5:
27:bf:30:cd:46:47:bd:00:9c:ef:21:f1:c8:1f:b5:ee:99:66:
c6:ab:b4:6f:d2:d5:1d:0b:4e:6d:1c:48:9b:68:17:08:e3:b7:
4d:bb:ae:f5:c6:8b:98:ab:3b:11:7b:0c:51:32:ad:31:ba:20:
1a:8c:c6:55:cd:93:7a:17:f2:ba:7c:df:94:61:6b:e2:e4:2c:
19:3c:3c:71:2e:73:54:86:ea:90:12:67:95:62:3f:de:1b:c1:
ef:ac:4f:80:a1:23:43:99:8b:cb:5e:ba:e6:8d:c5:df:4d:1c:
3f:1b:aa:de:13:eb:2b:14:0d:f0:43:23:75:7a:48:7b:6c:2f:
04:2d:cd:74:e3:96:df:c5:76:e7:75:4c:eb:d2:d1:51:5c:05:
a4:1e:ab:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:18:55 2025 by rpki-client