Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b88c870c-e492-384e-82bf-4a3a0320237b.roa
File: b88c870c-e492-384e-82bf-4a3a0320237b.roa (raw, json)
Hash identifier: ni0kQh+yUpFvfbcgmVntFKWdlGeXMm4K61o1G7mNLAc=
Subject key identifier: 7D:8A:67:4B:E4:61:5B:A5:EF:E0:51:85:DB:3A:29:44:C5:6E:85:EE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AD694E369E86D69CE0B780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b88c870c-e492-384e-82bf-4a3a0320237b.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.140.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ad:69:4e:36:9e:86:d6:9c:e0:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=8f248f0d-45ac-43bb-abbb-64fbee4ab712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c8:60:b0:74:0f:8b:82:44:6b:23:e9:24:59:
12:3f:9f:fc:fa:45:ab:60:5d:d2:e3:50:d5:7f:9f:
8a:98:b7:7f:bf:0f:bc:ce:32:fd:33:c7:43:dc:1d:
75:4b:32:c0:74:2f:aa:3b:10:b9:a8:77:aa:d9:c0:
5a:47:1e:bb:d6:5e:e2:54:31:cb:b3:d8:06:ee:18:
45:6a:75:2b:2b:fe:4c:fb:44:f3:a4:2b:9d:c4:5c:
73:e0:a7:37:a0:0f:1b:99:6b:47:15:0d:30:bb:39:
a5:cb:a4:c2:ad:45:5d:f4:6d:f3:c0:01:6d:f2:3c:
e5:7a:47:1a:52:66:f7:67:75:31:6d:aa:fa:f5:1a:
7e:fb:c1:5a:75:66:52:94:d8:db:62:dc:e9:30:ad:
3c:ef:51:77:24:bc:3b:f5:6e:09:56:5a:4d:27:60:
7c:de:b9:d1:dc:8b:42:19:5f:7b:54:4c:99:be:98:
50:99:60:1e:fe:77:d2:da:07:32:54:f7:d7:b4:3e:
5a:c2:19:35:56:4e:04:5d:0c:4e:46:a4:50:1b:19:
07:f7:89:d0:68:80:b9:45:25:d7:65:72:9e:40:e9:
9b:e5:43:d0:c3:c9:18:a0:b3:73:28:08:51:51:02:
cc:97:93:e8:26:4b:69:a0:24:96:36:ed:60:e8:1a:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8A:67:4B:E4:61:5B:A5:EF:E0:51:85:DB:3A:29:44:C5:6E:85:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b88c870c-e492-384e-82bf-4a3a0320237b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.140.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:c0:87:6d:3e:f5:2b:1b:9a:22:cc:8d:33:0d:5d:e1:c7:19:
c2:80:88:a2:85:57:98:5a:c5:30:4c:de:a7:7a:f5:81:8f:f9:
78:25:19:5a:78:0e:c8:6f:09:77:a2:c3:21:49:df:39:20:e2:
7a:ed:6b:b4:4b:53:63:85:eb:e5:e9:08:dc:8c:5d:43:b5:d0:
ba:e1:c6:dc:1c:11:02:df:d9:3f:4f:cf:12:31:c1:7b:d0:3d:
d7:2e:e5:91:3e:f5:40:d5:df:07:ad:4c:1e:f8:6f:04:e3:dd:
d0:d3:c0:f3:13:06:a4:5a:15:99:06:48:2b:d3:3a:41:29:6e:
39:b0:65:c2:e0:e8:8a:93:4b:9c:0e:f8:02:fb:ff:07:4a:08:
73:63:a1:63:c3:37:c1:1a:6a:c7:cc:83:40:9a:c0:1b:f6:64:
2c:c0:9b:51:f3:93:83:61:14:6d:52:de:fe:10:ce:1d:32:77:
42:0d:2a:cc:ac:68:74:86:d3:64:dc:74:14:71:50:ae:9a:37:
d0:30:95:b4:3e:28:25:aa:e2:f6:39:30:e6:85:d5:54:d3:d8:
45:f5:2a:61:61:b7:2e:cd:dd:50:d7:cf:03:24:4a:77:27:d8:
d8:c8:12:cd:9a:35:4b:35:b4:77:da:b1:34:e4:c0:36:2c:a7:
fd:9a:33:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:50:17 2025 by rpki-client