Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c431692e-24fd-3760-9d8b-7b058848544a.roa
File: c431692e-24fd-3760-9d8b-7b058848544a.roa (raw, json)
Hash identifier: Pmfxknc5sfj/VlTuJ8GQCitm9xldMlR4K/WIvIaXtX4=
Subject key identifier: 67:A8:D4:8F:39:68:5A:E7:67:D4:C7:9E:03:03:7F:5B:FF:DD:F3:D8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583A6A1F427DBFA108F4AE1A60BC
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c431692e-24fd-3760-9d8b-7b058848544a.roa
Signing time: Mon 28 Jun 2021 04:00:00 +0000
ROA not before: Mon 28 Jun 2021 04:00:00 +0000
ROA not after: Sat 30 Sep 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.154.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:6a:1f:42:7d:bf:a1:08:f4:ae:1a:60:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 28 04:00:00 2021 GMT
Not After : Sep 30 04:00:00 2023 GMT
Subject: CN=712fcf13-c966-4352-8bb4-a0ed824f65f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:03:f7:17:9d:0f:d9:a2:ac:22:8c:45:26:aa:
8a:27:53:db:01:bf:96:ae:8e:a3:6c:d5:39:19:9c:
0d:7d:2b:20:f2:f0:77:25:18:a4:30:e1:15:78:9e:
df:51:fe:ad:30:e8:9c:ec:ad:36:3e:1a:72:da:b4:
45:cd:65:4f:b0:03:46:4a:ab:69:36:d5:49:e1:7a:
6b:4f:dc:51:13:89:76:68:1b:82:46:b0:ec:26:5d:
c2:1b:cc:23:88:11:de:24:6a:c4:8c:3c:22:c8:ed:
9e:6e:94:6d:d9:b3:5e:27:14:e4:22:84:29:88:23:
d3:52:0e:07:ab:8f:1c:25:91:1d:b0:ec:53:96:04:
37:70:83:b7:f6:3a:13:bb:92:d6:ee:60:03:3b:ce:
4c:8c:5f:bd:43:42:2d:01:8d:35:fb:75:79:79:e2:
0c:6a:7f:37:64:10:e5:01:a4:8d:bb:4f:16:94:d8:
83:43:9b:66:7a:de:d7:f6:85:2b:b9:13:eb:6b:b4:
c7:d5:71:8d:94:c5:dd:b3:34:2d:04:93:9b:ba:20:
bf:2b:d0:b7:da:13:83:f3:fb:23:cf:11:ca:89:c3:
0a:bf:fe:f3:61:b9:69:62:93:9b:4f:1f:49:0d:c9:
cc:c0:03:5d:bf:8d:1f:3f:2b:e4:96:76:14:6a:1a:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:D4:8F:39:68:5A:E7:67:D4:C7:9E:03:03:7F:5B:FF:DD:F3:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c431692e-24fd-3760-9d8b-7b058848544a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.154.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:fe:30:28:f3:f1:7c:59:f8:db:51:76:4f:ee:6b:fa:c7:eb:
d6:34:43:b5:50:d7:fe:6c:d6:72:19:35:09:6e:c5:38:66:1d:
f8:c2:e7:fb:af:cd:44:8b:a1:99:0b:e5:f6:f9:9f:8e:91:76:
da:be:e2:e4:b8:2d:0e:a8:0a:15:32:4a:0f:f5:6e:20:aa:37:
24:d6:fd:06:9b:76:0d:ef:34:f9:8a:3d:64:4c:a3:89:c3:5f:
9c:0a:f8:ef:7e:82:4d:39:c2:0f:c2:73:47:3d:16:b7:63:73:
5f:bc:92:81:c3:0e:6f:2d:ac:2e:1d:be:33:d1:cd:7c:3b:25:
77:73:5a:63:3d:9e:af:bc:90:59:38:ca:f8:a4:22:46:14:47:
9c:79:2b:e2:43:70:0d:8b:ad:5b:b1:24:8a:40:bf:fc:44:f7:
72:51:6f:7e:9d:61:6b:b8:b6:2b:29:d6:de:b3:5d:72:98:5e:
50:50:11:a2:e2:7e:f3:93:cf:c1:83:54:be:d3:12:cb:2f:eb:
f8:15:32:49:1f:ec:84:31:2d:12:4d:d7:17:8f:32:94:0c:36:
bf:10:f5:d4:fe:d8:63:99:22:21:06:fd:be:d4:25:67:93:e9:
84:03:cf:28:51:a7:b8:60:5f:85:4a:c4:14:fa:6f:b8:d0:e0:
79:b0:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:29:14 2025 by rpki-client