Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbc7ac2b-79bd-3d54-830b-9cb6094fd38f.roa
File: cbc7ac2b-79bd-3d54-830b-9cb6094fd38f.roa (raw, json)
Hash identifier: BDX0eyEOXLVB1YC1jpIiJcYJQDOQU3jAU19C5DvFGAs=
Subject key identifier: 50:C8:B4:F9:9B:13:9A:09:08:0F:FC:A7:F2:58:6D:E4:1D:C3:E3:E0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B7DDD58DD99D180D343E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbc7ac2b-79bd-3d54-830b-9cb6094fd38f.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.70.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b7:dd:d5:8d:d9:9d:18:0d:34:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=52076f85-30e6-42c8-b191-4c9b0ffd29c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:46:ee:5e:fe:08:7e:80:77:d7:b9:c3:76:
a0:9b:48:57:8d:3d:aa:2f:f0:05:1f:cc:f0:65:e9:
a5:4e:38:19:17:32:ae:b8:ab:a4:c6:91:2a:9a:45:
d9:dc:69:77:07:50:03:68:50:a5:0f:bc:bb:17:3f:
99:ee:f5:b9:28:7b:b1:3e:88:ce:f9:42:a2:08:b7:
2e:9e:4e:b7:2e:c2:ee:2f:96:50:7c:6b:3a:02:62:
94:7b:cc:59:ff:5e:7d:f3:6d:2d:48:70:a4:03:ef:
3c:90:4a:ba:94:81:58:45:ea:f3:28:23:ca:87:fa:
04:6b:25:a8:24:bc:70:50:c4:e2:77:8d:d8:35:81:
7c:47:ed:4e:26:52:b4:4f:d0:c5:e9:ca:2a:32:ff:
ad:92:4b:0e:dc:58:ff:6b:3f:33:44:39:d6:ce:ac:
a0:f5:0e:ee:09:3e:ee:e5:13:1f:de:92:43:f1:dc:
ad:65:fc:5a:02:67:f1:12:be:d1:85:e8:0a:e3:97:
22:74:46:3a:fc:b8:af:a9:03:16:6a:93:b3:86:be:
8f:1f:35:01:a4:32:2f:98:0b:5f:c2:f7:3e:98:a9:
81:28:56:74:e6:b6:3d:f3:42:eb:6f:96:9f:37:18:
e8:3d:cd:1d:bc:08:90:bf:93:0d:b7:73:16:8e:af:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C8:B4:F9:9B:13:9A:09:08:0F:FC:A7:F2:58:6D:E4:1D:C3:E3:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbc7ac2b-79bd-3d54-830b-9cb6094fd38f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.70.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:84:1c:04:5d:1c:b9:31:79:02:3b:bc:51:af:36:62:0e:d7:
9f:84:67:56:ff:d5:67:1e:f8:73:ec:14:27:83:cc:bc:5f:0b:
9f:4b:0c:63:ed:d1:13:12:34:68:c5:da:5d:52:fa:74:46:eb:
d9:10:2b:36:e2:3c:d8:6d:7f:c7:20:0a:96:75:ae:58:c0:af:
7d:94:b3:36:39:72:f4:5b:1d:10:82:03:f1:c8:a9:ea:73:76:
1e:7d:64:d8:79:a6:42:c3:c4:4e:e5:eb:20:63:2c:f3:ea:98:
b7:61:26:25:d7:88:54:c9:0a:50:ad:b5:19:de:e7:48:1f:82:
49:f3:9c:76:1f:6a:3f:41:76:27:25:01:e7:7a:ea:77:ee:a8:
a5:e1:ca:20:9f:84:52:90:b4:5c:d9:1c:eb:0a:2d:14:25:c7:
1a:cd:95:f2:18:56:26:dd:70:a4:05:70:30:f3:48:74:5e:5a:
37:f6:5b:b2:75:c0:e6:41:f8:28:ad:fc:b1:4a:01:2f:41:0d:
05:f3:ff:12:2f:1f:3b:ae:b5:a9:8f:ba:1f:dc:0d:fd:78:03:
0d:3b:3e:26:f8:f3:a8:70:97:d5:a6:18:9c:d5:20:2a:71:6b:
9e:bf:59:08:7d:b7:98:6f:1e:63:ce:5f:26:f7:37:90:ff:a1:
fb:f4:08:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:36:54 2025 by rpki-client