Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cebd9c6f-8374-3519-9e03-1563379cd228.roa
File: cebd9c6f-8374-3519-9e03-1563379cd228.roa (raw, json)
Hash identifier: JFSEvcjgdCYaFnxvQDFxgUpzSOSSUdvo8Elluub74TU=
Subject key identifier: 00:90:87:7F:74:62:AA:67:BD:3D:15:EF:48:EB:15:88:E6:F6:4F:02
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B3B53E34D0464F8B29E840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cebd9c6f-8374-3519-9e03-1563379cd228.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.72.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b3:b5:3e:34:d0:46:4f:8b:29:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=83f61e2a-6034-40af-a70d-21741f2cf1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:09:99:d2:50:fd:a9:d0:06:fa:3d:a1:c6:07:
2c:34:81:7c:bd:50:1f:74:36:94:a6:05:bd:34:76:
be:23:6d:35:04:42:ee:e1:3f:c4:0b:38:53:70:57:
9b:4c:e8:28:1b:a0:dc:14:22:26:dd:60:80:aa:c5:
21:ff:a4:7b:3a:b2:fe:b5:83:a6:19:92:20:57:1b:
29:1f:48:c1:a0:2f:d2:b0:fc:c4:11:ec:3a:3e:47:
2d:b2:0d:cd:6a:06:74:8e:7b:73:26:e5:fa:62:48:
8a:9c:40:cd:6a:a4:6b:14:32:66:29:56:cb:65:8a:
56:4a:9d:2e:2a:89:83:09:80:06:51:f7:6c:bf:54:
70:f0:17:4b:f9:38:29:10:84:0c:ec:51:70:03:24:
92:b4:4e:a0:52:e4:3b:ad:48:00:75:fa:36:d3:9a:
ab:fa:4a:44:d0:fd:a1:40:8e:4f:95:f4:16:b6:2a:
99:42:fa:00:e9:15:d1:c2:e6:3c:b6:0a:3f:ae:f6:
7e:50:b6:de:58:05:2c:42:35:91:a2:6d:11:56:68:
d3:53:88:30:e1:f6:18:76:a4:7f:bc:81:b2:6a:cd:
ad:21:de:8b:cf:44:50:69:f5:f3:1d:7d:f7:7f:da:
56:37:80:13:01:ab:64:25:9f:73:26:95:b2:34:26:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:90:87:7F:74:62:AA:67:BD:3D:15:EF:48:EB:15:88:E6:F6:4F:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cebd9c6f-8374-3519-9e03-1563379cd228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.72.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:dd:c5:b9:2f:9c:e8:e3:c2:a6:f3:45:60:3b:fd:e2:32:2c:
cd:c9:4b:2d:24:a1:a8:8e:49:4a:22:a5:f8:23:1c:a5:32:3d:
53:34:0c:60:31:cf:9b:dc:72:b5:66:12:9f:4f:e2:6b:d0:f0:
ce:c6:98:b8:89:29:08:5c:5b:75:0a:72:ea:26:4d:9e:a4:e8:
b7:7d:e9:79:16:b0:06:e3:59:6f:91:49:3d:71:e3:24:7d:76:
77:7d:c9:62:cb:e3:25:3a:c2:35:d7:96:cf:1e:43:4a:d2:09:
93:49:bc:92:ca:78:a8:9b:76:83:d3:a5:53:97:98:bf:90:ae:
b8:6b:e7:71:43:17:5b:61:ed:2f:ff:25:63:b9:43:4f:76:74:
0d:db:02:68:01:35:10:83:5e:0a:1f:79:81:e4:de:3b:11:89:
ce:bf:db:6d:9a:6b:75:cc:f1:80:d0:8b:4a:2d:06:9d:c9:dd:
df:c3:45:35:08:d0:e5:7d:0b:fa:cc:35:e9:d6:1c:0b:e3:4e:
99:99:43:9a:c8:c3:4e:a9:81:11:1b:87:7f:b2:06:a3:fd:66:
3b:c3:4a:48:73:88:7f:9b:23:83:ab:b9:75:e7:5c:f7:98:cb:
9c:be:e0:d2:6c:51:a0:f1:28:7a:df:b5:cb:e7:44:0f:cb:0c:
a1:83:37:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:23:29 2025 by rpki-client