Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3fb95ae-c80a-3d2f-9564-98d847d6266a.roa
File: d3fb95ae-c80a-3d2f-9564-98d847d6266a.roa (raw, json)
Hash identifier: k9R/uyyxwWoRwHR16OY3AUPTcguGFzLnbF97yLqPpps=
Subject key identifier: 46:1D:E0:89:DD:DC:43:A5:C0:74:A8:6E:EB:6D:D9:16:B4:F7:BC:34
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C48B3AF492B1851B9917F4
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3fb95ae-c80a-3d2f-9564-98d847d6266a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.123.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c4:8b:3a:f4:92:b1:85:1b:99:17:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=66c8e95d-1a6a-4933-97d5-1766eb192727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:24:e8:32:57:65:e5:34:fc:16:75:d8:85:
c6:6b:a6:cf:b9:b2:36:02:26:fb:ac:fc:4e:05:3c:
f5:fc:d9:e1:cd:0f:e1:ca:18:d4:bf:0b:bb:ae:29:
3e:72:73:fa:41:4e:0f:1d:c3:1f:72:db:30:4d:7d:
ad:34:c5:27:90:cf:0c:d5:de:cb:84:24:d2:47:e9:
a5:d7:29:18:76:a7:3a:51:8c:38:4e:aa:97:0b:a0:
88:a0:c5:fd:27:52:8b:10:8d:13:2b:5b:13:47:bd:
ea:91:1e:37:13:60:7f:56:57:94:84:7a:13:bb:44:
9e:10:cb:af:63:53:7b:4a:53:ea:4b:84:7b:41:08:
4a:db:af:b4:21:1e:b8:d2:8a:ef:7d:29:bc:13:46:
7a:7c:97:98:43:82:50:1b:6b:54:b9:6b:6f:1c:91:
bf:fc:a6:25:d3:55:c7:e9:36:d3:31:a8:4e:e4:35:
d0:2b:76:1e:43:db:60:0b:42:90:a1:3f:92:dc:6b:
91:78:d5:2f:5b:d6:61:4c:bb:1a:fa:f0:67:00:80:
de:fd:c1:6b:03:da:4e:e6:09:e7:2e:21:73:c9:73:
3d:83:0c:06:96:da:f0:10:cc:34:63:b8:08:05:59:
cc:bc:f2:f4:a8:3f:d2:04:83:ad:47:cc:f3:b8:ff:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1D:E0:89:DD:DC:43:A5:C0:74:A8:6E:EB:6D:D9:16:B4:F7:BC:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3fb95ae-c80a-3d2f-9564-98d847d6266a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.123.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:84:49:8f:3b:58:a6:c6:dd:1a:58:7b:99:8a:e0:a2:e2:9b:
d1:71:ff:4a:e0:95:55:97:d0:5c:54:37:a5:d2:31:13:ce:18:
27:f2:6f:e1:4a:35:2c:20:63:31:09:38:ad:0c:75:27:da:ef:
fe:58:89:95:de:e8:04:25:d2:74:90:0b:d7:8d:32:a2:ae:e5:
9d:f8:76:21:6f:55:5e:5c:0b:e9:3c:0f:9a:ec:2c:e4:88:52:
07:53:f7:bc:2e:19:2e:e2:23:92:c8:a4:81:d7:66:4b:9a:87:
3c:55:22:8b:31:1e:ad:bb:cc:32:40:d3:37:68:23:e3:59:a2:
6d:17:11:52:c9:75:87:66:b8:f8:38:64:bb:62:dd:c0:35:37:
35:fe:3c:e5:d7:07:69:c4:92:6f:94:5a:47:78:ae:8e:c3:38:
74:d6:1b:e1:71:1c:b0:c0:2a:b2:2e:76:ad:d5:d4:bf:fe:34:
12:df:32:8c:cb:f8:b2:52:7f:84:e2:e0:27:df:31:68:04:86:
47:13:9b:6e:ba:83:88:86:55:09:d0:8e:fb:45:e6:53:66:2e:
4a:74:b2:31:c9:65:5c:72:6d:db:79:63:d3:6d:18:81:ec:1a:
4f:82:e3:1c:be:eb:a4:6a:85:b6:48:b3:1f:10:dc:e5:fb:5d:
e1:8f:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:31:56 2025 by rpki-client