Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6de3cbf-8548-3fd2-92f7-2e8e7d0c5baf.roa
File: d6de3cbf-8548-3fd2-92f7-2e8e7d0c5baf.roa (raw, json)
Hash identifier: LP/9oJIa1X7XjeEGpB7fRbrPK2K8QIQiCTc4rRU/ntI=
Subject key identifier: 83:56:BD:01:37:28:27:61:8E:5E:66:82:EA:72:85:2D:57:16:71:0C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C19C7703C1E998B4CB9880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6de3cbf-8548-3fd2-92f7-2e8e7d0c5baf.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.78.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:9c:77:03:c1:e9:98:b4:cb:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=59ef86d0-feb2-48ab-9205-8d88d4aa3c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:98:13:9f:77:5d:3c:dc:ae:bc:e2:79:35:
d8:1e:f9:bb:f1:c7:ae:8d:b5:f6:4d:2e:16:a7:ee:
dc:14:61:0a:6e:f8:19:64:5b:0f:0f:4f:6b:55:91:
ea:0e:24:92:d5:a5:b0:10:07:6d:70:fd:0c:bd:91:
ae:b6:d3:1c:9c:f2:13:95:b1:5d:b8:30:be:15:c4:
e3:00:9b:de:6c:0a:81:f5:d6:6b:37:30:67:f6:27:
5d:13:75:55:cd:22:07:52:79:5f:c7:1c:79:86:c0:
b9:29:7a:70:a0:a7:0f:44:07:d2:ef:4b:d9:07:99:
fc:aa:80:4f:9e:fa:f8:7f:21:6f:5f:51:95:05:10:
fa:7c:7c:53:32:f8:8f:7f:0e:54:44:57:f5:b9:ae:
23:12:3c:46:53:28:75:27:f5:9e:93:27:c0:2c:3b:
0d:4c:f7:97:73:19:3e:34:0f:f9:2c:7d:48:6c:fd:
75:d0:f8:d7:bc:35:1b:fb:0e:b6:8b:20:6e:9a:b5:
51:07:46:89:c6:ba:fe:ff:e0:62:4a:af:d5:8f:62:
f1:4e:fe:c1:29:00:22:1a:e7:4d:47:66:32:da:99:
c3:51:cf:3a:90:11:ae:c3:71:3d:2f:63:20:37:7c:
fe:29:c5:3b:26:6d:36:1d:61:47:04:16:1c:4c:b8:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:56:BD:01:37:28:27:61:8E:5E:66:82:EA:72:85:2D:57:16:71:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6de3cbf-8548-3fd2-92f7-2e8e7d0c5baf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.78.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:21:de:20:67:12:48:36:33:79:77:17:2a:a2:1d:88:07:df:
5e:2c:b8:1f:98:f5:35:3b:79:61:d0:01:de:fb:b1:9e:72:92:
64:ce:e2:10:0d:02:34:9e:41:96:f3:86:76:2e:49:32:36:e0:
51:b7:57:dc:83:3f:e7:bd:76:d6:34:50:3f:3f:59:ba:d8:50:
7a:da:73:a5:03:ee:96:4a:cf:f1:44:f3:cd:d7:41:95:73:50:
ef:42:df:f7:d0:50:34:fc:17:a4:58:e2:b7:93:f3:29:cd:b6:
ec:5c:03:99:b6:59:07:d3:70:71:9d:21:a2:8a:e2:47:91:a8:
dc:b1:8f:bc:e7:ca:32:ea:fa:d6:71:a0:b1:13:a1:3b:a3:14:
71:01:f1:9b:21:c8:72:ab:54:a0:df:f3:7a:78:d2:70:0c:90:
12:14:b1:f0:e4:81:f1:bc:52:2c:47:af:55:17:f5:f3:89:ae:
9f:24:2a:f5:e9:1d:77:f4:d4:13:e0:32:63:43:cf:de:d1:ee:
3a:c3:47:40:45:95:1f:d9:82:21:c8:9b:67:04:58:2b:38:92:
66:d1:13:81:de:bd:b0:e5:d8:a9:7d:9f:fb:d0:c4:22:9f:81:
4a:ba:05:5c:66:da:9d:48:1f:72:06:1d:6f:a2:f3:5a:d4:53:
2f:47:11:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:13:13 2025 by rpki-client