Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d81538fc-1390-3e9d-9fd7-4d79d71eab17.roa
File: d81538fc-1390-3e9d-9fd7-4d79d71eab17.roa (raw, json)
Hash identifier: mKroKsWnkftEGPMqHAIwz1kjaSYUsE4UUIIY7bIG5Ys=
Subject key identifier: 32:C0:DD:E0:94:75:14:CA:04:4A:A3:3A:90:2E:7A:B0:E7:EA:70:EB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B3BD50B4C8095705632380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d81538fc-1390-3e9d-9fd7-4d79d71eab17.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.79.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b3:bd:50:b4:c8:09:57:05:63:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=df0b9a67-9c2f-4a82-880c-591509dbbc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:16:cc:44:cc:19:fb:a6:f5:82:ad:7b:87:
26:35:3e:39:83:18:dc:c8:40:0b:12:44:9d:2e:2e:
94:d7:f6:89:bf:2f:33:12:0b:1f:21:9b:cc:1f:d1:
07:15:e6:06:aa:47:56:bd:03:2f:80:a0:bc:5e:1e:
08:c6:ab:b5:54:e5:b3:3f:45:6e:4e:24:19:63:15:
fe:b2:c7:a6:e3:7e:27:18:6c:f4:55:30:dd:b1:b5:
f8:a7:5b:9c:c5:9f:c7:bf:c1:60:e7:36:4e:90:a1:
f4:91:c6:72:20:d9:eb:37:a0:0e:66:bb:56:2b:69:
50:a9:06:89:3d:d4:a4:27:85:ef:20:e8:3d:dc:a3:
b8:de:89:1b:82:8a:14:ae:fa:79:c5:9e:b2:c6:ba:
f0:0c:0f:a4:59:af:59:10:b4:b9:67:0d:c7:ce:26:
47:9f:5b:84:db:d8:45:34:5e:bc:c9:a4:a0:32:c3:
85:91:c7:c8:22:e5:eb:34:d6:e5:ec:58:36:b5:73:
87:a3:06:d1:b0:bb:5d:15:ee:14:b8:5c:2c:0e:c6:
16:7c:b2:d4:e3:6b:b1:3e:c8:41:d2:a9:a1:4a:d2:
45:2b:4d:c7:4b:b0:ea:76:14:1c:57:e8:dd:ee:1f:
27:43:87:7a:66:66:36:e6:18:85:f0:6f:5e:e7:4b:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:DD:E0:94:75:14:CA:04:4A:A3:3A:90:2E:7A:B0:E7:EA:70:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d81538fc-1390-3e9d-9fd7-4d79d71eab17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.79.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:ac:e3:98:1b:75:87:90:16:02:aa:36:a4:fb:aa:14:bc:4b:
71:36:35:22:ce:80:16:18:f6:9e:a0:6f:7b:92:6f:e7:39:da:
bc:af:40:b9:21:b3:7f:cc:62:a1:17:1f:df:20:f2:ed:8b:78:
0b:b6:b1:8f:5f:89:ea:2e:c2:79:6b:2c:19:43:8b:c7:d2:13:
f2:e4:15:c0:76:55:0e:ae:93:fc:4a:ec:99:23:dc:79:12:11:
31:ca:fe:4a:82:91:00:f0:68:1f:2d:78:85:57:12:82:de:86:
62:61:eb:4a:7d:cd:f4:4a:3f:bb:02:0a:af:30:d8:cf:3a:7a:
cf:81:0f:da:d1:d7:6f:89:a4:58:68:48:e4:da:7f:a2:b5:ff:
ff:b2:70:fb:16:e9:38:16:a1:96:84:0f:f4:a9:f2:7c:c6:4e:
f0:a3:0b:b9:b4:fb:9b:f9:df:a8:38:14:a6:4c:62:b7:d8:d8:
48:71:ab:bb:89:8a:b1:bc:18:dd:47:a8:d9:17:54:37:7e:50:
a9:cb:4d:cb:cc:76:5a:c9:61:f1:37:99:16:34:a2:4c:21:34:
93:8e:96:b2:3f:15:3a:79:a6:27:84:15:5d:ee:02:80:03:df:
53:a4:07:5a:c7:1e:ab:d6:0c:b2:06:eb:b9:ce:26:f1:41:8b:
f0:dd:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:44:41 2025 by rpki-client