Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da99cb20-c101-3adf-8f6c-1361f59aff3e.roa
File: da99cb20-c101-3adf-8f6c-1361f59aff3e.roa (raw, json)
Hash identifier: N7vuoyWO4Nrg+EBoWK39TVXjlt7eeM0Q03ww1Y+edlo=
Subject key identifier: 08:CC:25:6D:D8:B3:15:8F:6D:AB:88:8E:DE:7C:1B:54:3A:34:E6:24
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583A6A254F06358CB3CA65CA2500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da99cb20-c101-3adf-8f6c-1361f59aff3e.roa
Signing time: Mon 28 Jun 2021 04:00:00 +0000
ROA not before: Mon 28 Jun 2021 04:00:00 +0000
ROA not after: Sat 30 Sep 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.154.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:6a:25:4f:06:35:8c:b3:ca:65:ca:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 28 04:00:00 2021 GMT
Not After : Sep 30 04:00:00 2023 GMT
Subject: CN=b583efbf-6853-45e7-a8af-24290f7834e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:9b:f4:72:a9:9b:5e:d8:27:be:57:d2:c8:
b6:79:a4:46:82:c8:11:51:2f:d8:de:60:01:e9:8b:
31:e4:df:d6:ed:eb:41:95:7e:ca:3e:47:f2:81:87:
51:83:4c:c6:b6:5b:13:8e:bb:69:a2:28:67:7c:35:
02:73:b2:d4:7d:f4:74:6c:83:a8:8c:00:e1:a6:0d:
93:8b:9c:e1:e8:20:67:4a:a1:4e:59:d0:65:b5:4c:
f6:a3:91:5d:87:37:36:0a:03:b1:50:08:67:3a:63:
aa:8d:02:92:f7:5a:15:78:0b:b0:e1:9b:19:29:d3:
bf:ed:90:8a:82:b5:2a:76:c6:38:07:ad:6f:4b:90:
e1:2f:7c:06:e8:92:06:23:a9:46:96:e6:0a:e7:09:
db:9a:5a:c1:50:fe:70:6b:7c:52:26:3c:c8:15:6d:
cb:b0:97:2b:e7:27:2e:d0:d7:7a:7e:31:12:31:90:
a0:b3:56:2f:72:02:18:6c:9e:21:60:72:55:fa:47:
9a:71:69:6f:a8:1b:b6:2d:58:b8:ef:36:e4:1f:68:
10:ce:e9:1d:0a:93:b5:25:21:50:ca:6f:e0:4e:55:
8c:5b:76:d7:be:4e:99:a7:0e:c0:f6:14:93:bd:47:
75:e2:e9:5c:17:a1:34:9b:49:a7:20:4c:2d:0b:53:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CC:25:6D:D8:B3:15:8F:6D:AB:88:8E:DE:7C:1B:54:3A:34:E6:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/da99cb20-c101-3adf-8f6c-1361f59aff3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.154.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:82:80:0c:a8:9f:b0:41:be:7b:99:3a:b5:d0:99:28:41:63:
62:4e:81:70:2f:4a:a2:5b:ab:15:a0:c5:36:34:2c:83:2c:58:
4a:9b:fd:98:da:ec:60:1f:65:0d:08:2e:af:65:ec:00:85:a2:
f3:dd:26:5b:87:d1:09:4b:04:a3:c6:f0:7a:89:ea:b7:a1:e6:
20:70:8f:f0:83:8e:6d:09:fb:0e:dc:bf:86:d9:cf:49:e5:b9:
0b:e2:45:71:27:15:63:91:ee:87:b9:7b:2a:ae:1d:23:d5:dd:
ad:b9:33:a0:6d:73:04:b3:d0:6d:b3:e2:40:82:ff:2c:a3:f7:
7f:9f:df:2c:48:15:2c:fe:ee:bf:32:af:7c:bf:88:c6:8f:9b:
98:fd:a1:12:85:8a:b4:f8:60:83:e8:36:26:b1:a9:cd:3c:dd:
2c:8c:77:d0:1b:1d:0d:49:a6:f0:46:88:ef:b4:7d:12:c2:46:
df:71:9a:fe:e2:c5:1b:ed:78:fc:a9:1e:2b:bf:53:50:05:eb:
7f:c2:68:7e:86:c6:f5:f7:cd:f5:da:0a:af:f3:16:22:70:77:
a3:5c:d9:51:e4:92:c8:7f:70:5d:75:a3:f7:65:a7:16:93:c4:
71:31:0c:92:70:7d:b9:fd:eb:93:ae:ab:77:0b:b0:5a:c9:ba:
bd:96:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:06:44 2025 by rpki-client