Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db61bae4-16a2-3256-95d2-01589ca97e80.roa
File: db61bae4-16a2-3256-95d2-01589ca97e80.roa (raw, json)
Hash identifier: ZveVggSCi/td7P6F+BXeL8V07EF/7Sv8i9PytHncxqg=
Subject key identifier: 53:6F:3F:7F:72:B2:34:BB:B4:AB:04:7D:72:90:3A:19:FE:02:6F:F8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B9D42FA69B2EE8BC016940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db61bae4-16a2-3256-95d2-01589ca97e80.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.71.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b9:d4:2f:a6:9b:2e:e8:bc:01:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=4cd24a15-d0f9-4bba-b1c5-0f3a58bd61a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:7a:37:11:eb:e4:c1:56:29:55:13:1b:67:
1b:db:6a:c4:8c:b1:64:a8:ac:90:40:66:bc:ef:5d:
4b:5b:73:c1:c5:b1:c9:8f:33:ab:10:d1:78:ce:1c:
8c:5c:f2:a2:05:b9:c4:9c:e7:7d:57:35:ef:12:c0:
f9:0b:85:82:2c:f4:97:ec:78:0b:0c:2b:04:9b:45:
b8:9d:fe:88:fc:42:ae:2e:c0:ef:67:d6:f3:4e:5b:
60:2d:49:01:ae:b1:9d:40:b1:f2:34:03:a7:dd:34:
9e:7a:cb:82:5d:e9:1b:2e:71:7f:73:90:ea:fc:15:
7c:52:61:c7:92:54:4c:0d:27:24:b4:47:82:18:3b:
c7:c0:34:af:bf:a8:ef:97:fa:a3:54:0c:34:31:cf:
e8:0f:e0:3b:c3:7b:72:f3:c0:3e:79:52:f3:1e:9a:
78:63:72:d2:3c:d6:4e:25:bb:67:5d:3d:9a:9b:89:
7c:65:a5:bf:7b:f2:e1:51:ce:ea:6f:75:8e:cf:10:
16:1b:5e:7b:e6:88:bb:64:33:f8:af:a9:32:63:7d:
9e:44:e0:f0:08:3d:83:87:86:59:a2:08:2d:bf:4c:
d5:00:e2:b9:8c:f4:de:c2:2a:72:81:dc:17:bd:8c:
83:ef:db:44:ba:f5:3b:9c:a7:5f:6e:9c:c3:b8:c6:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6F:3F:7F:72:B2:34:BB:B4:AB:04:7D:72:90:3A:19:FE:02:6F:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db61bae4-16a2-3256-95d2-01589ca97e80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.71.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:75:90:0c:fd:40:f2:94:e5:dc:1b:03:2f:20:f6:45:0a:24:
f0:05:5f:63:77:69:ae:07:9d:28:63:75:04:f9:3b:74:d6:89:
e2:fb:26:15:bc:02:3e:4e:f8:da:0e:23:be:46:80:59:74:53:
85:8a:45:cb:46:68:b6:92:80:2d:2d:d2:44:ee:7c:46:ba:96:
b1:1d:21:c4:d1:6c:b8:de:90:c8:60:c4:23:f5:36:19:0a:e4:
e1:39:bb:7e:6b:fd:32:4b:a9:b0:9a:a0:e7:ae:ee:cc:b4:a9:
bb:6b:f3:b9:ba:c5:16:cb:07:29:d3:67:9f:7f:76:33:5b:df:
17:f4:e5:a7:95:91:35:0c:10:cf:93:8b:11:bc:97:77:95:cf:
d8:4b:a5:ed:21:ed:84:cc:96:a1:24:4f:16:36:34:35:20:0e:
3f:9f:fd:9d:a2:d7:3d:10:ab:cc:f4:b1:24:bc:c2:de:21:65:
19:0c:69:42:1a:56:2a:36:70:ce:96:0e:b8:e5:0b:5f:50:68:
42:82:ba:cc:6d:ca:90:e3:45:7d:af:f1:57:94:01:44:d6:c1:
f0:ad:cb:fc:2e:e0:dd:0b:92:a1:7f:22:c7:fc:39:c5:f5:91:
5d:15:ed:c4:c5:cb:d8:e7:9f:14:c9:98:b7:ef:0d:18:e0:77:
cb:4f:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:38:33 2025 by rpki-client