Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd96030e-cdd5-3216-891f-835f723c94e9.roa
File: dd96030e-cdd5-3216-891f-835f723c94e9.roa (raw, json)
Hash identifier: y6FCqw1jfDN56ddSHQy2fT4XDVhd/DRaC7emU30NVK8=
Subject key identifier: 85:0C:0A:9A:70:FC:78:B2:D1:D9:F6:4A:7B:BE:06:CB:63:BD:C9:18
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A04CD4DD5214EF7BC76C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd96030e-cdd5-3216-891f-835f723c94e9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.78.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a0:4c:d4:dd:52:14:ef:7b:c7:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=9cf8294a-7dc6-46bf-83e4-9b2eecf35417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:4e:2d:28:bb:38:fd:bb:b4:cc:17:19:ee:
df:67:d6:65:94:50:94:8f:03:b3:b6:4a:36:66:bc:
cb:78:e8:29:12:10:f5:88:41:ea:86:02:93:7c:5e:
48:74:85:23:64:7a:51:30:26:2d:6c:87:d8:9c:df:
a5:c4:70:21:e9:b8:97:9b:b6:95:cf:c7:ee:56:92:
2f:fc:f2:92:d6:f6:ae:15:73:95:87:6e:87:d6:44:
4b:cd:dc:e7:52:4c:6b:97:9b:62:ea:f3:ca:5c:9f:
ab:17:0f:a6:be:3a:d8:d8:e4:71:e6:7d:2d:4d:28:
f4:5f:a4:7b:8b:f4:2f:4f:fa:8a:1a:98:48:17:18:
8e:a6:76:7c:ac:70:0f:51:84:d4:b0:a4:e0:42:2e:
af:66:ed:86:f1:0c:e9:cb:3e:c3:53:76:61:d0:ed:
94:84:c1:04:28:91:4b:c1:5b:5e:d6:37:93:cb:b0:
75:92:84:8e:de:4b:74:2d:a9:80:e7:a0:bb:d4:3e:
9c:03:1e:1a:d0:c3:24:32:6c:33:05:c6:52:7b:4f:
4c:bf:bc:c2:fb:8e:b8:0f:ae:95:d9:fe:27:d6:61:
98:0d:f5:09:b7:bb:32:73:f8:ae:56:18:e5:2e:d0:
83:b8:28:bf:10:44:39:c5:fa:c5:df:d0:77:0d:19:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0C:0A:9A:70:FC:78:B2:D1:D9:F6:4A:7B:BE:06:CB:63:BD:C9:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd96030e-cdd5-3216-891f-835f723c94e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.78.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:ab:98:d6:af:85:90:36:33:51:5f:d1:79:ba:e9:23:92:3f:
11:95:5d:32:81:5b:9c:cc:57:b2:2e:4a:f8:d4:e6:62:9f:9d:
12:3c:3d:62:72:32:c6:86:8c:be:81:bf:89:f7:4f:34:eb:11:
1b:03:44:6e:1b:d1:02:06:57:fe:40:47:16:b3:c3:81:1a:92:
a9:25:b2:ec:6c:19:39:05:8b:35:9e:d1:eb:41:d1:05:67:74:
4d:19:0b:98:de:04:b3:9c:1e:e4:60:43:79:13:f0:2f:9d:2a:
6f:ff:e9:d4:89:06:49:e7:c2:ce:87:08:dd:23:11:bc:c5:b1:
ff:df:e8:c7:1a:1f:96:91:67:84:2d:20:1c:90:ec:a9:41:29:
4b:a9:32:0a:4c:26:93:9d:34:30:d6:58:60:05:b9:d8:41:dc:
07:cd:ab:75:cb:0c:47:33:81:d5:01:bd:50:b9:d7:0f:2a:ea:
db:dc:e4:da:16:2c:33:c7:31:0a:a0:80:e2:e1:ff:b0:96:7c:
e2:66:1d:29:78:68:1c:5e:a0:32:ba:ed:08:4a:28:47:e4:37:
d1:63:8c:af:46:a7:6b:51:90:5d:96:13:a2:5f:c7:40:2f:95:
16:02:7d:d9:80:60:6b:b7:68:66:9f:f7:eb:f0:45:b2:5c:70:
fc:0d:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:29:07 2025 by rpki-client