Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddb4cc3a-0d01-3c2d-a735-a89b5cd2bcc6.roa
File: ddb4cc3a-0d01-3c2d-a735-a89b5cd2bcc6.roa (raw, json)
Hash identifier: b/qaBkCijtsS/cCWiKzRMk8dZXAwXdC7vPq5trbJZVU=
Subject key identifier: 20:60:A0:12:83:CE:7D:E8:47:5F:9D:71:2A:32:F9:09:AC:AA:17:39
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AEAB667867252172A337C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddb4cc3a-0d01-3c2d-a735-a89b5cd2bcc6.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.94.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ae:ab:66:78:67:25:21:72:a3:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=59e8506e-8bb5-4576-93c8-45a769eb467e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:d8:9e:34:c8:16:34:e6:a7:f1:bc:f6:80:
98:c2:9c:dc:4d:cc:65:ee:5c:b3:21:ab:f9:4b:02:
40:dc:eb:60:99:9c:2a:f9:0d:27:d4:91:d3:8c:3e:
a0:e1:4b:57:76:a1:6b:30:ae:56:89:80:98:05:5e:
36:84:2e:db:11:b3:2a:f7:37:d0:d4:b5:23:f3:7a:
6b:73:5b:cc:5b:d0:2d:f2:12:da:e9:37:49:2f:d9:
a9:26:4d:92:c6:d1:3a:8d:a2:71:b9:a2:ac:51:cf:
f9:d7:bc:7d:17:dd:c8:1d:e1:51:78:5a:77:31:e8:
16:a0:cc:e4:a5:f4:f6:06:31:10:50:bf:b4:41:0c:
95:9a:f0:8a:3e:40:c8:7b:f2:03:21:a9:e0:ea:28:
9e:26:c5:9d:e7:86:8a:24:c3:e8:c4:e9:ba:71:48:
f5:bc:31:2e:ae:46:78:81:7b:29:d5:50:63:b0:e1:
05:58:db:c4:e8:95:8a:7a:3b:c1:f7:94:dd:b9:7a:
4b:9d:86:29:7a:10:77:ae:ef:4f:85:90:10:25:ce:
43:88:b1:f7:38:67:a9:73:0e:2e:ab:8e:48:95:90:
58:4b:1b:f8:5d:7b:8a:97:62:ec:39:f9:90:48:f5:
18:f6:33:53:65:f8:c2:0a:b6:0c:24:19:28:f4:22:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:60:A0:12:83:CE:7D:E8:47:5F:9D:71:2A:32:F9:09:AC:AA:17:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddb4cc3a-0d01-3c2d-a735-a89b5cd2bcc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.94.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b1:df:a1:b2:6c:75:49:1a:64:47:34:e8:d5:1a:69:24:64:
25:30:5a:15:e9:21:fe:09:eb:e6:46:13:6e:7f:9d:cf:95:af:
32:47:be:e4:35:00:ab:41:86:43:52:83:88:8e:15:1c:ff:e7:
67:94:6d:32:88:45:17:ce:ae:b8:a8:65:08:cf:00:8a:01:c9:
8a:1e:d3:5f:37:10:27:7b:d8:df:ae:6a:b5:cb:d9:75:b1:72:
90:20:06:f3:1b:9d:47:0d:5b:43:fd:4b:cb:f5:03:12:61:0d:
92:db:98:e5:87:37:14:5c:57:0b:51:d8:9e:d3:97:3a:61:9e:
0c:8f:c2:ad:67:30:e5:b1:ec:7b:e2:5e:4e:e1:ff:7c:f9:f4:
09:37:ef:8a:35:0a:52:a7:c3:dd:7a:c6:e3:f3:ab:89:aa:8b:
ad:a6:b4:59:b6:be:c2:ce:23:45:97:ef:29:a2:ae:5e:c0:17:
d7:e4:f9:e4:c6:2b:cf:c5:81:57:a6:b2:cc:3f:46:ae:9a:db:
e4:28:7b:ff:38:b7:84:cc:83:d7:93:aa:fd:2d:10:4a:4b:aa:
e0:97:85:b9:ad:a7:cc:1c:d6:e4:89:2c:2c:92:31:0d:a6:7e:
08:18:0a:f5:2a:2b:9c:59:33:6d:a4:ad:04:54:73:42:0c:45:
12:1c:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:23:53 2025 by rpki-client