Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7e2986c-b25d-3749-b006-44f1af6c8786.roa
File: e7e2986c-b25d-3749-b006-44f1af6c8786.roa (raw, json)
Hash identifier: qJ7XaxVwqEeOoyOr46Jp/VHY2IMcwvBExJRG2mU8ozI=
Subject key identifier: 8C:B2:88:3D:55:52:A0:45:D4:14:8E:3E:7C:4F:A1:72:81:CE:1B:5B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A85B06BA7FC87472D9EB90
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7e2986c-b25d-3749-b006-44f1af6c8786.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.121.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a8:5b:06:ba:7f:c8:74:72:d9:eb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=51b14c56-aae7-4a9f-b460-6f3b1afdc2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:d2:8d:43:61:b6:4a:95:93:25:bc:a8:71:
33:4d:95:fd:9b:5a:97:12:29:38:70:ab:d9:d3:e1:
79:86:87:ff:f6:4a:9c:cc:9a:b8:fc:5e:5e:f5:77:
21:88:af:0a:a3:48:ec:58:1b:cd:2a:04:76:b8:26:
43:bc:dd:8d:7a:ce:a6:52:ed:7b:db:7b:d7:8b:25:
84:2d:3b:83:24:e0:57:b8:70:f9:79:d4:dd:90:d3:
03:29:ce:d3:f4:8c:86:06:bc:c4:a3:7a:b0:62:c1:
b2:ea:b2:43:66:54:f9:34:83:2e:31:47:59:53:f8:
95:6c:c9:e4:a0:53:2f:e4:66:62:d9:c7:8f:33:4b:
b7:ab:fd:71:93:e9:b3:32:a6:55:a0:41:ac:eb:c1:
25:2a:a8:2b:f2:b8:18:ff:0e:5b:70:78:66:aa:3b:
be:06:82:d3:44:1a:7e:c6:9c:b0:df:6a:4c:8d:a9:
ed:35:e2:35:52:5b:dc:81:bc:90:ec:9d:73:71:67:
b3:33:5c:d9:df:ac:eb:2f:93:fd:69:6e:d0:58:56:
30:d3:27:b6:e4:1b:a2:2b:be:7a:5a:fe:b2:f6:99:
f0:8a:85:21:c5:65:a6:66:09:bf:b9:16:79:dc:e5:
4f:bd:63:1e:b8:4e:b7:95:5f:8e:5a:0e:61:71:60:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B2:88:3D:55:52:A0:45:D4:14:8E:3E:7C:4F:A1:72:81:CE:1B:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7e2986c-b25d-3749-b006-44f1af6c8786.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.121.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:bb:9b:a0:28:c8:dd:d9:ff:04:ef:58:6f:f9:39:6b:ec:de:
ac:7e:52:0f:f3:f1:4e:c9:40:d0:f7:09:08:f8:65:98:73:02:
06:93:9f:21:aa:5f:0b:b8:9e:52:b1:b2:88:1c:f5:eb:ed:05:
a7:96:8b:72:a5:cc:cc:24:0b:8c:6f:1d:42:ee:89:7d:68:75:
b4:a6:22:6e:93:ee:d9:c5:28:60:ad:f2:d1:fb:43:25:6a:56:
ed:4e:38:06:80:60:b4:6e:72:32:f4:00:36:da:fa:9f:ea:ec:
46:47:e5:cd:6b:5c:db:a1:56:35:26:cd:d3:eb:f8:81:ef:40:
24:7d:aa:3f:04:90:87:68:80:38:b5:0f:48:21:17:8c:28:9e:
2c:87:5a:67:20:a8:88:eb:56:af:e5:4b:9c:e4:b8:50:32:4f:
88:2a:1e:26:6c:b1:a0:02:1d:29:de:af:eb:95:b0:d7:8a:bf:
da:96:7e:cb:b3:25:59:91:33:bf:5c:67:85:a8:4f:2d:52:88:
d0:66:c9:26:b6:da:96:99:b4:fc:20:1d:c4:6b:a7:f8:e6:11:
9b:94:f3:a6:fe:65:2a:d6:e1:a2:c9:79:95:d5:f5:8f:55:c2:
2f:d1:11:16:b4:d5:70:7b:03:22:a8:f1:95:b0:18:16:9a:4f:
71:6d:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:20:23 2025 by rpki-client