Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e899c6f6-a636-3c6a-942b-653688859428.roa
File: e899c6f6-a636-3c6a-942b-653688859428.roa (raw, json)
Hash identifier: MKIK97l0DDoZkjN4QoucQ7NiR+76ws2J0ISlmadGdgE=
Subject key identifier: 4A:93:7B:4C:74:F5:38:9A:05:E2:3D:6A:C0:4B:33:74:AC:7A:89:2F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AA930000C3A3DB0899C0C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e899c6f6-a636-3c6a-942b-653688859428.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:aa:93:00:00:c3:a3:db:08:99:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=de740353-4ba6-40df-8b54-6bb8125e2ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:2a:28:89:9f:b2:f3:a4:f7:1d:7f:9f:74:
ee:fb:bd:8e:ee:48:26:57:29:79:57:49:1b:94:4e:
be:35:34:fc:06:10:0a:f5:92:84:43:08:07:5e:2a:
7b:f0:60:cc:23:9f:93:3d:90:f2:48:a7:b5:cc:3c:
a6:49:03:d6:df:0f:b3:f2:7e:20:8f:de:be:36:f7:
b3:27:2b:76:9a:f1:04:c0:65:ef:9a:c6:47:19:8d:
73:91:00:90:5d:83:e9:1e:c8:e8:35:8b:9c:41:a7:
a7:75:47:6d:d3:75:d9:c7:a5:aa:60:7e:fe:7e:73:
90:cc:b8:fd:a5:9f:45:eb:5c:43:59:a8:0b:69:04:
0c:17:9e:48:1b:85:63:d1:5f:41:54:a1:62:b4:69:
7e:d1:26:f9:c4:91:68:d9:96:db:74:ee:52:14:06:
46:ae:49:e8:87:ee:71:ce:c6:46:d3:c3:18:a5:43:
5d:8a:1d:28:c7:8b:e3:73:cb:1c:98:16:42:31:15:
69:b6:30:78:58:77:c6:76:f2:dd:74:24:53:4f:b7:
1b:4f:d7:e5:e3:37:84:23:bf:7f:34:98:2d:fc:20:
80:8c:ae:0a:09:5e:37:03:bc:00:40:21:2a:0d:b0:
38:7d:68:7e:98:fe:37:3d:07:f6:0d:42:23:8c:fa:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:93:7B:4C:74:F5:38:9A:05:E2:3D:6A:C0:4B:33:74:AC:7A:89:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e899c6f6-a636-3c6a-942b-653688859428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:6f:b6:48:98:1c:9d:80:39:ff:fd:4f:4b:f8:e8:9f:a0:c8:
45:33:57:b5:36:ad:d1:54:98:80:83:cd:68:39:8c:f4:9d:11:
2f:a3:06:68:d6:31:f4:e6:fe:89:a4:b0:f6:79:0f:26:ab:8b:
f4:d4:67:22:46:c2:bc:b5:6b:bb:d7:1c:ca:23:0b:cb:7c:79:
80:4c:51:f1:15:fe:43:82:53:fe:af:de:db:24:8d:fa:99:33:
44:92:42:cf:75:81:c8:ae:35:a3:4f:f7:73:71:26:33:14:57:
9d:f8:6c:78:79:64:c4:71:1f:fa:20:08:9a:20:a6:da:f2:50:
c4:90:aa:e4:fe:00:e5:25:f2:3c:d7:7b:a6:52:00:8e:e2:30:
3c:a7:c7:12:84:be:2f:cf:40:e5:99:ff:01:d2:4f:ac:a1:bd:
f4:d0:4f:f7:bd:e2:da:84:98:39:d7:e5:82:10:91:4a:06:07:
a8:c4:48:48:a3:21:24:c6:7e:8e:be:29:4c:ff:22:fc:ac:4b:
9f:e8:23:e5:2f:36:cd:77:3f:2d:72:ca:f1:5c:89:0b:08:56:
18:47:d9:5d:52:43:43:cf:bd:a7:b7:dd:e3:32:7b:26:4b:f5:
cb:38:99:c8:39:75:57:15:75:f6:f4:03:4e:b5:48:17:c7:10:
7e:c3:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:25:14 2025 by rpki-client