Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e922fbfa-22ee-3d11-b9ed-c696e281fd84.roa
File: e922fbfa-22ee-3d11-b9ed-c696e281fd84.roa (raw, json)
Hash identifier: 8XDfGs579fzLkWZgo/qG6vtEaLenjn+ViRnZGDg2XQw=
Subject key identifier: 9E:FF:01:2B:5E:8E:3A:F6:8B:65:98:45:1D:F1:C7:AB:9B:B5:DC:3B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B5D91BAE7AD05F3A4CD380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e922fbfa-22ee-3d11-b9ed-c696e281fd84.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 34.120.0.0/13 maxlen: 13
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b5:d9:1b:ae:7a:d0:5f:3a:4c:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f0813bdc-5d98-49cf-84b1-fef6dd9289c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b5:2d:e4:2b:de:83:7d:7f:09:d3:4a:0d:72:
31:b7:4d:47:4a:0b:4a:a1:b1:fb:79:59:07:e6:6e:
e2:ac:1d:68:fc:c6:e4:32:96:b0:59:02:76:01:24:
f4:db:7a:97:6f:da:21:a7:4b:c8:33:96:53:9c:12:
8d:f1:72:66:f8:d8:2e:db:22:71:bb:e2:af:93:07:
db:75:8f:ee:f1:72:26:fe:69:0e:0f:7d:5d:9b:5e:
6c:5e:9f:0c:dc:64:3b:8a:c5:b7:dc:1c:63:0f:7d:
0b:c0:38:9d:d1:0f:f6:be:3c:c4:f8:1b:70:5f:6e:
79:db:f7:f5:33:20:45:89:78:b4:1e:ca:35:2e:86:
5e:a5:c2:71:aa:84:09:7a:31:6a:b1:5f:7c:19:a6:
06:c0:17:52:7e:85:5b:89:ef:84:b8:fa:41:db:1b:
2f:f4:e8:3e:24:63:d3:67:88:25:9d:1a:ff:4c:3d:
04:3b:fb:88:6c:70:a2:a4:fe:81:a5:42:8e:e3:01:
71:7c:52:ef:be:d0:ed:91:1b:b4:b2:94:f2:24:f0:
ad:e6:4a:80:f8:97:34:e9:3a:4b:c6:24:f7:d9:c1:
50:ef:50:b6:3d:56:1e:28:28:3d:89:94:59:c0:eb:
5f:65:c7:62:30:8d:ba:ef:c9:a4:52:72:13:75:68:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FF:01:2B:5E:8E:3A:F6:8B:65:98:45:1D:F1:C7:AB:9B:B5:DC:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e922fbfa-22ee-3d11-b9ed-c696e281fd84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.120.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:9d:e2:46:1a:cd:ef:31:eb:e6:f6:c2:76:4a:c5:bd:eb:39:
3f:65:08:23:c7:b9:36:8a:ef:c9:2d:c5:db:c2:ec:36:83:8b:
e4:2c:7b:c4:1c:3a:56:53:96:78:dd:5a:11:37:4c:09:6a:eb:
25:3c:71:13:66:97:31:ac:88:72:29:d3:dc:53:ca:6b:66:14:
35:fe:b7:11:03:ed:19:3c:63:82:17:e9:05:59:f4:15:b0:dd:
bf:ba:ae:ba:1a:f8:8e:d6:37:e1:8a:fb:a6:bc:5d:89:11:e6:
e0:32:52:78:99:97:c3:61:3a:14:2a:69:8a:9a:93:f1:be:13:
ad:25:9f:2b:c3:6d:d3:69:71:53:d2:c6:1c:a6:58:d6:97:11:
f0:78:32:3f:bc:ff:ae:d7:ca:40:de:64:d3:5c:08:6d:54:85:
c2:0f:69:aa:5a:5b:c1:5c:1b:15:5b:25:d0:b2:e6:c5:79:4d:
84:81:ea:f8:5b:ba:cb:8a:9f:26:3f:ce:a2:f7:5d:9e:29:e2:
05:7b:59:78:94:b1:34:c5:1b:2c:2c:d2:d6:a5:f8:59:2f:e5:
99:b2:e0:2f:8a:94:a2:fc:de:15:6d:e2:ae:3b:0b:05:3b:4b:
e0:6e:bc:5e:50:c6:2b:3c:f7:51:c9:df:00:6b:e8:d7:a2:9f:
d2:7c:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:32:04 2025 by rpki-client