Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2bad146-3418-31d4-9940-e3e8859b4029.roa
File: f2bad146-3418-31d4-9940-e3e8859b4029.roa (raw, json)
Hash identifier: 9tw+9t5czOWWddPdXTzcZOO+KNV8SlY20Yu0z2smp7g=
Subject key identifier: 09:8A:E3:D7:57:73:7B:FD:D9:EC:A9:D0:37:0C:61:95:24:FA:47:D6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C328BD1296C996B027F660
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2bad146-3418-31d4-9940-e3e8859b4029.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.100.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c3:28:bd:12:96:c9:96:b0:27:f6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=2fdfe9a4-be3b-4533-865c-08535cd00084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:f8:36:fb:8d:ea:c3:ee:0a:86:b3:aa:8b:
58:8f:ec:4a:40:b3:3b:ec:eb:25:05:0e:6c:14:dd:
7a:b1:11:3c:95:61:1e:94:15:c3:03:62:84:50:ca:
1a:4e:24:7a:00:ed:30:71:ca:f8:81:59:20:c9:5d:
41:bf:e4:be:40:11:ef:11:a9:31:a9:50:ea:a7:d5:
d9:11:a7:4e:fe:4b:7e:1a:12:6b:7a:03:c9:5d:aa:
ac:f9:1a:bd:3e:14:76:58:72:4a:7f:6d:af:90:48:
01:7f:2d:70:ce:62:34:bf:12:37:07:d6:cd:09:14:
b6:fc:bc:93:69:23:8a:23:81:01:6c:42:74:44:3f:
d7:ba:fd:15:cc:01:26:fb:20:23:cc:90:04:f6:6e:
7f:0d:88:83:e4:9d:be:c6:9d:67:cd:5d:21:09:07:
25:34:f8:1b:75:4e:4d:ae:7e:8f:e6:1a:d1:9c:3c:
25:81:9b:d1:df:29:29:25:36:59:d7:43:c4:71:b2:
1f:a8:e3:a9:b1:e6:4a:c7:5e:af:b2:29:84:2a:41:
ea:18:cd:d9:21:83:28:22:52:1a:d7:0f:5c:6a:4c:
bc:7e:af:c7:b9:f2:dd:ec:20:ab:ff:32:a3:2b:fd:
b5:60:06:f3:d9:ec:aa:ab:71:97:3c:38:b7:3e:13:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8A:E3:D7:57:73:7B:FD:D9:EC:A9:D0:37:0C:61:95:24:FA:47:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2bad146-3418-31d4-9940-e3e8859b4029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.100.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:5f:33:ad:c6:e9:56:dc:3c:fe:70:a3:42:d1:4c:e5:df:f9:
05:86:90:24:fb:45:0f:55:75:b2:41:02:ba:73:32:56:27:75:
e9:86:0f:e2:4a:4b:ba:e9:cd:6f:c7:33:86:2a:ca:c9:90:86:
be:82:f2:6a:16:0e:96:18:fc:9e:2b:38:c6:3e:ad:92:20:e1:
dc:e1:06:0a:ab:7e:5a:51:13:e4:9a:f7:36:ea:f3:71:9f:d8:
80:30:7e:ff:72:dc:21:67:1e:35:69:2c:07:59:b9:cf:a5:dc:
59:d8:5a:58:54:9d:b1:9a:07:07:64:54:80:b4:89:08:5d:7e:
3c:f8:66:b6:f5:67:49:e5:7e:00:55:81:e6:03:d6:fc:ee:5e:
c4:59:91:b1:d5:f0:aa:6f:51:a5:19:7e:fa:35:d3:f6:9d:db:
94:2c:ef:d8:3e:95:53:56:68:e6:3f:26:d6:77:e4:dd:5f:f9:
3e:08:26:53:e8:1c:56:d0:23:cc:b8:6d:7a:71:b9:62:8b:71:
54:5d:62:25:3c:f5:6e:07:09:75:5a:b9:ee:cd:ec:28:9d:cb:
86:42:7b:be:2c:b2:8c:7b:59:11:dd:ac:0d:81:ba:64:22:81:
2b:da:97:c0:e8:d0:24:03:e4:d7:3f:75:de:8d:25:aa:6f:01:
7b:a7:19:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:39:01 2025 by rpki-client