Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5e254d3-bae3-3ef8-a77b-467927ce3675.roa
File: f5e254d3-bae3-3ef8-a77b-467927ce3675.roa (raw, json)
Hash identifier: 9fClsjIolsTTQdL+fME7UvxgaNr0rvJVbtUS0kNEUKc=
Subject key identifier: 89:26:76:B8:CE:57:9F:79:1F:D9:8B:29:8F:A5:DB:67:35:E0:B7:D0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A1D792741BC59F147B4700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5e254d3-bae3-3ef8-a77b-467927ce3675.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.82.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a1:d7:92:74:1b:c5:9f:14:7b:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=5b9a05d1-e99e-422b-ac47-86d71c1a08e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:0c:cc:27:a5:79:37:63:83:9d:bc:aa:b2:
6a:ce:2b:85:2b:06:b0:21:53:bc:3d:e1:b2:d4:72:
ff:1e:73:79:d0:4a:11:67:ea:45:a7:85:56:a3:c7:
b9:59:27:b2:0a:42:7c:da:f4:60:87:14:78:9a:b0:
d9:9c:5a:ac:15:7f:ef:b6:c7:43:e9:61:42:e0:10:
14:a3:b5:a1:fd:28:67:3d:6b:11:01:1d:46:5d:bf:
ea:7e:46:f7:c1:ac:aa:8b:cb:33:30:e8:aa:d9:e4:
52:05:47:d8:60:91:33:93:c6:75:d3:65:c2:10:82:
d7:52:82:2f:d3:d6:db:29:ad:bd:10:34:4f:84:fa:
5a:34:eb:db:a8:ad:29:8b:01:c3:3d:6d:5f:e8:d7:
96:89:96:35:c4:f2:48:e9:e3:e7:ff:22:e2:50:16:
2f:fb:67:4e:21:76:a0:37:49:d1:69:7c:9f:3c:72:
07:07:89:46:c8:6a:df:31:d0:22:fd:0c:b5:78:10:
ea:ea:4e:1f:8a:ce:4c:20:07:89:d0:c4:62:89:1c:
6f:93:c2:b0:3c:e2:f7:26:69:a3:ef:f2:c8:01:07:
c3:6f:25:08:ff:16:0b:2b:1f:69:03:2d:9d:16:14:
ec:7c:94:82:e8:fa:29:de:6d:ae:a4:e4:cc:ae:c9:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:26:76:B8:CE:57:9F:79:1F:D9:8B:29:8F:A5:DB:67:35:E0:B7:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5e254d3-bae3-3ef8-a77b-467927ce3675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.82.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:c7:01:5e:60:56:7c:87:36:b3:fa:a7:30:0b:23:f8:8a:8f:
aa:a0:ee:e4:f7:21:ac:89:22:66:d2:6d:d9:9f:53:64:c7:4f:
21:cb:9d:db:0e:a3:a2:4a:0c:94:fc:fc:9d:ca:fe:0f:47:4c:
2b:09:76:66:fb:12:78:26:3f:22:c8:de:50:45:41:d6:06:ea:
72:22:1d:26:b5:97:ef:4b:aa:63:5d:74:ac:9a:b9:90:1b:7d:
ec:f6:be:14:6f:08:b0:45:73:df:17:c2:e7:14:ce:e2:9a:65:
b5:6c:d8:0b:3a:aa:2e:2d:4c:36:3f:d4:cf:a9:6d:1a:1d:78:
72:a3:3f:bd:b6:44:bd:85:c4:5f:6f:b5:73:ad:ba:ee:f5:31:
80:7c:71:d9:7e:0a:d8:bc:8d:b8:d0:94:95:14:26:58:44:84:
10:82:8c:82:64:b9:e8:ff:98:0f:a0:c4:8e:98:bb:4d:02:9f:
68:2f:04:6e:2f:e9:bf:6e:d2:56:c2:7d:4e:a0:6e:f6:62:56:
15:b9:b0:9d:1e:0f:af:36:4f:1c:d0:bb:0f:f2:b1:9d:a0:8f:
70:39:3e:5c:5b:f2:82:bf:1e:f8:a4:1b:b6:8b:23:de:7a:28:
95:01:a9:ee:f3:5f:89:64:a9:82:c6:5d:2e:ac:5f:d5:f5:27:
71:67:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:09:50 2025 by rpki-client