Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f91a46b0-802b-3472-adb0-ff80e1c12449.roa
File: f91a46b0-802b-3472-adb0-ff80e1c12449.roa (raw, json)
Hash identifier: g1LMTZrzuyJJqW90fvrOz24Pz5/NXTV8yIidTHijLr4=
Subject key identifier: D2:B3:26:2D:DE:78:85:E9:CD:08:6B:35:E6:E0:82:54:6B:F2:4C:53
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AA31CFBADFDE8FD12F49B0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f91a46b0-802b-3472-adb0-ff80e1c12449.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.83.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:aa:31:cf:ba:df:de:8f:d1:2f:49:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=97f7b02c-bf24-41bf-91e8-556796fb75ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:29:9e:61:4b:2d:e4:3a:92:79:ec:ed:36:86:
9f:24:2b:16:a6:13:ad:f2:3a:53:41:13:34:d2:46:
09:70:cf:c6:80:2c:8a:57:1a:08:92:9c:d6:a6:a9:
ad:cc:73:6c:65:fe:78:d2:c9:e8:c7:b3:10:c6:dc:
87:5b:a1:49:05:cb:c5:d1:85:50:be:1f:c8:9b:4f:
44:67:af:a1:c8:f5:dd:d1:ac:5b:11:40:95:86:70:
0c:7b:8b:98:db:b7:d8:ff:1c:5d:5a:8a:0b:f8:81:
09:ee:61:17:da:bd:77:09:de:d3:67:a2:ea:8e:fd:
a6:1c:00:e2:b0:5d:18:ac:ca:1d:1f:3c:6e:dc:6d:
dc:e0:08:ba:10:76:42:dd:93:3c:43:ab:6b:9e:6f:
e7:db:2c:2d:6a:fc:27:5d:92:63:b7:be:90:55:99:
58:99:2a:48:51:4a:9a:c2:c6:d0:90:30:0a:68:e0:
e6:19:0d:01:35:07:3f:50:ff:75:ef:4a:c1:39:12:
2a:fa:00:76:77:cd:8c:20:3a:62:2c:f8:45:25:d4:
4b:17:3e:de:31:42:df:90:93:51:6b:0e:9c:32:2c:
21:e2:00:95:5f:4e:85:6e:26:71:1e:4a:3b:20:a8:
05:44:aa:77:30:3a:9c:fc:d4:fd:b6:fd:4a:27:f0:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B3:26:2D:DE:78:85:E9:CD:08:6B:35:E6:E0:82:54:6B:F2:4C:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f91a46b0-802b-3472-adb0-ff80e1c12449.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.83.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:6a:37:55:a1:49:a9:7e:06:d8:f1:95:18:6e:ca:47:40:d3:
10:be:01:51:af:35:47:20:67:dd:a1:0d:de:1b:9f:24:16:37:
7a:62:49:b9:89:f3:ce:9a:ab:1f:c8:e2:60:19:c7:73:e1:14:
d2:93:82:de:70:58:72:37:97:17:83:6f:3c:bd:e7:24:cc:2a:
5a:05:e7:85:ce:ba:94:6d:e7:c7:fc:5d:cb:c2:c9:98:26:ec:
a6:25:7c:da:5c:9f:51:b0:2f:bd:1b:6d:8a:0e:80:01:74:a3:
0a:31:40:f0:85:a2:e9:af:cb:bb:53:15:c1:c6:42:8c:ff:43:
f9:d0:b7:74:78:9a:50:ff:07:a9:a3:c2:ae:c6:dc:af:27:e8:
7e:ba:db:05:3e:99:83:3f:eb:1d:b3:8a:b8:50:9a:de:d7:e5:
81:27:2f:af:7e:9b:b8:fa:ea:32:a9:14:a5:a6:5d:8b:4d:7f:
02:9b:fc:c4:af:6d:62:f8:ff:0f:cc:ac:c3:d7:63:56:1e:7b:
c6:94:16:bd:15:35:7e:fb:9c:65:3b:8c:ca:4c:0c:2f:e8:9e:
3f:d6:b2:70:43:74:ae:fb:4b:f8:7d:6a:48:f6:de:27:c1:ba:
69:41:0c:f8:93:32:55:8b:62:3e:93:a8:72:97:3e:c8:6f:ad:
f5:69:c5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:46:59 2025 by rpki-client