Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2599fb0a-8896-3b4b-89b1-7c052098a221.roa
File: 2599fb0a-8896-3b4b-89b1-7c052098a221.roa (raw, json)
Hash identifier: BuZkavrF7uFwDa0gItZPOk0PQVR5hq9LgqXhGMWGXUI=
Subject key identifier: EE:3C:E6:2E:72:7B:21:7B:76:AB:E8:50:E7:7A:2A:55:D6:35:AB:6F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A617E276C4AF9A1102E000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2599fb0a-8896-3b4b-89b1-7c052098a221.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.68.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a6:17:e2:76:c4:af:9a:11:02:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=fab4bf95-be1f-4204-845f-de02a267a966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:78:e8:5f:d7:18:ba:8f:10:4e:ab:d2:64:
68:06:b4:69:2a:51:5e:d2:f5:ae:2e:76:6a:e4:a4:
2b:15:5c:6a:0e:f5:97:2b:0e:76:22:0b:2b:f8:19:
91:04:0b:61:76:49:25:99:2a:6c:64:18:23:6e:a8:
5c:90:54:94:cc:26:49:b9:41:d2:83:73:86:14:98:
f3:78:d4:c1:28:17:3a:3b:2b:ae:b6:78:9c:17:97:
c6:dc:4a:bf:54:a9:c4:ae:14:0a:62:57:c3:00:b9:
e9:d4:2c:d0:35:88:3d:b9:ed:04:ab:66:41:39:44:
2e:a7:5d:f8:9e:55:85:a9:40:41:b6:2f:2e:dd:0b:
b8:3e:9c:92:3c:2d:5e:7c:95:0d:6b:a4:1a:44:c0:
3a:2a:f1:b7:9b:e1:3b:51:cb:dc:eb:11:08:67:38:
39:30:99:be:c1:38:d1:78:54:49:cf:12:36:4c:3b:
00:ed:e1:64:af:4e:6e:9a:d7:dc:89:54:7d:43:0d:
50:16:f6:36:c8:5e:0f:f8:e1:fd:df:51:0b:95:fc:
6a:5f:07:c0:33:09:0e:00:9a:71:18:e0:53:28:48:
10:d5:f8:c8:f0:84:eb:93:78:a0:15:d4:05:5b:56:
10:f4:c3:9a:85:6f:6e:16:e9:96:32:cb:1f:97:3b:
09:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3C:E6:2E:72:7B:21:7B:76:AB:E8:50:E7:7A:2A:55:D6:35:AB:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2599fb0a-8896-3b4b-89b1-7c052098a221.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:fd:e1:54:33:99:09:17:05:b2:00:c2:bd:30:05:f7:72:78:
cc:3d:ed:ae:70:5e:87:19:5b:cf:ab:38:a1:4a:3e:c4:dc:c7:
d1:3b:65:84:3b:6f:66:7a:d9:3d:80:78:09:34:3e:99:07:51:
e5:cf:aa:81:05:95:d0:f4:76:53:8d:3d:f6:c0:a2:3b:bc:69:
71:ff:66:a0:41:86:a1:8c:36:9d:49:2b:4f:33:01:e2:5a:c8:
72:ac:f8:ff:7c:a3:fa:86:62:d8:72:1e:98:ea:d6:d8:05:fb:
79:a5:c0:ac:94:1a:1e:d2:19:01:c1:65:39:74:b6:e8:5e:9e:
5a:4a:41:bf:b2:c2:a7:ba:d1:81:2a:77:b6:cc:ff:8e:86:33:
b5:e8:97:a8:b3:22:45:05:a9:e4:7c:ad:95:d6:81:66:bd:b8:
1a:60:ad:da:d4:a3:71:65:4b:f1:34:ee:01:bf:0a:87:1d:3b:
34:2c:da:3e:19:af:7c:8f:42:d2:3e:62:0d:80:4f:68:7f:fa:
fb:8c:03:44:1c:f8:06:03:1d:0e:e2:9c:30:76:f0:f1:fb:cb:
f9:73:6a:a5:33:1f:02:59:4c:1b:2e:06:6b:ac:8a:41:e6:ed:
c1:74:bc:a4:8e:ae:3d:b0:3c:1f:9b:90:60:b3:94:e9:8b:66:
0f:b4:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:46:14 2025 by rpki-client