Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a7fbfc0-57e3-3e85-b6c0-917885522901.roa
File: 2a7fbfc0-57e3-3e85-b6c0-917885522901.roa (raw, json)
Hash identifier: 81373G3Sjas3JGwmfTqM1sFc3+aYYwgZGFWX8f5WpqM=
Subject key identifier: AD:B5:5A:AF:6B:F9:64:8E:D3:33:BF:86:9B:D2:3B:47:57:52:D0:B0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C418D9EBA231BF0A989740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a7fbfc0-57e3-3e85-b6c0-917885522901.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.144.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c4:18:d9:eb:a2:31:bf:0a:98:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=51746f97-5fa9-496a-b853-f93e1bd704d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:9a:ec:a3:0c:6a:7e:56:0a:f7:4c:81:06:
e9:01:5e:c3:dc:f3:f0:f0:76:82:ee:a4:5d:ca:0e:
d9:dc:9e:e1:2b:42:a0:71:c8:03:6d:db:24:41:ad:
83:a7:f8:39:ce:f6:39:ac:71:6d:d9:30:e9:1f:71:
52:98:f0:5a:0f:1a:be:4f:fe:65:20:f0:57:53:c5:
ea:26:7f:df:b3:47:8d:e8:9b:bf:a8:08:9c:e9:f5:
f4:ce:fc:ea:b0:d9:4c:96:db:ff:c7:df:5e:cc:32:
e6:d8:2b:e3:f0:37:00:f0:86:c6:f5:29:bf:61:44:
53:be:7b:48:8b:2a:28:b1:af:3d:b4:83:79:7f:ab:
47:49:9b:bf:7f:21:b6:f4:84:0e:55:56:cb:d5:3a:
d9:f3:23:0a:13:95:63:74:71:45:23:85:89:61:b6:
69:d3:2f:1f:28:9f:15:a8:a2:90:f2:d9:87:0c:d6:
9e:74:04:73:1f:d6:22:c7:85:93:8a:09:40:8a:4e:
cf:da:71:cf:49:f9:31:5f:7b:37:51:bf:91:4d:26:
5c:82:7c:f8:18:b8:90:f1:12:93:a9:23:c4:c3:88:
2a:e0:e4:d4:5b:2f:05:94:5a:3b:45:05:a0:a7:46:
14:4b:89:b5:bc:77:04:46:a1:31:f0:16:75:de:ec:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B5:5A:AF:6B:F9:64:8E:D3:33:BF:86:9B:D2:3B:47:57:52:D0:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a7fbfc0-57e3-3e85-b6c0-917885522901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.144.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:32:95:92:21:9d:b4:8e:2a:25:6f:74:9e:92:ee:5b:af:ca:
da:41:30:47:19:af:54:69:53:7d:56:6d:69:89:12:85:52:4a:
77:d8:9d:e7:bc:2e:d6:db:be:35:a0:db:79:cb:ca:4c:47:68:
3b:df:37:8f:f8:86:59:8f:f9:89:ca:25:7c:8b:3d:e8:20:4e:
dc:bd:66:23:77:1b:c7:ab:24:84:5e:18:00:08:70:de:9d:0e:
f0:08:b7:43:8a:71:78:a0:d6:99:70:10:cd:aa:91:0b:e8:64:
aa:81:ae:3e:72:37:d6:c0:26:3c:76:6b:e2:62:bb:c7:dc:89:
3c:4a:55:e0:52:37:20:6d:79:c5:c2:64:ff:96:a7:00:00:56:
1b:24:fa:21:53:24:8a:8d:26:dc:8d:6d:63:7c:90:0e:99:44:
0f:d4:2d:eb:17:f9:b8:f2:d2:b6:e4:d8:34:0d:95:20:f4:d4:
30:2a:c0:ae:fc:6f:24:51:1c:51:76:ff:8f:bc:34:54:a7:2f:
55:d5:67:4e:95:6d:b7:39:88:67:89:61:29:bc:86:ab:bc:94:
3b:bf:2c:5d:fc:14:4e:b0:7e:f9:59:8e:1a:72:55:27:1c:5d:
10:f2:0e:ac:20:56:c9:7c:f3:5e:e5:9c:7c:0d:e4:ae:aa:15:
65:d5:27:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:50:56 2025 by rpki-client