Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bc0275f-d73a-3d5a-b03d-68b582de20fa.roa
File: 2bc0275f-d73a-3d5a-b03d-68b582de20fa.roa (raw, json)
Hash identifier: k1Q92VprGurlQ7LEiI6KHBevVBxmmZS0D/muO6PT0VY=
Subject key identifier: AA:61:B9:BE:A0:89:EB:9E:56:AA:CE:0D:BB:21:7B:08:1C:F2:C2:9F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EB7C59716DA61B9E0C6780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bc0275f-d73a-3d5a-b03d-68b582de20fa.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.121.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:eb:7c:59:71:6d:a6:1b:9e:0c:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=72b7ab2a-368c-4e19-8fae-73937427af7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:a2:0c:8f:a2:2b:d2:b6:7a:82:78:41:86:
c4:b8:18:cb:b6:c9:5f:d7:ae:4c:37:fe:0e:51:08:
45:d5:7d:4a:c2:bb:c6:6d:38:00:20:bf:16:49:3f:
77:9a:14:6d:76:88:b7:4d:9a:14:71:ec:0e:9b:77:
e3:e5:89:0c:53:7f:f0:29:ba:0d:ae:66:58:d4:48:
25:83:f2:f5:40:d6:b6:37:4a:d3:9b:b5:ef:77:10:
6a:3d:ef:8e:cc:4e:06:48:6c:36:41:f4:e3:a2:16:
a5:81:66:7f:58:58:28:49:74:6c:da:b7:ad:5f:59:
c1:c3:3f:3f:6a:66:83:d1:9b:d8:e7:33:c1:04:0e:
36:b7:da:41:67:c0:f0:c0:09:f7:4d:29:32:7f:0d:
45:74:61:08:8a:b4:fb:9e:65:20:ab:59:55:3a:44:
e9:40:38:df:56:41:2f:ac:44:a7:0d:f3:39:6f:7d:
1f:2d:06:ca:0e:af:5f:ce:74:21:1d:d8:be:51:e7:
1b:6b:2f:27:a7:18:7a:e3:99:e5:96:d6:4a:0a:6b:
8b:77:ab:25:96:cd:5a:4f:6b:ae:b1:58:b4:3a:e1:
ea:cc:de:17:af:26:30:b3:50:66:15:ea:90:80:44:
e3:2c:4f:9d:07:b8:68:aa:75:8a:f2:7a:6e:ae:c9:
dc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:61:B9:BE:A0:89:EB:9E:56:AA:CE:0D:BB:21:7B:08:1C:F2:C2:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bc0275f-d73a-3d5a-b03d-68b582de20fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.121.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:51:96:5d:ed:30:a0:90:40:4c:56:ad:55:57:9a:8f:86:aa:
6a:3f:09:c7:37:1d:0a:ba:ca:eb:8d:fa:85:82:fd:07:e2:ab:
79:d2:70:97:77:34:de:23:d8:9d:e5:b0:cb:56:f6:79:fd:44:
cb:ea:db:86:cc:1a:3a:e8:58:e9:60:a1:fd:82:83:83:89:ff:
00:36:1b:a6:d9:62:34:49:7a:07:1d:cc:c4:2b:b5:e9:01:c3:
34:e8:19:2d:82:e3:46:36:1c:40:af:6a:45:f9:56:da:ed:9a:
b1:bd:d4:ba:31:9e:b1:73:f0:6b:e6:f1:7a:9f:69:d7:c8:fa:
b9:b9:d7:be:e1:44:fc:17:7d:c8:d6:7a:4d:10:89:f6:83:8e:
0b:7c:e7:38:75:b9:6b:4b:a4:09:28:7a:e8:42:72:69:8e:70:
7c:e8:79:e5:76:b5:fb:e9:45:dc:9d:91:73:06:5c:2c:5e:de:
bf:f8:92:8d:73:51:ee:95:04:5a:8f:8d:03:a3:36:b2:74:aa:
ff:97:1c:84:61:f4:c9:af:03:3e:58:37:00:f4:1e:fe:b1:16:
44:bb:58:f3:68:a0:d0:df:f0:41:4a:3d:a4:b0:b4:47:68:0f:
2b:c3:dd:62:c4:c4:8a:43:37:0a:20:11:1b:3f:c8:44:91:37:
9f:52:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:50:05 2025 by rpki-client