Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd535fc-4c9b-34a9-ac29-5b6541ad1638.roa
File: 2bd535fc-4c9b-34a9-ac29-5b6541ad1638.roa (raw, json)
Hash identifier: Oz2RYUluLlX4KsDgekznesbFoftpXX2z3+OjCe75NUc=
Subject key identifier: E2:2D:76:CD:FF:F1:87:DD:DF:41:15:90:F6:19:4D:77:42:E2:3C:53
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C5993F5C28991E43519360
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd535fc-4c9b-34a9-ac29-5b6541ad1638.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.136.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c5:99:3f:5c:28:99:1e:43:51:93:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=88b60e63-18a2-4b43-b746-7d756d06eed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:7c:88:4b:2b:22:d4:c1:53:19:72:a3:bb:
5e:b0:a2:68:da:60:be:de:ee:68:a7:f7:d8:f5:2c:
36:fa:3d:51:ed:6c:b1:58:be:36:5a:0b:fd:06:ab:
53:a9:64:18:1b:d8:6a:95:37:67:bc:06:47:78:55:
bc:42:01:da:97:9e:f3:6a:4e:3a:7e:2e:d9:60:b8:
55:24:7b:69:6a:5d:ff:d3:1a:59:9b:dc:e9:6f:4e:
eb:20:47:f5:ec:dc:98:3d:80:2d:3b:88:fb:27:81:
0e:ef:66:fb:c2:64:4a:68:50:d8:90:d0:0d:50:e2:
f4:7a:fe:07:f0:18:7d:50:43:65:e3:73:fb:ce:68:
77:85:c6:26:28:94:63:2c:ac:12:10:4b:e7:e5:77:
27:e6:8a:6e:c4:3e:59:bb:17:b1:2e:db:92:ac:9d:
d1:7f:cc:f2:6b:45:0d:e1:64:1d:88:01:3d:5b:14:
09:db:06:f8:4b:27:89:3d:83:c2:b3:39:83:5d:c7:
cc:1e:ec:02:08:ff:bf:c1:df:78:11:11:f2:a9:20:
7f:67:7d:8c:17:67:55:d0:a4:1e:56:e8:6d:1c:73:
62:fd:18:12:1e:60:ee:fd:eb:90:ac:88:23:7b:0f:
d8:16:6d:50:1a:ee:b1:0e:33:75:b0:d5:b0:7b:18:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2D:76:CD:FF:F1:87:DD:DF:41:15:90:F6:19:4D:77:42:E2:3C:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd535fc-4c9b-34a9-ac29-5b6541ad1638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.136.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d2:73:b2:ea:4c:d9:27:6b:8f:7a:88:c9:02:fb:4c:36:ce:
1b:74:fa:00:b8:82:f6:c1:68:2e:75:f2:2b:33:7e:1e:c1:9e:
93:53:60:ab:81:b6:f8:ec:23:e5:5e:61:0f:f1:21:78:00:db:
c4:b4:90:db:c0:92:e3:99:72:81:b7:2a:95:d9:bc:8a:c6:97:
5a:fb:f1:be:ea:27:d3:44:c5:78:ee:02:77:c2:42:4a:48:f4:
8e:f6:80:22:88:bb:20:fc:9f:6f:36:78:23:af:96:6f:5c:33:
62:d0:3e:c7:e3:02:53:89:48:7e:bb:9a:8b:60:df:b7:08:b3:
1a:02:4c:4c:82:f1:05:bc:c6:96:8f:8d:c6:fb:7f:d4:48:65:
f6:c8:90:82:66:36:4d:aa:ee:2f:38:16:33:15:be:a6:43:6d:
4d:16:20:5d:28:78:fa:ab:e0:64:7e:e8:90:ac:a7:d9:9d:58:
df:23:76:ed:49:df:6c:ed:4c:4e:3b:66:ea:9f:77:b6:1f:b2:
d4:c4:73:88:8c:30:81:bd:ea:a7:d1:81:f1:f4:65:a3:1b:fe:
da:81:e5:51:72:62:58:ce:8b:b4:4f:69:3f:8e:f0:ce:0e:13:
57:f7:3c:34:92:e9:6a:6f:4c:ab:d8:31:b3:eb:76:2f:b9:37:
78:15:0a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:14:41 2025 by rpki-client