Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb8c72c-8a36-33e3-a321-72f8a5907ab0.roa
File: 2fb8c72c-8a36-33e3-a321-72f8a5907ab0.roa (raw, json)
Hash identifier: Y7AB9zhGdOP1PfUPMxC/LUf8Yo9AQXGD9L7dySoODVk=
Subject key identifier: 3F:42:3F:15:24:25:4C:2A:6F:A4:80:C2:FB:6E:D4:DA:17:B6:5C:BA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A71CA4C1D76F5B57FCA680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb8c72c-8a36-33e3-a321-72f8a5907ab0.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.132.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a7:1c:a4:c1:d7:6f:5b:57:fc:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=7c07fff7-f4ed-4e77-8553-c515354a0b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:c4:3e:e3:7f:bd:6f:b9:8d:4f:ee:8c:f8:
b5:ef:89:ef:28:88:ca:fd:d1:75:89:be:2e:5b:54:
be:06:32:8a:71:75:e1:a3:31:d7:62:b9:25:21:7b:
4c:1c:d8:4d:c9:ae:29:36:ce:09:2f:ba:44:97:2b:
9f:48:ec:0d:02:57:e3:19:80:a0:13:9c:59:5d:12:
9d:ac:ac:d7:51:e2:f1:68:33:5a:36:e5:09:26:51:
d8:62:64:37:95:07:1b:f1:c2:3a:be:3a:ba:5b:97:
3a:96:19:db:1b:8b:11:6a:69:3d:cc:a8:fe:23:f9:
47:b1:4d:21:dc:f8:77:9d:04:0c:92:c6:b7:f6:6d:
ca:d3:27:0c:70:49:e5:17:9c:71:46:ad:5c:be:16:
89:13:3a:12:e4:79:ec:31:56:cf:65:63:57:f5:98:
c5:d4:e8:d4:8b:a3:27:74:22:3e:26:fe:95:a0:c7:
2c:58:c5:4f:27:7d:7c:03:bc:69:a0:ee:16:6c:63:
96:77:be:f9:67:9a:b2:3b:1b:c9:de:6d:65:14:d0:
85:de:79:89:59:da:df:92:2c:47:5c:b8:3e:88:43:
93:0d:da:0d:5d:b5:0b:91:e1:88:87:99:52:19:7b:
aa:b8:d0:50:b1:f3:b7:19:15:e2:fe:fe:e2:37:bc:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:42:3F:15:24:25:4C:2A:6F:A4:80:C2:FB:6E:D4:DA:17:B6:5C:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb8c72c-8a36-33e3-a321-72f8a5907ab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.132.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:71:b7:b8:3a:82:85:3b:9e:d7:af:ea:d8:c8:68:71:91:2f:
9e:ea:84:5b:d9:cb:d7:21:9b:32:21:c9:5e:85:69:2d:34:ad:
1e:0d:a2:29:61:be:13:f0:19:d8:01:3c:c7:8e:6d:82:c8:d1:
06:5b:75:ee:5e:11:5c:79:ad:5c:94:91:7f:2e:f1:ba:5d:85:
f9:b5:0c:e8:bf:b7:87:d7:e7:35:ea:c9:8c:91:8a:12:21:03:
44:27:06:33:71:c2:7e:c9:16:f5:83:96:94:7d:2b:bd:32:74:
3a:73:0f:66:b2:77:d7:41:e8:fc:d0:24:c2:d8:83:81:c2:d7:
63:d3:32:3f:c5:b0:df:c1:1a:f8:16:19:44:18:75:a6:69:6a:
15:5e:79:22:68:3b:5b:e7:72:cf:8b:d4:e0:f3:c5:25:b7:63:
80:9f:c8:91:97:dd:09:b4:d5:dc:79:08:c0:6b:22:e4:86:fb:
2a:0c:08:dd:b3:52:b3:09:b6:27:60:c1:22:6b:65:f2:93:69:
13:f2:57:7c:8a:2c:cb:0b:73:eb:e0:46:dd:f6:f2:9e:47:bd:
14:1d:2f:be:5a:b8:1b:fa:95:95:33:e4:69:f1:ed:1d:75:9a:
93:73:4f:c9:b5:49:c5:85:d5:01:ab:3a:da:fa:7e:6b:69:24:
72:50:5f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:32:08 2025 by rpki-client