Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32b99759-62c2-3cd1-a9f8-8d483788dc1d.roa
File: 32b99759-62c2-3cd1-a9f8-8d483788dc1d.roa (raw, json)
Hash identifier: dpCijlX842PdbagJ8eggkgqtv/aGwKFonfXP9JchRR0=
Subject key identifier: 3B:41:B6:AE:F4:33:AF:37:6C:AE:41:36:80:3F:78:71:36:D3:E8:8B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B6ABB31489D06661F4DE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32b99759-62c2-3cd1-a9f8-8d483788dc1d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.98.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b6:ab:b3:14:89:d0:66:61:f4:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=372239c0-2032-4229-961d-dfdd8b0d1056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:f8:ea:d1:46:53:ab:45:4e:f3:cb:e8:f4:
bf:cd:ca:a6:1a:70:f6:1d:7c:06:4b:a9:46:51:5e:
69:28:44:c9:33:a4:93:fd:f6:11:ae:07:36:8b:2d:
a8:89:4d:45:2e:34:79:f9:69:26:9e:80:a3:73:c1:
31:9e:03:5b:43:38:5f:8b:05:08:b0:41:d8:4f:46:
9b:84:39:24:0b:b4:fc:cb:49:27:3f:ec:f9:ed:29:
4f:c7:f5:68:d5:d6:07:12:cf:2a:cd:c4:04:e1:00:
6d:75:2c:b1:2d:e2:18:65:bd:6e:ba:33:d7:4d:4b:
84:c2:9d:4b:d5:a6:38:9e:af:84:8f:3f:35:af:8b:
49:20:43:a1:b3:bc:d9:96:f5:e8:4b:71:bf:f7:bb:
31:c2:ee:26:64:e4:c3:e2:c6:d3:bc:29:2a:76:13:
5c:f1:53:cb:9f:65:2d:90:08:43:b2:1b:f1:6b:1f:
d4:d0:f5:9d:12:8a:2c:db:b6:50:42:e1:c1:c8:74:
2a:ed:1e:c4:04:0d:5d:af:bf:ad:11:f1:0d:6c:c7:
26:22:3a:5c:8c:33:bd:e1:6d:e1:17:1e:24:33:09:
0d:04:d6:7a:e7:aa:5b:42:c6:f9:de:00:fd:e6:66:
5d:02:45:46:a7:20:b4:ed:b3:1f:43:82:12:fc:e9:
7b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:41:B6:AE:F4:33:AF:37:6C:AE:41:36:80:3F:78:71:36:D3:E8:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32b99759-62c2-3cd1-a9f8-8d483788dc1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.98.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:68:02:01:e5:8d:a7:44:9b:df:08:c7:a6:5a:06:27:d0:ac:
f5:92:d0:c9:70:8c:08:c8:33:a1:87:eb:5d:30:b1:41:46:ca:
c7:26:8b:9b:53:2d:04:e3:a6:4f:b1:8b:54:cb:36:2a:23:d5:
5a:60:9d:1c:6e:cc:fe:2d:3b:e6:81:91:9e:4f:ca:c1:d6:e8:
cc:6a:e0:de:bb:d9:23:5b:a9:a8:36:f4:cc:3f:63:1f:86:a4:
2e:04:26:0c:25:e7:18:bc:0a:5c:f2:d0:8b:40:21:82:6f:14:
42:16:15:99:08:5b:f8:45:4f:ce:90:9f:03:37:bc:ec:b9:a9:
72:a2:b4:a5:81:99:fc:10:4f:cc:f1:ae:43:33:5e:6f:22:10:
ac:cd:48:b9:61:e1:85:f5:b6:e1:ba:13:07:d0:ff:35:38:51:
a6:12:84:ba:ca:eb:14:0c:00:26:fc:3a:0a:bd:a3:9f:37:16:
2f:a9:0f:81:bd:ea:44:b9:df:8b:1c:fe:ec:22:a9:65:36:f3:
b9:97:89:4e:6b:91:5f:a2:a7:f3:90:c9:38:75:56:aa:17:52:
4b:3f:97:fc:dc:58:40:8b:1b:5d:db:e9:0c:cb:ef:54:76:9a:
02:d3:99:20:e6:e8:43:48:d5:65:12:c4:79:9d:f6:ff:6a:17:
1b:d9:e2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:09:53 2025 by rpki-client