Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36a92e4f-35d6-3dbe-9185-cb36daad263d.roa
File: 36a92e4f-35d6-3dbe-9185-cb36daad263d.roa (raw, json)
Hash identifier: Vxc2yIJj2EZRJfIwKSxN1Ak/wxcRbZrT8Y0ZxnWkHdI=
Subject key identifier: E5:FE:05:91:72:F3:D3:D8:6A:D4:6A:C3:AE:F6:C9:09:28:2C:C9:33
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AD86977644F04450A71D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36a92e4f-35d6-3dbe-9185-cb36daad263d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.145.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ad:86:97:76:44:f0:44:50:a7:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=033f7cba-9f60-4106-bb7f-ba412affe992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ef:c1:1c:6f:95:04:ca:31:17:7b:12:a6:f5:
1e:a3:f2:22:fa:5c:01:0f:f8:74:2c:06:f8:b8:42:
d1:fa:dd:bb:45:5e:8d:2a:40:9a:36:b6:00:97:7d:
f3:9a:2d:01:09:43:61:8d:a7:1c:54:72:37:61:9b:
c7:1c:d5:66:62:93:77:7c:86:48:6c:67:69:ae:91:
f4:15:9c:f6:71:6b:4f:d9:4d:1b:8c:39:88:a3:46:
46:47:a1:28:8e:c5:b3:e0:a2:6c:06:fe:f2:37:f7:
1b:b0:55:30:89:c8:8f:ea:cf:08:d6:19:1c:18:9d:
b3:87:6e:30:64:85:d7:95:8d:68:c8:44:6f:97:fa:
f5:75:08:e9:df:df:1a:61:20:06:ac:56:72:d5:b5:
1c:9b:c1:ef:fe:92:3b:02:56:5b:e0:da:f7:30:41:
38:c5:60:88:71:fd:ec:97:12:c7:b9:6c:d0:93:63:
6a:b2:a1:da:e0:18:36:79:21:67:9c:db:f6:97:49:
1d:e4:a4:5a:d1:f4:55:43:7c:fa:e4:fe:0f:35:64:
8d:6b:a7:6c:b6:79:92:fa:a0:b3:e6:2f:ee:1f:b2:
82:84:0e:df:d4:1b:1c:20:7a:7c:d9:3a:6f:a1:61:
3f:36:df:81:96:06:73:4b:85:1e:38:de:d9:8a:2e:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:05:91:72:F3:D3:D8:6A:D4:6A:C3:AE:F6:C9:09:28:2C:C9:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36a92e4f-35d6-3dbe-9185-cb36daad263d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.145.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:83:c3:7b:f8:f6:98:c4:ab:17:99:4b:7c:37:21:33:3f:0e:
70:1e:a3:f9:ec:40:cc:e9:9f:fb:d0:df:c5:46:b0:66:98:2f:
a4:79:75:6f:70:ee:9e:ef:0e:7d:1e:d8:33:f1:4b:08:76:e3:
a4:3a:16:45:dd:03:a3:a1:53:86:6c:43:2e:ab:21:90:b6:a4:
6e:9b:0b:5e:96:5c:57:43:80:84:94:f1:ab:af:9c:65:0e:35:
10:94:ef:8a:3d:74:34:3c:8c:d1:e4:fd:c0:aa:1b:07:72:7f:
bf:6d:b2:da:c4:89:6a:9b:5c:2a:b1:1b:90:4f:dc:a8:fd:d1:
6d:c3:01:43:e9:bd:39:0a:b2:4f:8f:81:ef:64:94:07:20:a9:
ed:ed:dd:81:cd:0d:9d:7f:ed:8e:0b:61:ef:de:ff:9b:6d:a4:
73:e4:2d:a7:a0:38:9a:2a:4e:72:9e:a2:18:ed:b7:02:d1:57:
fe:f4:7b:84:5b:6b:65:0a:46:47:45:23:1d:41:0b:55:30:79:
d0:0c:8d:47:69:0a:e1:6c:32:ec:c0:42:c3:ba:b1:fa:4b:39:
28:9f:b2:d3:7b:3f:d9:8a:24:df:8d:04:f1:72:4d:bc:a4:81:
fc:be:ab:a8:ac:2f:99:0b:d7:cf:68:8d:17:fb:53:87:c0:97:
39:98:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:27:25 2025 by rpki-client