Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b606444-d893-3a32-85db-9a001b5a4474.roa
File: 3b606444-d893-3a32-85db-9a001b5a4474.roa (raw, json)
Hash identifier: 0W2FKQFBF7U4EZtL9vK2TsdubeFGNB4WI26qkTFkWKY=
Subject key identifier: AF:BB:1C:57:9C:CD:00:E5:AC:D1:10:40:8D:6B:83:5C:0C:EF:CE:79
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AE190649E8FD4666206580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b606444-d893-3a32-85db-9a001b5a4474.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.130.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ae:19:06:49:e8:fd:46:66:20:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=6629e663-7f73-48af-96a7-0eb784f6e256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2d:d2:87:35:da:1c:ba:05:a3:c0:41:5c:02:
61:a1:b4:87:26:0d:65:fa:03:e6:67:02:8b:b0:2a:
3a:87:1a:7a:dc:20:62:2e:72:f0:03:68:a7:d7:68:
2d:f7:9a:d1:b6:48:42:6e:15:44:1c:1f:4d:a4:1e:
ff:6a:67:63:36:90:36:86:06:b9:ba:4e:40:ee:a4:
25:32:d2:46:04:68:29:01:85:26:64:0c:5e:11:81:
f5:ca:a4:33:14:c0:41:26:91:d9:85:16:e9:eb:b7:
9d:c3:ea:20:db:18:21:95:89:25:5a:2f:c8:97:18:
b1:41:21:9b:9a:f4:95:70:f3:cf:4f:8c:0f:1b:09:
75:50:19:bb:17:ef:5b:7a:fc:85:47:3e:42:a9:18:
4d:e6:b5:d9:38:bd:7c:10:0f:45:22:9b:d3:d0:15:
ba:f1:16:a6:cc:63:24:4c:8f:d4:10:ea:5f:ab:0e:
99:8e:b0:90:0a:1f:c7:3e:ea:be:8b:cb:96:f4:8c:
7b:2e:b5:3c:32:32:cc:af:7b:28:ad:e4:79:c5:61:
7c:22:7c:d7:f8:43:29:fa:34:cd:e5:67:a2:de:11:
80:32:b2:67:0b:1f:02:f9:e7:fe:45:48:a9:5f:7c:
2e:70:ef:c4:0a:64:2f:d7:b3:49:03:bd:be:34:d3:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BB:1C:57:9C:CD:00:E5:AC:D1:10:40:8D:6B:83:5C:0C:EF:CE:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b606444-d893-3a32-85db-9a001b5a4474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.130.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:21:b9:d9:f0:08:b3:a1:6d:8b:60:03:7f:fa:cf:da:fe:25:
91:ac:57:4b:db:79:df:ee:ff:6d:d5:55:4c:f2:b0:01:21:ed:
fd:54:47:66:fe:82:92:b5:e9:d6:ca:11:52:d1:0f:b0:14:ab:
71:89:9b:6d:94:d7:d4:38:42:77:21:ad:ce:11:e1:69:ac:41:
3d:aa:f6:94:38:29:f6:ed:ad:41:6c:00:e4:14:98:61:a8:2c:
27:61:6c:06:21:be:42:42:8a:12:95:f2:95:fc:58:de:00:2b:
a7:81:c5:d0:36:4c:05:30:00:b5:4e:71:9b:26:5f:06:a4:76:
13:ff:f7:10:6f:e3:29:58:48:5d:f7:d9:b1:ea:38:34:39:6d:
70:61:ed:6d:5f:c0:fa:79:ea:e9:5b:7f:9c:fb:fd:63:df:ac:
e2:e8:a1:91:0d:f3:fb:69:aa:66:c8:3d:4c:49:48:42:81:e7:
e8:f6:58:06:1e:e3:50:64:a2:8b:41:44:10:40:2d:60:7a:5f:
be:f3:91:48:5f:24:64:db:d9:ed:20:a4:39:2b:6e:e2:d4:77:
04:4d:09:96:8f:18:d0:b3:9a:b4:b9:ad:48:a1:51:c3:11:4f:
6c:41:b5:80:aa:a2:f6:ba:b1:07:ea:7b:1a:f7:b6:35:e4:9c:
14:ec:8d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:47:53 2025 by rpki-client