Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fa656a9-aff5-350f-8049-c52fc0fac3ff.roa
File: 4fa656a9-aff5-350f-8049-c52fc0fac3ff.roa (raw, json)
Hash identifier: tur8BZcOWb3rzslVw4NX38bIeYwxVl51vDlvYpb/CRQ=
Subject key identifier: AE:2D:E4:47:2F:79:91:54:8F:7C:45:F6:37:FF:5B:54:6E:CC:49:EB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A151C4333CB7B478B38D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fa656a9-aff5-350f-8049-c52fc0fac3ff.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.176.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a1:51:c4:33:3c:b7:b4:78:b3:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=198597b7-6a53-47d7-93fd-0aa7d0a3114d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:2e:2f:ba:f4:0c:83:67:a9:81:d5:08:83:
22:02:76:66:67:4e:6d:37:03:b0:d1:30:8e:2e:65:
b7:a4:a5:89:42:12:9b:40:f3:d1:d4:0d:ce:16:22:
f9:ce:10:24:a0:2b:44:ab:90:06:71:30:15:ee:39:
95:fd:50:8e:28:57:82:20:95:0c:65:9f:db:fe:85:
ac:cd:0f:8d:a2:5e:33:34:1a:42:61:64:f7:ef:22:
00:22:c5:9d:0b:02:25:7d:97:5a:0b:b6:b7:6f:e6:
95:f8:79:39:92:73:80:5e:43:7d:d9:b2:fe:8f:79:
a2:2b:41:bb:7c:c3:66:fe:5a:ed:b7:c6:ca:62:0e:
36:52:c9:f3:09:f4:c8:b2:0f:78:1b:0a:65:87:29:
fa:79:f1:7c:69:98:41:8e:0b:c3:7d:17:fb:8e:e8:
6c:ac:4a:a5:4a:db:07:0d:97:1d:3c:5c:bb:5c:5f:
75:df:5c:b3:f8:02:34:10:a6:89:3a:c5:dd:60:01:
4e:28:fe:66:ed:22:1d:36:dd:ba:85:65:85:d6:aa:
a4:6f:a4:b8:10:08:51:cc:79:65:94:bd:e3:c1:bc:
d7:45:6c:fc:af:80:23:94:08:70:ef:97:65:0a:05:
5a:2d:eb:c7:97:f7:5b:fd:fc:f1:4a:1a:b5:96:8e:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2D:E4:47:2F:79:91:54:8F:7C:45:F6:37:FF:5B:54:6E:CC:49:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4fa656a9-aff5-350f-8049-c52fc0fac3ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.176.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d7:91:01:4d:21:19:b2:12:f7:8f:2c:c6:6b:99:1f:e1:ff:
ad:94:bf:06:36:91:67:f0:8b:3f:3b:df:b3:64:f3:aa:09:60:
d9:0f:b5:b4:cc:cc:74:da:a3:12:ce:32:58:35:d4:57:d5:d0:
d0:7f:bc:57:d7:fa:43:9a:3c:02:2d:e5:45:79:63:02:9d:da:
ec:d6:5a:35:2e:76:55:8b:5b:70:ca:46:b1:36:af:1e:b9:c7:
52:06:1e:e8:e1:f4:a8:5b:36:2b:a4:dc:3f:95:15:5f:c2:cc:
4d:3a:0a:3a:0c:63:f7:10:ad:cb:6f:00:1e:b4:17:a3:d9:f5:
a3:d0:4b:ef:46:48:74:74:91:2f:01:cc:5e:cb:4f:20:3c:61:
a5:91:f0:fe:42:43:a3:4c:e7:2d:68:c9:7f:cb:64:9b:54:84:
9c:f2:d2:50:7c:b3:03:1e:20:1f:9e:25:0a:4a:a0:82:54:24:
c3:9a:0f:ae:b4:9f:58:a2:b1:42:3b:53:54:0b:a3:b4:bc:eb:
a0:c3:50:59:ff:ff:2e:6a:04:b5:e0:8e:76:aa:ae:67:84:79:
ff:18:9f:8d:a3:45:b2:c5:31:0e:cd:9b:78:c2:51:17:06:39:
f2:97:5f:1f:d9:a6:f9:02:e8:9c:06:c9:7a:7b:54:62:0b:55:
21:34:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:50:40 2025 by rpki-client