Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/659aac25-91c5-3c10-9274-3e280d8589b5.roa
File: 659aac25-91c5-3c10-9274-3e280d8589b5.roa (raw, json)
Hash identifier: ywfpET8IBj5OyiKmJPGugv/Yr9WOp8SJ70rcn+aegZI=
Subject key identifier: D1:7F:A5:25:7A:30:EC:F1:5F:E6:45:8E:E4:1A:BB:52:68:C3:4B:8B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7ABEAF0A2601CC83898E080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/659aac25-91c5-3c10-9274-3e280d8589b5.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.147.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ab:ea:f0:a2:60:1c:c8:38:98:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=36ccb443-89e1-4a17-9820-d3414ec1623c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:77:41:b2:a0:86:83:b8:63:fb:aa:1f:c6:
19:12:28:c0:0f:34:a8:7f:a4:53:8c:d5:c5:a5:2e:
0b:14:d4:ab:3b:4f:12:9b:57:9e:4c:c5:c0:df:35:
f1:a0:e7:c8:fc:f8:ff:94:88:0a:65:bb:73:65:50:
4c:46:e1:42:16:c8:86:f1:41:6f:b8:b5:31:d6:1d:
0b:1a:24:74:9d:57:6d:1a:1a:78:41:df:68:7d:32:
88:93:34:d7:bc:18:b2:df:b9:6c:6a:d9:31:24:f4:
6b:14:c7:9b:5f:fe:7f:3b:f0:65:86:cf:a2:f3:a7:
e9:08:9d:d6:15:e4:e7:f8:73:eb:9e:6c:e1:e9:87:
f5:de:17:0e:c9:4f:d4:72:99:91:7f:94:8e:32:d8:
1b:de:ba:dd:12:60:1e:cd:4e:5f:07:6e:ce:e9:47:
5c:21:d8:14:8a:a8:7c:36:d1:4b:a3:cb:55:4d:a9:
23:d6:04:89:a0:c9:58:5d:8f:05:5e:95:de:bf:62:
3f:10:66:8f:e1:7a:a4:06:02:f0:48:32:b3:ed:e6:
40:9c:c4:7a:c2:83:d8:69:96:db:2b:c7:ac:ba:0b:
20:5b:e0:3b:88:1e:2c:fe:1e:b6:98:d8:46:e3:92:
09:b7:59:56:66:4d:ff:0c:de:59:a4:eb:15:fc:bb:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7F:A5:25:7A:30:EC:F1:5F:E6:45:8E:E4:1A:BB:52:68:C3:4B:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/659aac25-91c5-3c10-9274-3e280d8589b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.147.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:5d:42:7f:c0:2c:e8:98:e3:7e:3c:64:b3:fb:23:ed:7e:b3:
b1:ed:30:da:fb:2f:25:9c:05:17:73:ee:12:18:9a:02:ad:e1:
d8:05:0d:47:57:8e:ab:0d:a1:e5:59:55:05:34:a4:0e:e7:9e:
7e:d8:75:cc:e6:14:27:3a:06:5d:e5:4c:83:02:4b:12:ac:8d:
d1:a8:d7:75:92:21:44:23:3d:d2:0b:f6:c8:f1:b9:84:a3:c5:
9c:52:d9:59:be:08:5a:92:29:1e:48:70:62:35:e7:ca:bf:c7:
e0:21:2a:62:8d:8a:c0:10:80:96:d0:33:44:73:7c:58:be:ca:
a0:29:bf:65:2d:1c:ae:9c:54:e7:21:5a:98:8c:0d:56:a0:a7:
5e:57:0c:29:12:31:dc:c4:f4:34:ab:78:44:b3:ce:71:6b:68:
1a:d4:f8:40:1a:94:04:f9:40:39:67:3f:02:0c:64:dc:cf:88:
34:6c:a1:36:e2:62:5a:1f:c4:78:99:b2:ec:21:32:e1:ba:42:
0a:96:94:50:af:3e:f2:65:68:e7:82:40:de:7e:bd:dd:dd:43:
45:39:84:12:cf:b2:78:b8:54:d3:15:e2:00:42:81:7d:00:f0:
ee:79:01:79:da:f6:fb:ea:81:b5:c1:1a:50:6a:9c:eb:9b:61:
31:5d:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:37:02 2025 by rpki-client