Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b1bc9df-c27d-3f7b-81c7-6a2fbc078cc4.roa
File: 7b1bc9df-c27d-3f7b-81c7-6a2fbc078cc4.roa (raw, json)
Hash identifier: kGA9k4JVaderdOgOZjnGsTOQj65bpNV6OXOuAYL4HZQ=
Subject key identifier: 61:9D:BE:AD:62:50:9A:47:17:BD:27:09:50:74:2B:7E:4C:F8:2B:08
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C3D93C28C084FE847AFE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b1bc9df-c27d-3f7b-81c7-6a2fbc078cc4.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.135.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c3:d9:3c:28:c0:84:fe:84:7a:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=097bd0b2-e5ba-41ad-ab88-df43fd69608c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:29:ba:e4:68:5b:d9:f0:fd:c6:2e:bb:56:
92:1a:cb:31:b9:be:94:01:90:3e:93:59:df:f1:6c:
5f:90:98:8e:92:4f:fb:6c:16:6d:0c:26:fc:42:3c:
b2:04:39:f7:ac:88:7d:9d:3a:1e:d6:09:36:46:31:
c5:45:a5:a0:ea:d8:0a:8a:63:c9:4c:cf:b7:cc:f9:
0a:1e:ae:1a:0b:bf:82:ea:c7:c8:e1:1d:13:48:77:
65:ef:8d:6f:38:98:49:2d:e4:c7:5a:e7:80:ea:7e:
b1:c7:33:44:f5:80:c5:61:4a:af:5e:dd:d4:97:95:
46:4d:78:9b:68:78:17:e8:96:3a:7e:a8:a3:44:a6:
98:77:a4:c2:c1:1b:61:69:cd:f3:4b:5b:8f:55:d5:
ad:2e:d6:36:b5:16:57:cf:36:ef:cb:6e:3d:e9:5d:
37:99:0d:db:01:2a:92:9a:4d:09:02:fb:96:99:5c:
b7:07:20:d2:80:4a:86:ed:40:99:c8:4b:6c:5d:33:
88:ca:43:c7:9a:a1:9c:55:5f:58:bc:17:5b:06:c6:
2d:04:57:98:af:00:80:71:d6:d1:b2:bb:80:3c:b0:
89:d3:08:fe:72:b6:87:fa:e0:dc:70:7e:80:43:e5:
07:1a:ae:6f:d7:e0:53:f7:58:6e:ae:a3:d5:44:5e:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9D:BE:AD:62:50:9A:47:17:BD:27:09:50:74:2B:7E:4C:F8:2B:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b1bc9df-c27d-3f7b-81c7-6a2fbc078cc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.135.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:05:9f:33:5e:77:82:54:d6:91:0b:e1:db:63:56:d8:a2:b4:
f4:6e:1f:42:9a:61:46:a7:39:7e:42:27:58:1e:12:74:1b:a1:
0c:b7:7c:27:58:a3:45:da:fa:f2:d4:b6:cd:2a:1e:74:5d:4f:
47:fa:c0:12:d0:38:ec:e9:6f:0f:e9:da:6f:e6:ce:c7:e6:a9:
b3:17:56:97:6b:a9:39:f1:0d:7f:df:ee:5a:0a:a2:d5:77:5b:
3d:83:dc:46:e3:d5:4b:43:02:78:d8:73:5e:94:49:9d:95:ea:
51:ba:d1:dc:2d:7a:29:ca:6a:76:27:f3:93:89:fa:fa:c0:02:
f2:ae:42:31:f9:99:3a:be:99:11:cf:32:f2:8e:fd:2a:df:d3:
2b:19:35:3a:fe:2b:d2:66:99:98:77:7e:de:e1:8e:92:de:da:
03:10:bf:af:51:15:56:1b:fa:8d:d1:13:3b:d5:c6:cc:39:e4:
0c:3f:5f:de:2d:81:79:11:04:53:1a:a1:08:21:a7:b3:88:71:
85:f9:a7:2b:9e:35:7d:40:e3:e5:a8:56:02:e4:0b:e6:4b:52:
f2:e4:18:50:e3:94:15:7a:ab:cc:04:63:4b:fa:61:c8:db:23:
cc:ef:15:2d:3e:a7:ca:9f:33:b6:c4:af:f8:b6:41:82:47:d9:
84:0f:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:24:52 2025 by rpki-client