Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b249da6-1a17-3db6-9f4c-24b743fb405d.roa
File: 8b249da6-1a17-3db6-9f4c-24b743fb405d.roa (raw, json)
Hash identifier: sFVAZWf71lVOqUKKqUs2J35yxOPSsavXqD4LVpBWpvI=
Subject key identifier: 52:19:94:91:61:48:4F:23:5F:2F:EE:83:84:1F:FF:6B:3F:56:02:57
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A8019D17D4D52B347D2400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b249da6-1a17-3db6-9f4c-24b743fb405d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.130.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a8:01:9d:17:d4:d5:2b:34:7d:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=02b6fd2f-3c8a-41ac-a385-951a820989f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:bb:e6:05:fd:49:8b:a8:d5:36:77:d4:9f:
06:60:9b:43:ec:89:c8:36:2e:c8:f3:6d:0d:e2:f7:
bf:1f:08:43:87:74:f7:e8:47:cd:bd:a9:94:80:7f:
48:99:d7:a2:e2:c2:fa:a2:a3:a1:b1:e8:da:9a:e6:
b1:7b:45:c3:9b:08:d2:e2:7a:53:94:ec:44:99:a5:
be:81:11:bb:0a:55:58:cb:33:9e:a2:31:b9:2b:3c:
fb:3d:8b:ed:9a:05:d9:1e:df:cd:93:ee:f6:3f:da:
71:0f:71:09:c1:8a:5d:52:b2:1d:e2:78:34:29:39:
c0:da:49:b0:dc:a8:7a:1e:4d:b6:07:13:1b:27:0b:
94:cd:0b:fc:7e:9c:ef:89:e0:22:b3:66:dd:e4:b9:
ff:a5:d7:bd:d2:ca:a0:0f:20:b3:f5:2c:27:cd:38:
9b:13:84:4b:13:df:4b:94:87:1c:7c:47:5b:8d:2c:
d0:fb:3b:b8:a4:d6:ea:5c:c2:b5:78:bc:ff:49:06:
3a:04:51:8c:bf:ad:49:cf:30:76:22:74:0b:39:74:
3d:ba:d1:31:de:d4:81:50:8b:c6:e1:5d:e4:d2:d0:
3a:37:c9:29:15:99:b1:4c:5a:e1:9d:1e:dd:0c:18:
cb:6d:8d:8f:7a:1a:7c:39:6a:6d:d4:09:99:bd:e2:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:19:94:91:61:48:4F:23:5F:2F:EE:83:84:1F:FF:6B:3F:56:02:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b249da6-1a17-3db6-9f4c-24b743fb405d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.130.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:04:16:51:5c:3c:d8:58:f0:37:6b:34:b3:0a:1c:76:ff:a6:
50:6f:e0:05:dc:74:b4:2b:0e:f4:f6:7c:3a:8d:49:f6:f9:32:
75:e3:51:b1:a9:6a:b1:be:b8:f0:d0:18:4c:15:1f:a4:eb:c0:
cd:23:bd:94:11:b8:96:b5:d7:7c:00:5c:91:1f:27:92:9f:1d:
a9:ea:88:44:41:61:8b:6b:5a:ae:75:a0:37:05:cc:35:12:2e:
33:f1:a9:bf:97:1a:a9:b6:9d:9d:b2:b5:00:f6:67:30:94:3d:
79:a2:b1:a1:93:55:8c:02:a0:5c:83:97:71:b5:6f:f3:18:de:
ad:93:be:bb:94:24:7d:93:af:f3:53:28:f1:5f:ad:c6:a6:3e:
59:d6:5e:ac:47:85:37:4a:f1:0e:d4:7f:4c:4b:51:78:1f:fe:
1a:be:cc:c0:75:a8:06:41:bb:11:98:e5:63:3a:87:ef:91:d8:
4c:f9:e4:ca:5d:ca:bb:a4:e7:9d:53:b0:7f:c6:d3:1d:12:9e:
f8:f2:9d:bb:9a:eb:99:7f:e3:cd:62:3c:1a:2b:b7:3d:37:a8:
28:0b:db:77:46:9d:f1:18:33:a7:6d:b7:09:17:63:d3:85:c9:
ed:95:6b:48:ce:ed:c7:91:32:bb:ed:76:27:4c:f6:3f:ac:92:
75:2c:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:50:46 2025 by rpki-client