Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9478a1a5-469d-3507-ac0d-53d9cd8668ef.roa
File: 9478a1a5-469d-3507-ac0d-53d9cd8668ef.roa (raw, json)
Hash identifier: UnfHQEqCyrVP0fqjNyTtcWb/Xwtar8YPOcZ3PxnvVFI=
Subject key identifier: EE:D0:65:FF:CE:89:B5:FA:82:0D:14:6C:C5:3F:CB:3C:D1:46:0C:CE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BA865F4FE0476A6A152C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9478a1a5-469d-3507-ac0d-53d9cd8668ef.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 34.132.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:86:5f:4f:e0:47:6a:6a:15:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=186301b4-c868-4e1f-89b7-936275c21d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:32:3d:a4:94:20:42:a0:19:31:61:d3:c4:
2d:c9:42:6a:bf:61:12:4d:b9:56:f6:5a:b2:82:5b:
ca:dd:cd:6d:a1:01:37:8c:76:72:99:6d:99:c8:bb:
1f:76:9d:f7:a0:4f:e6:13:78:3a:bd:fd:f0:d7:b8:
e6:ad:75:49:1d:22:03:ab:7c:6e:fd:68:0f:3e:1d:
cc:52:55:3c:c6:1f:44:5d:4d:d1:44:1d:b8:9a:4e:
2e:52:b2:14:2e:38:e2:17:81:56:b4:aa:d3:3c:e7:
11:10:6a:e2:45:38:66:52:fa:57:28:4b:1c:9d:ad:
60:b6:ad:58:4c:7f:56:86:d6:02:9d:30:a1:0e:f6:
29:22:08:22:3a:34:e2:df:31:fa:d4:10:61:09:ca:
97:77:da:3b:6c:0d:87:68:0a:cf:3e:2a:4b:ce:da:
42:d1:a8:a2:8f:66:65:28:da:93:e2:34:fe:db:8d:
4a:98:ad:31:75:ad:04:9b:2b:fe:5e:36:66:c6:44:
67:27:6b:73:ac:50:71:01:fe:84:26:04:e3:fc:d5:
a6:0d:6a:23:d2:b7:58:4c:e3:86:c8:d9:2f:c5:34:
04:5d:69:9b:eb:2c:2a:67:7a:66:58:8e:69:43:a3:
bc:bd:b8:32:27:0a:25:23:35:f3:46:70:45:32:1a:
ac:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D0:65:FF:CE:89:B5:FA:82:0D:14:6C:C5:3F:CB:3C:D1:46:0C:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9478a1a5-469d-3507-ac0d-53d9cd8668ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:2a:85:cd:62:08:8a:a9:20:33:54:06:33:52:50:0f:db:82:
61:d1:72:25:7d:3a:92:24:e8:e4:70:08:13:11:51:d8:05:19:
2a:a7:5a:5d:a9:50:03:f3:b7:8b:a7:1f:7f:4f:86:d2:21:c8:
3e:2d:d0:a3:43:3f:a6:ef:01:62:4f:6d:0d:f4:35:5b:0d:65:
59:d8:4b:71:eb:0c:1f:a8:63:fd:44:03:df:e7:cf:30:cb:7f:
56:ce:34:87:6b:24:59:6c:b2:df:7c:e1:05:7b:1f:f4:ad:72:
4c:40:ca:3a:a9:fa:22:e1:6e:0d:54:f5:de:c5:3d:09:e8:2d:
1d:b8:e6:c6:4f:f0:60:d9:fd:27:7b:3e:51:71:d5:39:c6:89:
95:98:7c:2d:44:73:3c:08:5e:86:00:e9:60:f8:1e:2f:b0:57:
d3:c9:07:e6:fa:8b:f0:3c:65:ff:2c:5f:d3:41:76:45:40:ee:
91:43:a0:c5:bc:f4:8b:da:9a:25:cb:4d:37:e9:35:a3:cd:36:
1d:65:9f:dc:2f:95:31:7e:ae:5e:1f:3b:a6:09:cf:e4:38:84:
fa:e4:5d:53:14:23:42:a2:54:19:d7:8a:05:67:4d:58:fc:af:
3a:5b:17:f5:17:00:c4:81:2f:68:6e:7e:72:35:32:b0:a7:83:
0e:ca:cb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:42:37 2025 by rpki-client