Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/985686fb-58c1-3ad7-aa04-2866a2bea129.roa
File: 985686fb-58c1-3ad7-aa04-2866a2bea129.roa (raw, json)
Hash identifier: 8N8RRCr+3U6NyyO2IH4IEdtbKc3BhIlbM4/OAEjGqq4=
Subject key identifier: 1C:42:6F:E2:CC:57:F6:E5:DB:F9:94:A3:6B:AA:1A:DE:8A:76:2A:A9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AB832D201DE5882AC91D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/985686fb-58c1-3ad7-aa04-2866a2bea129.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 34.98.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ab:83:2d:20:1d:e5:88:2a:c9:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=1b86c869-f966-4dd4-8c8b-9af5a74e061f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:ca:f3:81:d8:18:6c:49:30:e2:87:07:90:
03:6d:d1:c2:8d:64:26:6f:97:fa:87:44:c1:5b:87:
e1:50:97:b5:68:41:4f:d7:8a:5e:a4:80:fb:37:78:
ff:48:a4:6b:b4:74:11:01:ed:39:a7:45:3c:9d:c3:
7e:8b:12:fa:fe:b8:2f:02:ca:ae:ee:67:6a:65:c9:
96:f2:85:56:91:70:4e:5d:50:9a:e6:a4:52:9a:43:
bc:78:8b:5b:1e:ac:be:bf:fc:a2:c4:8e:54:3a:34:
a9:23:9a:ce:e1:01:64:d7:31:3d:fc:69:b4:de:11:
c3:16:e7:0f:c8:44:9c:b6:17:46:61:1a:c8:9f:65:
8c:b0:4c:7f:4c:58:8e:06:4b:ff:9c:c9:bb:ad:4d:
4a:8e:e4:3d:59:67:05:70:18:37:c7:f9:e7:c0:44:
63:ad:7d:98:a1:d8:d9:b2:8b:cb:46:82:7d:ab:98:
0d:fc:37:be:0c:60:f3:ae:09:e2:f8:a4:0e:e8:e2:
cf:3d:4f:2d:06:13:f1:21:63:30:3a:1d:43:99:bd:
7d:46:80:57:65:c0:6f:97:eb:94:39:89:94:ba:e8:
a9:d8:3b:29:35:27:8a:a6:31:70:58:bd:b7:0f:61:
8c:f9:87:7a:24:00:20:ad:7f:05:66:51:8a:5c:92:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:42:6F:E2:CC:57:F6:E5:DB:F9:94:A3:6B:AA:1A:DE:8A:76:2A:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/985686fb-58c1-3ad7-aa04-2866a2bea129.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.98.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:7b:ee:55:7d:1e:30:04:4f:53:fe:97:a9:34:ea:dd:9d:f5:
db:47:c8:a3:4e:6a:38:e6:13:5a:43:01:64:e6:3a:a2:73:64:
b2:78:96:21:eb:37:51:1e:b4:41:a8:67:7c:46:75:b7:42:d7:
e6:4f:b7:c1:e1:89:38:98:87:e3:64:24:b3:a3:cf:a5:94:37:
60:50:89:57:5f:37:1d:da:4b:78:94:31:fa:5e:01:55:00:75:
a2:3b:b8:d4:dc:45:8d:f2:f1:ab:02:1d:54:39:91:fe:3f:17:
bf:70:40:fc:f3:fb:95:90:5b:9f:81:3e:f5:66:6a:85:46:46:
f5:3c:02:55:7e:c4:53:ef:7e:f1:dc:05:84:a0:d0:a4:c3:b5:
69:51:ea:b7:1d:eb:66:3a:55:b9:17:cd:fa:27:5a:21:a1:c4:
87:c9:0f:b5:a8:1f:ff:12:c7:a7:b1:f7:f3:06:55:64:d0:10:
f4:12:ce:c0:28:3a:aa:9a:48:20:57:bc:b0:f6:d6:0e:31:6d:
10:84:e3:0a:de:40:9c:12:37:cb:5c:0f:36:92:5e:c4:d2:e1:
98:af:99:27:82:09:4b:6f:8a:da:ef:c2:39:4b:37:74:a3:f7:
b9:4e:d9:b2:23:01:1e:a8:3a:d6:09:9b:e1:7c:30:50:84:34:
e3:19:aa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:47:44 2025 by rpki-client