Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2642718-9d1b-35d8-915b-e5e59c198b66.roa
File: a2642718-9d1b-35d8-915b-e5e59c198b66.roa (raw, json)
Hash identifier: 3maGqwnLMvS3ngsNwwHZ+26Z08z9ud1rZpQJyhYcT2Q=
Subject key identifier: 10:AC:5D:E6:AC:61:07:09:CE:9C:24:BC:D7:41:6A:1F:D9:AE:A1:30
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285839B8D1E13238582B5AF0AA7680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2642718-9d1b-35d8-915b-e5e59c198b66.roa
Signing time: Mon 26 Apr 2021 04:00:00 +0000
ROA not before: Mon 26 Apr 2021 04:00:00 +0000
ROA not after: Sat 29 Jul 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.138.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:b8:d1:e1:32:38:58:2b:5a:f0:aa:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 26 04:00:00 2021 GMT
Not After : Jul 29 04:00:00 2023 GMT
Subject: CN=be66da8d-15ef-4355-9164-4a7a70c80b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:c2:3a:47:d5:04:b2:d4:43:3e:29:d2:b3:
6c:fa:5d:50:72:52:c9:12:f9:2c:ab:ea:24:76:67:
bb:47:97:93:29:fc:66:15:ae:73:cb:0e:e7:a4:97:
3f:ca:28:f8:db:70:23:80:d7:f6:e0:c9:a9:21:1e:
8c:ab:76:d2:61:1c:bb:5b:be:cd:b2:51:1b:9c:c6:
bf:fd:d4:b4:cf:30:08:b1:89:bb:60:25:cc:bc:03:
29:e0:ad:a7:7c:81:91:08:8a:93:5b:42:c0:9a:ea:
af:11:38:59:a9:4b:5d:53:00:ca:ce:df:a5:08:33:
79:08:6f:f8:b9:b9:80:04:21:a1:1e:16:36:f1:23:
fc:01:42:ab:f1:87:b5:67:89:f4:42:a3:2a:3c:af:
23:bb:14:72:15:fa:95:76:d6:3e:a7:1f:40:9c:9a:
a3:12:ac:98:31:6e:e4:08:ab:c3:f0:7f:ad:3a:e6:
8e:a5:e5:42:83:a5:59:41:36:04:a8:86:ed:fd:2e:
3a:b0:66:18:38:e0:8f:2d:e2:25:7d:c6:90:1d:63:
76:de:f7:d7:a5:54:e5:ea:2e:49:9a:61:de:42:1f:
3c:5d:54:35:c7:10:9d:9e:4a:b1:c9:c1:65:89:a1:
8f:25:e3:15:21:8d:e3:81:cb:d4:ae:ee:60:a1:83:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AC:5D:E6:AC:61:07:09:CE:9C:24:BC:D7:41:6A:1F:D9:AE:A1:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2642718-9d1b-35d8-915b-e5e59c198b66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:41:c9:95:4a:f8:08:66:58:7f:e9:59:3c:7f:31:b7:2a:84:
06:31:e9:3f:1b:d6:35:e5:69:96:1c:c2:d3:3f:24:e3:42:a5:
42:aa:52:01:18:30:14:5d:43:8d:19:c2:83:50:7b:00:19:30:
93:c4:6a:91:de:8d:66:ba:ea:0f:7a:46:05:ec:86:64:9a:47:
3d:da:7f:70:70:91:86:ba:75:28:b9:db:14:03:bc:af:d9:15:
16:2e:ea:6d:8b:ff:12:2c:02:53:d2:c5:18:cc:81:86:5f:36:
f0:7f:a7:1a:e0:53:4a:36:d7:8c:c3:f6:24:fc:ab:49:ff:52:
31:28:4a:26:19:b7:96:44:1d:ac:df:0c:75:0d:51:1f:ee:20:
49:2a:5a:fa:7b:0d:ec:2d:6a:e5:53:b2:f1:f2:10:54:82:db:
84:f2:c1:35:1a:80:cb:b3:3f:de:30:7a:80:c0:a2:29:c9:47:
ff:f3:fb:3a:11:6d:a6:e0:11:cb:47:cd:db:64:36:b7:ab:81:
be:98:93:dd:b8:da:0b:33:18:e7:94:a4:94:e4:47:07:24:78:
b8:bb:e9:2e:83:5c:3e:1a:d2:f6:ba:5d:c6:38:6c:93:f0:a5:
58:1f:ad:be:d9:fb:ed:0c:27:54:4c:f4:e0:6b:33:62:78:78:
e5:e4:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:24:45 2025 by rpki-client