Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae1c37af-db7b-3aaa-90b8-df9c80d05ebc.roa
File: ae1c37af-db7b-3aaa-90b8-df9c80d05ebc.roa (raw, json)
Hash identifier: 9nuBXbnLCansT5o9jlKk4SA5hp9H0fio242RQjC5fY4=
Subject key identifier: F5:D2:FA:DB:54:21:C6:65:33:D3:35:14:8B:E5:D1:E9:0C:D2:2D:AF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C0515B8A1AEECEE486BA40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae1c37af-db7b-3aaa-90b8-df9c80d05ebc.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.144.142.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c0:51:5b:8a:1a:ee:ce:e4:86:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=998ae2ed-b9c0-44c4-a137-77d09d32bb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:ea:86:ae:6c:1b:0d:70:3e:9b:ad:a7:12:
78:d2:af:36:f8:8c:f2:da:08:1a:04:f4:ba:91:2d:
39:4a:71:2b:bd:3d:e5:39:c8:1f:d8:2c:46:59:bf:
28:0c:33:a9:28:97:8d:d8:1f:ce:63:e2:a5:ac:37:
b2:f7:ec:16:55:2d:d7:7a:40:67:80:75:e8:98:86:
24:e4:d6:4c:68:2f:b5:7b:8f:be:32:f4:a3:3c:68:
c4:81:39:0e:62:64:b7:78:e3:cc:e3:a0:32:0a:f8:
85:f3:7b:3a:c8:05:d1:99:00:b3:98:e5:84:fa:e2:
2e:a9:ae:2c:14:d0:10:52:35:65:28:9f:6c:54:36:
01:23:bb:b7:68:31:50:ae:55:99:c8:bd:dc:0f:a8:
df:8a:f2:6d:20:e2:21:02:44:ff:e9:e5:e5:65:b7:
69:4d:ee:98:b3:62:48:9f:dd:4f:c9:68:f4:13:bf:
45:ec:21:83:a1:23:ec:a4:3f:7d:5a:ae:8f:1b:73:
84:19:5d:85:07:4e:bc:af:e0:96:3a:15:c9:d6:fe:
16:35:d1:30:1e:0d:1a:c7:2a:f1:91:0b:7a:04:34:
3f:a6:19:b3:fc:9e:56:a5:fe:db:8a:83:ad:4a:e2:
b8:09:f6:84:1c:ff:b5:18:c8:dc:d0:ba:b7:42:95:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D2:FA:DB:54:21:C6:65:33:D3:35:14:8B:E5:D1:E9:0C:D2:2D:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae1c37af-db7b-3aaa-90b8-df9c80d05ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.144.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:db:a3:1b:b3:19:72:77:2f:51:4f:6d:31:b4:a2:94:87:c1:
de:33:f9:56:16:84:47:a3:5c:3f:2c:00:19:38:41:b2:27:9c:
dd:4e:41:e3:e1:b0:2b:e6:e7:03:2f:83:b9:bd:37:46:60:dc:
09:c4:74:fb:cc:22:97:5f:6b:b5:e0:15:bc:55:d8:c0:fa:45:
91:26:c3:b7:4f:5f:b4:d4:9d:09:eb:32:95:4f:02:ff:34:9c:
3b:8e:e4:36:31:08:31:24:1b:5a:9d:e4:b1:eb:63:0c:1a:32:
c9:be:31:e8:38:d9:fb:7c:97:ec:9a:7e:a3:82:35:1e:de:03:
95:28:c3:6a:37:d0:43:51:ac:fb:10:19:43:b2:01:b4:e3:f0:
b0:b1:bc:1e:78:fd:05:6b:8a:c7:b2:b9:f4:19:63:d0:e7:e0:
98:57:f3:23:70:ed:9c:42:b8:d8:ca:7a:55:39:7c:be:6c:e5:
92:88:5e:10:dc:19:fd:d6:fa:84:bf:09:c3:5a:59:cf:9a:e9:
32:06:bc:c9:5b:2b:88:13:ed:25:6f:c2:dd:ef:a0:10:88:3c:
03:ef:34:f1:57:83:f8:90:49:5b:2d:40:a6:72:45:25:10:b3:
13:d6:74:cd:a1:ba:c8:ad:84:20:a0:9c:70:bc:a9:7a:f8:18:
0d:01:22:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:08:51 2025 by rpki-client