Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4604281-8855-358e-86e9-f83e5d1b35f3.roa
File: c4604281-8855-358e-86e9-f83e5d1b35f3.roa (raw, json)
Hash identifier: sLpUWWqMzj24MVI+ynEI8s54BYwpBuIJ7RMey+ocMLQ=
Subject key identifier: 35:CD:11:57:CD:93:5C:A7:94:2A:42:4B:FB:56:65:05:7F:55:5C:75
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B467AB20DFC8C9073F5000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4604281-8855-358e-86e9-f83e5d1b35f3.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 34.137.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b4:67:ab:20:df:c8:c9:07:3f:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=abd555a2-8142-46b8-94af-20a0d9370f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:0f:77:36:6d:48:76:90:40:c7:66:dd:09:
b8:d3:c7:2f:f3:42:c6:74:69:21:a7:0f:f3:27:41:
f7:4e:82:de:72:38:e1:6f:fb:bc:26:c1:f3:1b:37:
3a:72:56:34:df:ef:8b:0d:68:24:10:bd:92:e4:b7:
79:29:2f:08:45:25:03:7d:99:02:e3:a2:a3:b3:c1:
45:c7:9c:2c:69:67:74:5f:cd:0b:0d:bd:63:d3:df:
3b:1e:0c:6f:6c:0f:6e:d0:c8:45:98:ee:3b:1f:31:
56:66:80:db:20:6a:e6:44:a5:b5:1e:fe:c4:60:d9:
61:ee:90:0e:16:61:0a:31:43:88:d3:a3:9a:fc:95:
d9:5b:41:b1:b3:18:2b:4b:86:a1:d0:bd:6b:d4:b3:
b2:72:37:4c:ca:21:f7:c2:9c:f7:7c:13:e4:6b:3b:
23:f4:7c:83:5f:d4:bd:2a:b3:54:81:89:8e:2f:7f:
9a:66:b4:67:b9:fd:d6:0e:61:c1:44:84:ec:31:b4:
1c:b2:2f:f8:8d:82:03:49:fc:03:44:e3:14:29:05:
07:82:51:0b:6d:f4:ae:42:ee:75:cc:1c:1e:fa:77:
98:9f:06:39:22:95:e3:1e:83:c9:08:bc:6a:d9:52:
08:50:45:16:eb:01:44:b7:17:74:03:07:a8:21:de:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:11:57:CD:93:5C:A7:94:2A:42:4B:FB:56:65:05:7F:55:5C:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4604281-8855-358e-86e9-f83e5d1b35f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:a4:dd:cd:db:51:bc:54:27:b9:fa:d6:4a:3b:bf:82:e4:f2:
b1:ae:00:26:2f:ca:a2:82:61:6e:c9:55:2e:48:0a:ff:7a:ef:
fc:02:ac:f3:df:aa:30:29:77:41:e5:ee:ad:a1:2f:9e:d7:fd:
40:b7:37:e2:0b:5f:40:3b:5e:4a:a9:7a:03:3c:bf:ee:da:e9:
13:cb:c7:73:c0:75:f0:9d:8c:82:30:24:81:45:07:1a:86:02:
0f:92:59:b3:39:a1:69:5b:43:26:98:0c:5a:d9:7a:00:73:2a:
55:69:99:16:ff:26:0a:4a:90:09:4d:8c:19:be:a7:b1:8c:d2:
2b:9b:87:5f:24:e3:3a:39:ce:2d:3d:d6:6b:76:ce:a6:26:80:
89:c7:eb:90:99:34:c4:7d:60:d4:8d:90:e3:9c:6c:a8:dd:57:
9d:77:a4:5c:dc:a9:b9:9e:cf:8a:4a:bd:aa:65:a1:9b:08:d5:
20:fd:3c:d2:67:96:7d:6a:68:ea:7e:e0:73:76:4c:49:4c:19:
31:80:2d:89:4d:41:49:22:9a:2e:bd:a8:21:0c:3f:e4:1c:1e:
18:7f:7e:bf:5a:8f:52:d1:44:34:f3:20:16:81:50:a8:c9:8b:
21:58:21:19:df:d1:80:ef:88:ea:d7:a9:1a:bc:2b:f2:77:33:
8e:e5:95:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:35:49 2025 by rpki-client