Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6fdc1df-e98e-3e17-bc13-a55fa3b99e0f.roa
File: f6fdc1df-e98e-3e17-bc13-a55fa3b99e0f.roa (raw, json)
Hash identifier: B+mvJH22NJyknGaydJ3DPBTGAikI1jsU7OqybW7t7MI=
Subject key identifier: A4:42:A8:0F:EA:B5:BA:A8:6D:5C:7A:67:96:85:6A:5D:B8:AF:88:A8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B5CC8EA4F35D8BA2D9EB00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6fdc1df-e98e-3e17-bc13-a55fa3b99e0f.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.147.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b5:cc:8e:a4:f3:5d:8b:a2:d9:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=4418f18b-2c97-4a37-891f-ccbb824c9787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:13:1e:91:12:d0:2e:e6:a1:6a:ed:52:06:
b6:7a:49:f8:ee:fb:ed:fc:f5:4f:3a:af:d6:6c:4a:
cc:a2:83:c0:c0:12:79:08:e0:a8:e1:e7:df:10:1f:
75:dd:0e:d6:6f:da:bb:f5:d4:3f:47:3f:7f:69:ad:
2d:c9:d4:f7:8c:d8:00:6e:15:d0:c1:eb:29:b7:16:
f0:27:7e:47:90:be:35:84:cd:6e:10:cd:96:e2:22:
9c:4e:60:ac:95:78:1c:7a:db:63:f2:4a:8b:35:50:
f5:61:0e:46:10:df:d5:5d:d6:ad:5d:34:1c:ef:d2:
95:1a:1e:5a:e2:a3:b1:8a:87:17:fa:eb:8c:93:3d:
00:f8:92:d5:dd:e8:ec:9c:36:fa:5d:e9:81:40:c9:
1b:5b:5d:39:15:19:a4:ba:03:3a:f1:9a:9d:42:02:
d0:ad:de:82:d9:53:75:63:2d:c1:04:02:80:e6:bb:
42:5c:32:79:57:02:b3:d2:7b:f3:87:69:bf:e7:af:
34:d5:af:91:b5:82:ef:23:87:3d:7b:26:c0:8c:06:
66:b9:c6:c8:fe:2e:48:74:9c:1a:73:a7:c1:bc:73:
89:d5:89:0d:c1:db:aa:43:2b:a1:be:b3:84:20:36:
4d:5f:bc:a4:46:4f:63:f7:7e:3c:8d:00:34:c7:a7:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:42:A8:0F:EA:B5:BA:A8:6D:5C:7A:67:96:85:6A:5D:B8:AF:88:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6fdc1df-e98e-3e17-bc13-a55fa3b99e0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.147.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:da:f1:56:d2:92:fe:49:40:c8:9e:ef:a4:a7:78:89:27:ea:
9f:01:26:a4:01:b3:0f:a1:52:a2:20:24:30:52:97:ac:74:ee:
f4:8f:86:79:70:f9:9a:e2:50:a7:e8:3c:5f:03:a7:3f:78:27:
f3:ef:ff:ff:d5:e4:d1:2b:0c:f9:d4:46:58:9c:c7:0d:c1:4e:
28:e1:3c:30:76:21:26:50:c6:1a:44:57:dc:6a:91:54:83:c3:
11:ac:6c:50:34:02:e7:cb:d5:2e:0b:fe:7b:5d:4d:5d:e4:c5:
31:b5:3c:bb:8a:be:44:9a:fe:6a:ea:3d:3f:ce:83:b5:da:d8:
72:04:a8:11:e1:b1:d1:c2:cb:74:f6:90:a3:90:1d:cd:6e:97:
af:21:57:3c:3c:f7:c5:35:4a:bf:cb:32:8c:de:2a:07:33:a5:
60:1e:c9:c0:eb:16:13:56:60:cf:cf:7e:09:e7:b1:eb:6b:46:
de:dd:d4:de:26:7e:80:f8:cd:05:21:72:3c:f3:8f:e9:2b:9d:
39:35:d0:0d:9b:a4:0a:b4:d1:2f:8d:0f:ef:27:81:f0:5f:00:
8e:05:99:37:4b:37:70:b9:09:a4:1f:5f:a1:d0:8e:9d:73:3c:
1f:cd:0a:4d:47:f1:d7:b2:68:5d:21:f9:13:54:f2:69:66:77:
f2:39:b0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:08:08 2025 by rpki-client