Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd7cfd46-3472-3755-be55-831cf1d1dfac.roa
File: fd7cfd46-3472-3755-be55-831cf1d1dfac.roa (raw, json)
Hash identifier: pGMSdoqc77U5mkA+5CYpukOta/gdHq6Ki1YD3GjWC24=
Subject key identifier: AA:FA:A1:EC:AD:EF:07:14:AF:B3:6B:BF:05:E9:71:2A:D9:97:70:4F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B6FE6DE60872AE0EC9C000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd7cfd46-3472-3755-be55-831cf1d1dfac.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.95.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b6:fe:6d:e6:08:72:ae:0e:c9:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=154edb54-9008-4c33-9c49-c9c8ac898298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:6a:82:c4:6e:46:1f:f7:ac:30:8c:81:e6:
42:6b:d1:ca:f2:00:1a:30:02:4d:e4:21:5c:1a:7a:
79:12:e9:eb:9f:cf:3b:ec:b0:6a:7e:2b:45:e9:7a:
26:bb:45:7b:75:d5:9a:09:da:be:16:fc:75:b6:f5:
fb:37:4b:c2:ce:b0:3a:da:53:90:5b:61:9c:e4:4e:
8e:97:9c:73:40:a7:9f:08:23:5a:bb:90:39:cd:13:
ba:d2:12:f6:e8:b9:68:c1:55:89:3e:f3:e4:d5:19:
09:c4:56:75:f3:ae:a7:39:f3:89:7d:82:2d:1f:6c:
79:11:8b:54:85:c2:5e:d7:29:20:ed:92:d1:b4:e1:
41:a2:d9:d9:5e:cc:8d:99:14:a5:e7:43:ff:44:c0:
5f:e0:ee:f6:67:bf:be:f2:31:f2:c5:cc:3d:30:4f:
a5:0e:f3:c9:df:3d:03:7a:43:6b:19:86:58:c7:40:
d5:fa:9b:92:60:4b:2a:c5:d9:ca:fb:16:7b:90:af:
3d:6f:ec:f1:9d:36:04:87:d5:95:88:d3:e9:f5:32:
a3:8d:1f:d4:ee:ba:e6:0a:c5:c6:a8:16:9d:0a:b5:
48:63:b0:e6:81:ec:67:46:ae:0e:f1:ac:e8:6c:32:
1e:6f:4a:ab:a3:66:3a:73:d1:1e:e7:f1:ed:50:20:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FA:A1:EC:AD:EF:07:14:AF:B3:6B:BF:05:E9:71:2A:D9:97:70:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd7cfd46-3472-3755-be55-831cf1d1dfac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.95.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:87:7a:a3:7b:a4:a4:c5:c5:be:35:ff:b8:91:14:9f:5f:44:
b3:69:79:ab:88:21:72:fb:27:0f:21:ec:f9:a2:02:fe:cd:6f:
04:0c:3c:8d:2a:97:c4:4a:1e:7f:94:1f:8c:d6:67:77:ad:29:
24:d7:35:5a:f4:1b:4e:c6:58:71:c7:38:f0:83:29:bd:9c:29:
d4:19:cf:ca:b7:ed:56:47:85:c7:3c:17:94:a2:ba:9b:d0:4a:
95:f2:0e:06:67:8a:95:a1:29:3b:1d:4a:2a:05:fd:f7:9a:38:
43:00:1b:40:94:16:6d:d3:0f:93:1d:ff:0f:c2:87:66:34:6e:
53:5a:de:ec:01:84:7b:d7:0f:9e:5b:b6:29:3f:01:95:44:ba:
4a:b7:66:8d:34:99:97:12:f7:14:7e:00:0c:2f:86:79:0f:9a:
2f:64:6a:d3:81:e8:fc:1a:d5:07:89:94:b2:1d:2a:09:6a:9d:
6c:04:f7:f5:d0:71:1c:4b:81:53:a3:4b:49:5b:0d:c1:f7:2b:
7b:03:90:00:e8:3b:8d:52:51:cc:64:65:1c:ec:c9:dd:10:68:
3e:b1:01:c8:f1:5f:38:63:cf:85:68:00:b7:74:92:2c:d8:9f:
92:d4:d3:35:2f:0b:c8:b0:b8:48:0c:38:24:21:9e:2e:5e:92:
dd:03:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:30:21 2025 by rpki-client