Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00668f83-3533-336f-8c67-4b2489da12f8.roa
File: 00668f83-3533-336f-8c67-4b2489da12f8.roa (raw, json)
Hash identifier: iJqNzJCa8fymVPfmlRzzxdUTDfS+8qYZt9LCWWSXaXI=
Subject key identifier: 84:67:30:9F:4E:C5:F6:65:1F:DB:0E:F2:1C:9C:23:D9:04:21:28:DC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EFB521BA1A94250A643780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00668f83-3533-336f-8c67-4b2489da12f8.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.88.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:b5:21:ba:1a:94:25:0a:64:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=87df3cb3-1d4b-4e08-85e1-e2da7789892f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:89:65:36:3c:6b:6b:d8:d5:31:03:b9:96:
dc:ea:79:25:09:65:08:54:e3:a3:ad:9d:06:6f:b8:
db:ed:7b:40:e3:2b:3c:86:4a:b3:15:47:58:56:36:
4b:f7:d1:cb:bc:7e:06:07:5f:65:16:63:d0:ae:b8:
36:5d:cf:52:18:62:2d:ec:53:c6:05:96:43:e0:0d:
69:21:ac:fb:bc:f5:f4:ee:22:76:ca:15:f7:16:8f:
ac:03:b1:b3:7f:00:1b:76:c4:93:bd:fe:af:33:b1:
78:13:bd:8f:6b:21:b5:e0:73:16:0c:0b:58:4d:b4:
25:32:0a:ae:54:c6:0f:4c:01:1e:38:ad:f8:4c:b2:
3e:7c:bd:49:8a:1c:8c:a8:12:ac:2d:d4:c7:68:01:
de:2e:32:64:15:bb:42:24:c6:49:63:6e:c6:0c:a4:
17:2d:76:24:e0:da:67:fa:3a:ab:38:94:ce:09:26:
81:31:ac:1c:1e:dc:e4:c0:d9:cd:09:f7:50:b5:da:
de:00:a6:71:82:a2:24:ba:f5:c8:3a:3c:22:86:88:
8b:9c:13:2a:59:02:e3:ef:dd:de:77:be:4f:80:02:
96:48:89:a0:7f:94:7a:48:84:d2:62:9e:84:1b:a4:
46:27:d4:41:63:8d:68:6b:bb:bf:7b:40:7a:a5:b4:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:67:30:9F:4E:C5:F6:65:1F:DB:0E:F2:1C:9C:23:D9:04:21:28:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00668f83-3533-336f-8c67-4b2489da12f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.88.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d9:6b:f9:d1:91:ef:53:a4:c0:9e:2b:79:0c:0c:2b:20:92:
1e:0c:e7:03:03:81:4a:e1:07:35:08:62:d3:1e:22:e3:a8:8c:
b9:f1:a8:31:2e:af:12:a4:60:53:d0:1f:88:b9:47:3c:02:78:
cc:59:8c:c7:b9:28:4e:33:0e:a8:41:05:3d:65:cd:bd:20:c7:
89:02:63:c3:a8:5e:e3:75:77:8c:af:d9:cd:d7:bf:be:4b:d8:
3f:0a:07:74:33:76:eb:ce:c5:b5:37:78:fc:e1:1f:cb:ab:9f:
78:85:f5:56:03:31:3b:9a:6b:33:86:7a:b1:43:c8:86:1e:f7:
d4:92:80:22:bd:4a:73:4c:aa:84:c1:f8:84:21:44:79:fc:38:
e2:47:50:01:63:5c:0e:96:a3:05:84:fa:4b:83:d2:84:b6:6a:
31:54:15:32:fb:bf:d4:25:34:08:df:53:60:a1:01:ec:97:09:
46:ce:3e:78:86:28:ce:27:97:03:d3:d3:c0:2e:f9:9c:89:6d:
a1:0b:fe:43:05:ae:fd:ff:fe:20:f0:67:60:46:91:c3:76:51:
f3:c7:e0:ba:3e:bb:c3:65:e6:5b:e3:cf:1a:bd:d5:fa:d6:c0:
16:02:81:ae:79:ea:94:a2:47:6f:2d:a8:5c:22:b6:c7:fe:37:
1a:f3:d9:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ77UhuhqUJQpkN4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODdkZjNjYjMtMWQ0Yi00ZTA4LTg1ZTEtZTJkYTc3ODk4OTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmWJZTY8a2vY1TEDuZbc6nklCWUIVOOjrZ0G
b7jb7XtA4ys8hkqzFUdYVjZL99HLvH4GB19lFmPQrrg2Xc9SGGIt7FPGBZZD4A1p
Iaz7vPX07iJ2yhX3Fo+sA7GzfwAbdsSTvf6vM7F4E72PayG14HMWDAtYTbQlMgqu
VMYPTAEeOK34TLI+fL1JihyMqBKsLdTHaAHeLjJkFbtCJMZJY27GDKQXLXYk4Npn
+jqrOJTOCSaBMawcHtzkwNnNCfdQtdreAKZxgqIkuvXIOjwihoiLnBMqWQLj793e
d75PgAKWSImgf5R6SITSYp6EG6RGJ9RBY41oa7u/e0B6pbTtbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRnMJ9OxfZlH9sO8hycI9kEISjcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDA2NjhmODMtMzUzMy0z
MzZmLThjNjctNGIyNDg5ZGExMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlhwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3Za/nRke9TpMCeK3kMDCsgkh4M5wMDgUrhBzUIYtMeIuOojLnxqDEu
rxKkYFPQH4i5RzwCeMxZjMe5KE4zDqhBBT1lzb0gx4kCY8OoXuN1d4yv2c3Xv75L
2D8KB3QzduvOxbU3ePzhH8urn3iF9VYDMTuaazOGerFDyIYe99SSgCK9SnNMqoTB
+IQhRHn8OOJHUAFjXA6WowWE+kuD0oS2ajFUFTL7v9QlNAjfU2ChAeyXCUbOPniG
KM4nlwPT08Au+ZyJbaEL/kMFrv3//iDwZ2BGkcN2UfPH4Lo+u8Nl5lvjzxq91frW
wBYCga556pSiR28tqFwitsf+Nxrz2RU=
-----END CERTIFICATE-----
Generated at Sat May 10 12:24:11 2025 by rpki-client