Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a7f1787-0dda-3632-bd55-42925a03b0be.roa
File: 0a7f1787-0dda-3632-bd55-42925a03b0be.roa (raw, json)
Hash identifier: 3XT9SA5oi/R3peLQlaT5qGChWBWawpp5ocpgk/gNF1g=
Subject key identifier: 22:C1:BA:1B:63:BA:AA:03:DC:0D:7C:37:89:5E:4F:F7:DF:D7:FE:4A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B98E3C75C4338B15DC2C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a7f1787-0dda-3632-bd55-42925a03b0be.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.105.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b9:8e:3c:75:c4:33:8b:15:dc:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=7646cc9d-b978-435e-b563-daebc6b1977e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:eb:fd:a4:a4:16:96:9b:ef:ad:f0:60:69:
20:70:c9:fd:01:7b:0d:b9:55:6a:46:e3:0b:38:b2:
64:72:e8:13:4f:4c:aa:a5:6c:a8:40:bd:ff:07:de:
8a:32:0f:da:75:99:de:d7:d6:d3:e9:8f:6e:3d:d9:
88:1f:86:04:9d:b5:e8:00:fb:b4:4a:fa:6b:5c:20:
52:a0:51:58:0a:56:9a:68:66:71:5f:6f:4b:f3:a6:
5b:bf:99:60:80:7e:0a:a0:39:7f:bc:c3:af:a3:c7:
39:71:2d:89:f4:7a:0a:e8:9a:38:e8:4c:36:3f:11:
67:bd:66:69:d9:78:fc:e3:7b:70:5d:c4:c0:9b:44:
c6:16:d0:cb:19:1c:08:f0:bb:f2:43:6b:56:43:fa:
8b:8e:9e:30:47:1c:84:32:32:a4:85:5d:60:d2:52:
3e:ac:5f:13:5c:4b:c3:3b:1e:80:84:cb:64:58:17:
61:25:a3:03:a4:45:ca:ed:72:6f:72:67:ba:47:7e:
ab:65:a4:07:70:54:c8:af:5b:9d:50:2e:ba:88:ba:
e3:3a:c4:ef:f8:db:f9:78:3f:76:e7:e4:00:b4:6e:
ad:4b:f5:d3:f1:58:6b:60:a6:b2:8c:8c:41:c4:2d:
e2:01:e9:d2:f4:ed:12:db:c9:0d:93:5f:b5:c3:9e:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C1:BA:1B:63:BA:AA:03:DC:0D:7C:37:89:5E:4F:F7:DF:D7:FE:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a7f1787-0dda-3632-bd55-42925a03b0be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.105.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:c1:b2:a2:56:a1:67:3c:cb:42:a8:dc:cf:50:9c:0e:3a:0e:
c2:f1:b4:a2:64:28:10:19:2a:d0:49:e2:3e:80:c8:ac:d6:ca:
46:50:ae:7e:20:b8:98:38:bc:88:0c:b6:36:23:77:b6:38:1c:
3f:9b:06:90:20:68:91:fc:80:d2:6e:f5:e8:2d:4b:d9:21:08:
15:80:be:29:f8:48:6c:05:c2:88:51:ab:37:21:ba:cb:d0:62:
1e:01:ed:00:38:34:0c:1f:f3:8c:36:b7:f5:ff:2e:ae:7a:7b:
53:db:6b:5a:92:0d:fe:a5:28:11:69:2d:21:e9:05:4f:5e:b5:
bf:38:63:33:27:e0:62:d8:65:45:b4:f2:a1:8e:cd:fa:b0:8b:
8a:ba:e9:9e:96:72:f2:01:42:30:2e:ff:a9:6c:75:cb:79:f1:
7e:b5:32:38:f7:a3:3a:75:48:db:90:d0:a6:7d:6d:6c:5f:3e:
22:1d:e8:75:02:af:ba:14:54:ff:23:71:2a:ef:08:de:72:a2:
9c:6f:4a:b0:15:cf:4a:ea:02:4e:53:2e:be:a8:6d:33:55:2e:
32:2c:09:0c:e3:f9:4f:c3:f0:44:32:23:85:c8:7f:dc:88:77:
0d:9a:44:ec:4b:d3:96:29:90:0d:86:c5:e6:0b:88:01:cb:bc:
94:c2:c8:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnuY48dcQzixXcLIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NzY0NmNjOWQtYjk3OC00MzVlLWI1NjMtZGFlYmM2YjE5NzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtvr/aSkFpab763wYGkgcMn9AXsNuVVqRuML
OLJkcugTT0yqpWyoQL3/B96KMg/adZne19bT6Y9uPdmIH4YEnbXoAPu0SvprXCBS
oFFYClaaaGZxX29L86Zbv5lggH4KoDl/vMOvo8c5cS2J9HoK6Jo46Ew2PxFnvWZp
2Xj843twXcTAm0TGFtDLGRwI8LvyQ2tWQ/qLjp4wRxyEMjKkhV1g0lI+rF8TXEvD
Ox6AhMtkWBdhJaMDpEXK7XJvcme6R36rZaQHcFTIr1udUC66iLrjOsTv+Nv5eD92
5+QAtG6tS/XT8VhrYKayjIxBxC3iAenS9O0S28kNk1+1w57wzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLBuhtjuqoD3A18N4leT/ff1/5KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGE3ZjE3ODctMGRkYS0z
NjMyLWJkNTUtNDI5MjVhMDNiMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImlgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/BsqJWoWc8y0Ko3M9QnA46DsLxtKJkKBAZKtBJ4j6AyKzWykZQrn4g
uJg4vIgMtjYjd7Y4HD+bBpAgaJH8gNJu9egtS9khCBWAvin4SGwFwohRqzchusvQ
Yh4B7QA4NAwf84w2t/X/Lq56e1Pba1qSDf6lKBFpLSHpBU9etb84YzMn4GLYZUW0
8qGOzfqwi4q66Z6WcvIBQjAu/6lsdct58X61Mjj3ozp1SNuQ0KZ9bWxfPiId6HUC
r7oUVP8jcSrvCN5yopxvSrAVz0rqAk5TLr6obTNVLjIsCQzj+U/D8EQyI4XIf9yI
dw2aROxL05YpkA2GxeYLiAHLvJTCyNM=
-----END CERTIFICATE-----
Generated at Sun May 11 15:51:05 2025 by rpki-client