Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b51e02f-827c-36fc-8d97-b80193218267.roa
File: 0b51e02f-827c-36fc-8d97-b80193218267.roa (raw, json)
Hash identifier: iBccb0/3LAJHeanWACJj/ogPOw+DDYuhlUVPRjL4FJM=
Subject key identifier: A2:FD:FE:22:58:A6:14:56:8C:F3:AB:45:70:2C:F3:91:CF:D4:FA:3C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A76288F5C6962C415F400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b51e02f-827c-36fc-8d97-b80193218267.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.156.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:76:28:8f:5c:69:62:c4:15:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=d9cf351e-f949-49e5-ad03-bd9ec7e2f5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0c:5a:a6:a7:5d:cb:87:f6:a2:d3:32:ea:24:
a1:df:b8:c1:b8:59:cd:ec:10:b6:c1:0c:7a:8d:b5:
05:af:21:e1:35:48:bf:f7:f5:db:d0:82:eb:f7:a8:
23:5a:17:0f:1a:ec:20:2a:9c:7f:f9:27:d1:14:1e:
8b:41:80:04:3b:8e:73:0b:b7:74:68:e5:79:58:68:
a6:88:f5:81:a8:e0:a0:c5:8f:ce:da:01:1e:ec:4e:
be:d8:00:7c:33:36:3b:82:8f:b5:c0:60:18:96:70:
c2:07:e0:36:63:46:e2:3c:bf:18:3c:37:cc:7f:6e:
79:e1:9a:b9:4b:52:ba:47:d5:f5:22:69:b1:32:e0:
70:6b:50:01:4d:b5:e3:29:fb:29:b5:ac:76:fe:ea:
b1:c2:c3:55:ea:8f:e5:c8:8f:c8:48:b2:83:35:ad:
e3:c5:10:18:a2:31:7f:d0:2f:fa:ed:be:a7:ad:ca:
03:ea:e1:17:f7:74:b9:66:88:23:e8:c5:26:a0:55:
3f:eb:29:23:55:c2:35:f2:b5:e0:a0:7a:f3:a5:91:
cc:26:55:8f:73:36:a6:1c:d0:d7:47:1a:cc:f7:9f:
a2:4b:aa:95:a3:4f:c8:e1:85:8a:48:b8:00:8e:62:
f7:03:23:dc:ed:ce:c1:1d:11:e3:3a:18:a6:e9:87:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FD:FE:22:58:A6:14:56:8C:F3:AB:45:70:2C:F3:91:CF:D4:FA:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b51e02f-827c-36fc-8d97-b80193218267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.156.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:9d:a3:86:34:14:f8:37:5d:e6:35:1d:ee:9b:9a:c0:bb:89:
b4:2e:af:52:35:83:64:56:db:71:5f:00:52:bf:2e:29:a4:bd:
28:2f:8d:96:9b:b4:69:48:fb:ea:23:3f:45:8b:7b:93:02:ba:
9a:aa:f1:16:1d:bd:56:f7:5a:02:e8:ab:6d:50:b5:08:e6:40:
8f:8a:d3:16:4d:93:a4:9c:2e:6e:b1:59:54:f8:bf:1b:13:08:
72:42:3f:b8:41:c7:46:a5:e0:61:3d:dd:47:c0:9b:30:53:f1:
bc:fd:ce:9e:7b:ea:86:e1:30:76:68:52:4f:b3:0f:74:70:0d:
a8:e6:6e:cd:7a:1c:26:e2:40:a4:68:0a:d7:63:06:5e:84:c0:
38:32:49:d3:4b:c1:0f:e7:1c:13:28:51:eb:46:c5:4f:45:6e:
53:03:b2:5f:26:d1:bd:71:3d:33:4b:ff:b4:57:74:01:4c:c2:
6b:e0:11:65:fc:d2:23:6f:a1:62:97:b8:37:e9:78:e4:da:c9:
17:a1:3b:d4:eb:a1:40:49:8d:20:27:0f:3d:d7:03:f4:e8:5f:
91:b8:46:ca:07:95:09:5c:6b:8e:95:fd:1e:9c:fa:53:14:93:
6a:86:88:24:38:93:1f:e1:4f:46:38:c9:8f:4d:b4:9f:4a:c7:
15:8b:84:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SnYoj1xpYsQV9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
ZDljZjM1MWUtZjk0OS00OWU1LWFkMDMtYmQ5ZWM3ZTJmNWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gxapqddy4f2otMy6iSh37jBuFnN7BC2wQx6
jbUFryHhNUi/9/Xb0ILr96gjWhcPGuwgKpx/+SfRFB6LQYAEO45zC7d0aOV5WGim
iPWBqOCgxY/O2gEe7E6+2AB8MzY7go+1wGAYlnDCB+A2Y0biPL8YPDfMf2554Zq5
S1K6R9X1ImmxMuBwa1ABTbXjKfsptax2/uqxwsNV6o/lyI/ISLKDNa3jxRAYojF/
0C/67b6nrcoD6uEX93S5Zogj6MUmoFU/6ykjVcI18rXgoHrzpZHMJlWPczamHNDX
RxrM95+iS6qVo0/I4YWKSLgAjmL3AyPc7c7BHRHjOhim6YfCHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKL9/iJYphRWjPOrRXAs85HP1Po8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGI1MWUwMmYtODI3Yy0z
NmZjLThkOTctYjgwMTkzMjE4MjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICdo4Y0FPg3XeY1He6bmsC7ibQur1I1g2RW23FfAFK/LimkvSgvjZab
tGlI++ojP0WLe5MCupqq8RYdvVb3WgLoq21QtQjmQI+K0xZNk6ScLm6xWVT4vxsT
CHJCP7hBx0al4GE93UfAmzBT8bz9zp576obhMHZoUk+zD3RwDajmbs16HCbiQKRo
CtdjBl6EwDgySdNLwQ/nHBMoUetGxU9FblMDsl8m0b1xPTNL/7RXdAFMwmvgEWX8
0iNvoWKXuDfpeOTayRehO9TroUBJjSAnDz3XA/ToX5G4RsoHlQlca46V/R6c+lMU
k2qGiCQ4kx/hT0Y4yY9NtJ9KxxWLhPg=
-----END CERTIFICATE-----
Generated at Sat May 10 14:14:37 2025 by rpki-client