Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16c7899b-f99f-35a0-be82-08dd8e3cb28f.roa
File: 16c7899b-f99f-35a0-be82-08dd8e3cb28f.roa (raw, json)
Hash identifier: XfLswT3vA96+L31nO+O3IVFG0GhW+7OMvZYu7D2rPwE=
Subject key identifier: 19:90:F1:C2:90:3E:96:E4:A9:9B:C7:D2:93:49:CB:80:73:02:CE:A2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285840D05986FF927ABFD63D4C5780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16c7899b-f99f-35a0-be82-08dd8e3cb28f.roa
Signing time: Sat 04 Feb 2023 12:00:00 +0000
ROA not before: Sat 04 Feb 2023 12:00:00 +0000
ROA not after: Fri 09 May 2025 04:00:00 +0000
asID: 396982
IP address blocks: 34.32.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d0:59:86:ff:92:7a:bf:d6:3d:4c:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 12:00:00 2023 GMT
Not After : May 9 04:00:00 2025 GMT
Subject: CN=4d8b795f-979a-4f9a-979a-72fab74ad7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:d7:08:c4:ac:e6:cb:26:81:95:23:16:20:
8e:28:de:a5:ab:23:74:28:09:48:08:15:11:55:85:
19:e3:41:49:54:89:aa:cf:2d:5c:c1:79:07:80:a6:
76:78:57:cb:17:19:d7:54:c8:ba:66:93:7e:45:c8:
44:75:fb:0c:1b:ab:54:04:19:2c:80:de:98:d2:f8:
32:de:b2:5d:9d:18:4c:6e:53:ef:8b:e8:8b:84:d3:
6e:41:1f:f2:43:11:60:df:d2:23:43:bf:38:95:00:
b2:82:2e:1b:71:48:17:e9:13:5d:f1:67:96:df:15:
cd:f3:b7:2f:99:0e:7a:b4:99:54:53:5f:e6:45:a8:
9d:aa:51:77:ab:74:f5:18:9c:c9:6f:00:55:45:b7:
6a:ce:4d:e3:d0:f9:2e:c0:11:48:f8:6b:8e:cf:fd:
03:2b:17:f0:a6:89:f2:fe:03:a2:75:2a:e1:2f:bc:
91:81:34:f9:b0:5a:08:a5:56:72:a9:a2:58:26:42:
a6:fa:92:d5:23:d0:ed:1f:eb:42:9d:a5:07:ad:64:
5e:ad:96:b4:3b:19:ec:17:12:e9:81:a7:83:85:92:
58:d9:80:15:d2:3a:51:47:5d:b2:42:fe:2a:0a:b3:
b2:a6:8d:7f:aa:5f:e1:06:63:6f:00:d6:1b:79:0e:
c3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:90:F1:C2:90:3E:96:E4:A9:9B:C7:D2:93:49:CB:80:73:02:CE:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16c7899b-f99f-35a0-be82-08dd8e3cb28f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.32.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:fe:2e:5c:a4:64:c1:6e:08:89:e4:60:09:42:48:fd:06:e9:
c5:d3:bd:63:9f:8e:82:90:de:c2:24:13:44:05:98:17:28:4d:
11:ed:36:c2:d0:70:36:35:c7:2a:33:1b:32:b2:d5:0e:51:65:
4a:81:d0:ab:49:4a:cf:23:12:e1:35:d4:61:3c:0a:cf:54:58:
5d:06:27:ff:b5:31:61:b0:fd:34:d1:05:6f:da:38:ff:17:18:
58:0a:60:75:a9:e2:8e:92:7c:81:46:de:f6:89:6e:f1:d6:1d:
44:de:2b:71:3a:0c:6c:36:a1:9b:9a:41:3c:29:48:39:b9:91:
17:a7:7a:27:44:a1:78:a1:5b:6d:f2:f8:0f:ad:5c:fc:b7:90:
91:62:51:27:d7:24:d1:b3:ea:c6:e6:3b:4a:ae:67:24:44:41:
f1:a8:31:d8:74:d7:2d:59:0a:0f:a8:05:f3:ce:65:16:63:99:
2e:98:9f:ba:95:ec:9e:6f:53:65:27:29:93:dd:39:3d:e0:02:
61:52:b4:7d:c9:1a:f7:62:1d:17:76:a0:c2:79:f1:f2:77:8f:
58:36:fe:73:77:52:13:98:1b:0a:2f:2a:7f:61:90:c7:44:79:
a3:5a:e1:41:64:c1:ec:5c:82:76:dd:99:41:8f:7b:3b:32:0f:
be:be:72:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDQWYb/knq/1j1MV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDIwNDEyMDAwMFoXDTI1MDUwOTA0MDAwMFowLzEtMCsGA1UEAxMk
NGQ4Yjc5NWYtOTc5YS00ZjlhLTk3OWEtNzJmYWI3NGFkN2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHPXCMSs5ssmgZUjFiCOKN6lqyN0KAlICBUR
VYUZ40FJVImqzy1cwXkHgKZ2eFfLFxnXVMi6ZpN+RchEdfsMG6tUBBksgN6Y0vgy
3rJdnRhMblPvi+iLhNNuQR/yQxFg39IjQ784lQCygi4bcUgX6RNd8WeW3xXN87cv
mQ56tJlUU1/mRaidqlF3q3T1GJzJbwBVRbdqzk3j0PkuwBFI+GuOz/0DKxfwpony
/gOidSrhL7yRgTT5sFoIpVZyqaJYJkKm+pLVI9DtH+tCnaUHrWRerZa0OxnsFxLp
gaeDhZJY2YAV0jpRR12yQv4qCrOypo1/ql/hBmNvANYbeQ7DwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBmQ8cKQPpbkqZvH0pNJy4BzAs6iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTZjNzg5OWItZjk5Zi0z
NWEwLWJlODItMDhkZDhlM2NiMjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIiAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACX+LlykZMFuCInkYAlCSP0G6cXTvWOfjoKQ3sIkE0QFmBcoTRHtNsLQ
cDY1xyozGzKy1Q5RZUqB0KtJSs8jEuE11GE8Cs9UWF0GJ/+1MWGw/TTRBW/aOP8X
GFgKYHWp4o6SfIFG3vaJbvHWHUTeK3E6DGw2oZuaQTwpSDm5kReneidEoXihW23y
+A+tXPy3kJFiUSfXJNGz6sbmO0quZyREQfGoMdh01y1ZCg+oBfPOZRZjmS6Yn7qV
7J5vU2UnKZPdOT3gAmFStH3JGvdiHRd2oMJ58fJ3j1g2/nN3UhOYGwovKn9hkMdE
eaNa4UFkwexcgnbdmUGPezsyD76+ctc=
-----END CERTIFICATE-----
Generated at Sat May 10 11:27:37 2025 by rpki-client