Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/179c046e-2c4d-31a5-a1d2-9bd9166b861a.roa
File: 179c046e-2c4d-31a5-a1d2-9bd9166b861a.roa (raw, json)
Hash identifier: uchJ/EQxamU5pshgGRR2HyMPjCARXAD7Huz8fkMcQGo=
Subject key identifier: CD:23:23:32:46:1A:B1:0E:63:CD:A9:9A:B1:C1:88:74:EB:AA:57:DA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B140FC621626E0BB8F5E58
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/179c046e-2c4d-31a5-a1d2-9bd9166b861a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.137.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b1:40:fc:62:16:26:e0:bb:8f:5e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=abc13d4c-e07e-46f4-ac8f-8352dceaf050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:3f:88:da:9c:ff:f7:6b:0d:dc:84:5e:21:
76:79:9e:4a:90:d0:8a:66:44:0e:ee:68:cb:91:84:
cb:3d:34:30:46:b1:e1:cd:11:d2:e5:13:eb:8e:e0:
cb:21:84:3a:6f:f9:b4:48:70:d6:a0:fd:81:46:0d:
b8:31:ac:67:08:e4:d3:d7:85:32:02:d0:5e:6a:f0:
5e:b8:22:3d:af:d6:1f:72:73:5b:f4:5f:64:94:a2:
94:40:59:96:44:38:de:65:ce:b4:ef:e6:d9:a5:7b:
c8:b2:6d:5e:09:da:28:d5:f0:b3:3a:91:6f:72:48:
c3:b6:c5:a5:52:97:a5:d3:94:30:e0:47:bc:af:b9:
05:b1:3f:91:fa:8f:fe:66:af:5b:12:b9:61:77:cf:
34:63:9a:49:34:11:c6:26:25:50:df:63:e5:bc:41:
ea:09:12:aa:9e:6a:96:73:9b:ea:4e:6d:6c:de:7f:
bc:d3:77:0b:20:69:11:de:72:12:50:79:10:84:d5:
f9:93:d2:d9:2c:a2:48:0a:aa:98:60:85:cb:e3:51:
48:a3:8f:ce:3c:d8:0f:ee:0e:b3:b2:85:64:f4:d7:
e0:f6:da:98:df:cc:2b:60:50:66:26:74:ae:b3:ab:
83:e6:8e:c9:d9:2b:58:e2:a8:b1:34:27:6c:29:71:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:23:23:32:46:1A:B1:0E:63:CD:A9:9A:B1:C1:88:74:EB:AA:57:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/179c046e-2c4d-31a5-a1d2-9bd9166b861a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:09:64:88:2a:8c:97:81:5e:1c:28:d3:91:bc:6f:14:e7:9f:
d6:c8:9b:36:f4:5f:14:47:3c:9c:d0:96:eb:92:02:b9:7f:81:
a5:fa:c8:77:02:88:79:5a:d1:9b:b0:b9:28:eb:5d:d8:53:3b:
fb:25:29:d4:71:c3:92:8d:ff:a1:88:29:cf:4a:f8:0c:d1:a6:
c2:25:0f:58:91:b3:b1:57:06:bb:39:80:14:fe:b4:68:81:cf:
f6:1e:b2:4d:86:b8:13:7b:b3:86:4a:d2:9d:15:53:83:77:ba:
7b:ff:28:3c:84:13:24:fa:cb:15:81:6a:b0:a2:6d:cd:2f:76:
3b:6f:9c:7c:60:86:b7:59:97:7b:6f:80:14:e3:ea:6c:8a:da:
cd:1c:ad:2d:e7:ce:3b:72:94:48:d4:74:9d:a9:4e:7c:79:2f:
e7:7d:55:28:f0:7f:6e:44:7e:71:c5:17:dd:77:5c:cb:84:b0:
aa:b3:1a:72:62:71:9a:01:69:5b:2c:98:e2:94:1f:ea:93:2f:
23:48:99:82:cd:3f:21:47:e7:4c:4c:a2:51:b7:f9:b7:32:83:
40:2f:88:81:61:b4:89:ef:fe:ce:d3:3a:c0:e1:4b:89:28:13:
0e:d5:c5:c4:19:3b:fd:16:27:0e:f9:a8:f5:ce:87:12:6a:4c:
0e:4b:fc:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnsUD8YhYm4LuPXlgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YWJjMTNkNGMtZTA3ZS00NmY0LWFjOGYtODM1MmRjZWFmMDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRw/iNqc//drDdyEXiF2eZ5KkNCKZkQO7mjL
kYTLPTQwRrHhzRHS5RPrjuDLIYQ6b/m0SHDWoP2BRg24MaxnCOTT14UyAtBeavBe
uCI9r9YfcnNb9F9klKKUQFmWRDjeZc607+bZpXvIsm1eCdoo1fCzOpFvckjDtsWl
Upel05Qw4Ee8r7kFsT+R+o/+Zq9bErlhd880Y5pJNBHGJiVQ32PlvEHqCRKqnmqW
c5vqTm1s3n+803cLIGkR3nISUHkQhNX5k9LZLKJICqqYYIXL41FIo4/OPNgP7g6z
soVk9Nfg9tqY38wrYFBmJnSus6uD5o7J2StY4qixNCdsKXFtDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM0jIzJGGrEOY82pmrHBiHTrqlfaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTc5YzA0NmUtMmM0ZC0z
MWE1LWExZDItOWJkOTE2NmI4NjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIonQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQJZIgqjJeBXhwo05G8bxTnn9bImzb0XxRHPJzQluuSArl/gaX6yHcC
iHla0ZuwuSjrXdhTO/slKdRxw5KN/6GIKc9K+AzRpsIlD1iRs7FXBrs5gBT+tGiB
z/Yesk2GuBN7s4ZK0p0VU4N3unv/KDyEEyT6yxWBarCibc0vdjtvnHxghrdZl3tv
gBTj6myK2s0crS3nzjtylEjUdJ2pTnx5L+d9VSjwf25EfnHFF913XMuEsKqzGnJi
cZoBaVssmOKUH+qTLyNImYLNPyFH50xMolG3+bcyg0AviIFhtInv/s7TOsDhS4ko
Ew7VxcQZO/0WJw75qPXOhxJqTA5L/Bs=
-----END CERTIFICATE-----
Generated at Sat May 10 14:39:00 2025 by rpki-client