Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19871fbb-28d8-3885-b752-5b1abd3c781e.roa
File: 19871fbb-28d8-3885-b752-5b1abd3c781e.roa (raw, json)
Hash identifier: SX2U+2WmG12n4RxlbQYsfXlUUT7rCMZOPoOLuyVzrLU=
Subject key identifier: 85:76:B5:A6:81:E6:F3:F5:F7:A8:45:DC:AD:D4:84:1F:14:DA:53:8B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1372E6725AABE4CE57F180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19871fbb-28d8-3885-b752-5b1abd3c781e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.104.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:13:72:e6:72:5a:ab:e4:ce:57:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=10ad3593-8bee-40c6-8200-d2a7256352ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b2:00:54:70:39:81:b7:ff:24:eb:c8:4b:8e:
ce:ec:5d:7d:1b:0f:83:eb:b9:a9:c2:9e:01:60:e6:
5e:d0:d7:ad:4f:7c:ca:84:3c:7c:05:e0:28:c6:16:
31:80:83:40:6c:7f:8a:9d:6c:45:e5:78:2b:12:4b:
6f:09:24:8a:c3:33:21:fb:43:94:6d:02:a7:c3:1e:
87:a4:f5:0c:1e:d1:bb:d0:e5:6f:00:63:fd:f7:5e:
dc:59:87:6f:1d:f3:c7:ca:d6:f2:96:0b:9f:38:0d:
9c:b0:b1:58:b9:69:3b:04:7c:97:3a:d2:32:9b:02:
1c:db:0b:55:8a:e2:8d:0d:80:5e:7f:e5:e3:2a:cb:
2b:8d:ea:a8:48:7b:98:97:2c:d1:09:19:0b:ab:dd:
21:8d:d2:29:64:ba:78:ed:07:3b:f1:8d:35:d9:34:
fe:c9:15:26:23:f7:1d:16:28:88:81:7f:6a:65:28:
7b:99:b0:d4:ac:4b:28:a0:41:3e:07:d5:98:80:0a:
db:71:97:5a:7e:8f:75:68:28:99:5d:52:2d:bf:68:
ec:00:04:ed:45:01:8c:97:56:d4:24:39:ac:2b:1e:
cc:fd:61:c7:b9:7a:e8:48:09:3c:f3:9d:de:de:9e:
19:d9:29:93:ea:8c:3e:39:b1:47:42:e7:c2:6f:e4:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:76:B5:A6:81:E6:F3:F5:F7:A8:45:DC:AD:D4:84:1F:14:DA:53:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/19871fbb-28d8-3885-b752-5b1abd3c781e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:e2:cc:63:20:90:72:75:ab:f2:34:8e:e8:14:6e:5a:5e:66:
b5:cb:80:94:93:86:b1:a0:80:a0:b8:2c:82:b7:a4:e9:e7:de:
53:bd:0d:bf:bb:7d:25:6d:2e:0c:98:6c:0f:77:8f:bb:9e:31:
dd:47:80:c5:05:ed:fb:62:c0:70:ae:8b:92:98:d0:8a:fe:4d:
15:8e:4b:16:9a:a2:5a:c6:78:51:9e:1d:46:06:23:43:bf:1b:
b6:d0:68:b5:08:68:a4:18:e9:b4:ae:3e:d1:a5:95:0e:10:aa:
df:f5:ea:6a:18:6b:5d:0b:f5:5b:29:63:7c:c4:80:16:82:81:
fb:f8:c6:dc:77:6b:7c:a0:f2:10:1c:c9:7c:ed:6a:3d:46:c8:
6a:ac:3c:dd:2c:ed:07:0c:89:b9:ca:09:3b:9b:a7:0f:5a:c4:
f8:f3:d4:7c:a3:6a:cb:b8:06:b0:59:c3:eb:e0:f1:07:10:5d:
76:9a:71:ab:40:2e:b3:44:af:22:f0:3e:20:b0:e6:0e:5e:48:
dc:27:73:10:c4:8c:e3:6f:11:99:45:0a:c7:9a:f9:90:5f:86:
31:fa:22:36:de:0c:9d:4c:cf:55:2e:75:f7:b9:77:bf:7d:11:
6b:4b:e5:67:40:51:a4:0c:ef:00:08:2a:17:7e:b3:e1:46:d2:
ee:88:be:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKE3Lmclqr5M5X8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTBhZDM1OTMtOGJlZS00MGM2LTgyMDAtZDJhNzI1NjM1MmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37IAVHA5gbf/JOvIS47O7F19Gw+D67mpwp4B
YOZe0NetT3zKhDx8BeAoxhYxgINAbH+KnWxF5XgrEktvCSSKwzMh+0OUbQKnwx6H
pPUMHtG70OVvAGP9917cWYdvHfPHytbylgufOA2csLFYuWk7BHyXOtIymwIc2wtV
iuKNDYBef+XjKssrjeqoSHuYlyzRCRkLq90hjdIpZLp47Qc78Y012TT+yRUmI/cd
FiiIgX9qZSh7mbDUrEsooEE+B9WYgArbcZdafo91aCiZXVItv2jsAATtRQGMl1bU
JDmsKx7M/WHHuXroSAk8853e3p4Z2SmT6ow+ObFHQufCb+TqSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIV2taaB5vP196hF3K3UhB8U2lOLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTk4NzFmYmItMjhkOC0z
ODg1LWI3NTItNWIxYWJkM2M3ODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImigMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzizGMgkHJ1q/I0jugUblpeZrXLgJSThrGggKC4LIK3pOnn3lO9Db+7
fSVtLgyYbA93j7ueMd1HgMUF7ftiwHCui5KY0Ir+TRWOSxaaolrGeFGeHUYGI0O/
G7bQaLUIaKQY6bSuPtGllQ4Qqt/16moYa10L9VspY3zEgBaCgfv4xtx3a3yg8hAc
yXztaj1GyGqsPN0s7QcMibnKCTubpw9axPjz1Hyjasu4BrBZw+vg8QcQXXaacatA
LrNEryLwPiCw5g5eSNwncxDEjONvEZlFCsea+ZBfhjH6IjbeDJ1Mz1Uudfe5d799
EWtL5WdAUaQM7wAIKhd+s+FG0u6IviM=
-----END CERTIFICATE-----
Generated at Sun May 11 15:55:43 2025 by rpki-client