Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d3fd7d9-01fb-395f-a260-1b6d15438466.roa
File: 1d3fd7d9-01fb-395f-a260-1b6d15438466.roa (raw, json)
Hash identifier: Hh9Jqnk3Es2fC8PO4jet6hhgZR0QVgFAKNLbjB3dMUs=
Subject key identifier: 1E:16:2B:BA:24:F4:FD:79:D1:71:82:CF:04:4F:88:9F:44:56:F5:BB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0357FEA8AC738DDC879E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d3fd7d9-01fb-395f-a260-1b6d15438466.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.137.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:03:57:fe:a8:ac:73:8d:dc:87:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6af95a92-8e20-44ad-be60-f5b23a93d0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:f6:80:b3:3b:8b:c2:9d:be:19:5f:e7:66:
43:63:22:f7:f9:33:3e:73:f2:8a:88:10:58:ad:09:
82:d3:23:04:21:fd:e5:77:e6:f9:e1:36:17:0f:c0:
39:da:0e:01:05:ac:c1:d3:bb:00:a4:93:dd:b9:a9:
c9:66:d6:b0:e3:70:2e:69:27:2c:08:c7:3c:e6:ef:
8e:b2:ab:69:c4:84:c8:d8:0a:14:87:ed:36:a9:c9:
74:6a:08:a9:eb:5e:77:e9:f9:fd:49:15:ea:7a:1f:
b7:92:4c:76:d8:4d:94:6d:1d:1a:3a:d7:34:c3:8a:
22:0a:50:2e:1f:c8:02:b1:04:cf:40:95:49:87:f7:
79:e0:aa:d2:71:a5:bf:86:10:39:be:00:ed:70:ee:
5d:f6:d0:26:1c:4c:e6:ac:a8:9f:a5:6a:07:b1:6b:
45:90:4c:e6:cf:1d:e9:3f:3a:d5:e6:ee:39:0c:e4:
4a:2c:d6:e5:1e:d8:e5:94:f3:c3:78:b4:c8:a4:4a:
af:b7:54:3d:91:0a:cc:2d:bf:c7:1a:4d:d5:f5:50:
59:1b:fd:3b:5d:98:e6:11:74:c9:e7:2e:cf:d2:70:
d7:9f:6a:2a:8d:ad:7e:2e:71:c6:95:ef:f1:bb:19:
0b:1f:92:92:02:2e:4d:5d:d6:ba:6a:1f:bb:21:fc:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:2B:BA:24:F4:FD:79:D1:71:82:CF:04:4F:88:9F:44:56:F5:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d3fd7d9-01fb-395f-a260-1b6d15438466.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:e8:2c:0c:f5:49:dc:c7:74:9c:54:65:0f:f3:27:48:26:7d:
b5:39:40:63:14:15:b9:b0:d3:87:86:00:b7:e3:8b:0f:5e:5f:
6b:b2:c9:38:e5:bb:be:f6:61:bc:ba:92:1e:fe:3a:e3:ae:42:
93:69:b3:3a:17:69:8c:94:3c:7b:83:3b:52:b4:2b:b3:b6:e5:
b9:bb:98:2e:1d:7a:27:c4:e8:a5:cd:b6:69:7c:5c:ce:9e:ec:
ac:0e:69:98:80:44:c7:c9:d2:13:d1:be:bf:15:cb:65:bc:16:
f5:a8:dd:c4:9a:d5:d9:b5:92:a2:2b:4e:66:1e:b2:6c:70:10:
2e:a4:25:c7:b2:a5:f8:c6:61:eb:df:d2:01:6f:5e:ae:b1:cf:
d9:31:47:78:7b:0f:17:db:24:2c:3e:52:f2:06:0b:4f:a2:c3:
14:b5:11:4f:eb:06:cc:4c:90:5e:fc:27:86:75:2f:33:8b:c2:
7a:67:7a:92:6c:cc:ca:f1:4b:fa:97:f7:62:d8:8e:f9:d1:b4:
51:2b:5f:a8:7b:66:cb:83:f9:3e:54:26:53:00:f6:4d:99:6a:
22:34:fc:dc:4c:e5:d4:1c:8a:ee:a5:5c:56:40:56:3e:ec:79:
3e:a4:9d:97:8f:f9:48:3e:a1:70:c7:54:cf:05:11:07:5c:5c:
3f:d1:5b:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKA1f+qKxzjdyHngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NmFmOTVhOTItOGUyMC00NGFkLWJlNjAtZjViMjNhOTNkMGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJL2gLM7i8Kdvhlf52ZDYyL3+TM+c/KKiBBY
rQmC0yMEIf3ld+b54TYXD8A52g4BBazB07sApJPduanJZtaw43AuaScsCMc85u+O
sqtpxITI2AoUh+02qcl0agip61536fn9SRXqeh+3kkx22E2UbR0aOtc0w4oiClAu
H8gCsQTPQJVJh/d54KrScaW/hhA5vgDtcO5d9tAmHEzmrKifpWoHsWtFkEzmzx3p
PzrV5u45DORKLNblHtjllPPDeLTIpEqvt1Q9kQrMLb/HGk3V9VBZG/07XZjmEXTJ
5y7P0nDXn2oqja1+LnHGle/xuxkLH5KSAi5NXda6ah+7IfzMDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB4WK7ok9P150XGCzwRPiJ9EVvW7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQzZmQ3ZDktMDFmYi0z
OTVmLWEyNjAtMWI2ZDE1NDM4NDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIokwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIToLAz1SdzHdJxUZQ/zJ0gmfbU5QGMUFbmw04eGALfjiw9eX2uyyTjl
u772Yby6kh7+OuOuQpNpszoXaYyUPHuDO1K0K7O25bm7mC4deifE6KXNtml8XM6e
7KwOaZiARMfJ0hPRvr8Vy2W8FvWo3cSa1dm1kqIrTmYesmxwEC6kJceypfjGYevf
0gFvXq6xz9kxR3h7DxfbJCw+UvIGC0+iwxS1EU/rBsxMkF78J4Z1LzOLwnpnepJs
zMrxS/qX92LYjvnRtFErX6h7ZsuD+T5UJlMA9k2ZaiI0/NxM5dQciu6lXFZAVj7s
eT6knZeP+Ug+oXDHVM8FEQdcXD/RW2Q=
-----END CERTIFICATE-----
Generated at Sat May 10 11:24:05 2025 by rpki-client