Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d56923a-7026-3094-831e-6c9662532c2a.roa
File: 1d56923a-7026-3094-831e-6c9662532c2a.roa (raw, json)
Hash identifier: WOp/TrpWBYdHG+gfE55BL71sYRLQp0EhOMQbh4IOBK0=
Subject key identifier: 9F:94:72:C5:30:E1:BF:77:2D:4E:6B:DA:31:94:16:5B:9B:AD:FB:CC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A12CD741AF8C33B3CF12A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d56923a-7026-3094-831e-6c9662532c2a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.141.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:cd:74:1a:f8:c3:3b:3c:f1:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0587d792-1a71-4bea-a7b9-e66b0ed2b9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:14:76:34:dd:50:71:68:e6:80:f8:b6:e3:
1a:28:27:4f:f1:fd:e2:38:ed:f5:69:98:c4:ad:62:
75:6b:41:27:d1:ee:4c:cf:16:da:12:03:96:f0:13:
3d:a9:24:54:79:57:12:43:f7:65:00:60:14:32:38:
68:6d:ec:92:c9:d7:1e:62:41:b5:b1:58:99:ce:b0:
d2:5d:a7:e4:cb:ef:37:80:77:07:51:c8:b0:66:6a:
82:eb:53:b1:58:17:f9:ed:4b:d3:a5:a1:c9:7d:47:
a0:97:40:c7:ff:b9:86:7a:1e:0e:99:c7:a4:7b:ea:
ec:74:98:e5:d4:3a:b0:fe:ca:41:04:ed:2a:59:17:
08:97:67:a1:40:3d:22:48:55:6e:4f:c0:33:34:38:
a2:b6:08:18:54:e7:f9:09:6a:4e:29:4b:a8:37:9d:
72:0d:f5:f7:7b:a3:b0:68:3b:aa:5d:51:95:17:4d:
ce:85:84:f2:9b:b4:b6:2c:f4:42:8e:2d:d3:f1:8b:
7b:0d:3b:6f:48:fd:21:8e:9e:24:f2:da:43:de:09:
36:f7:43:cd:0c:0d:d6:d3:9b:81:bb:0e:24:b7:9a:
ae:fb:40:cd:27:1c:e7:d8:52:a2:05:0a:cf:b4:f8:
b8:db:17:d8:86:1f:ff:26:19:59:6b:ae:6e:7f:1d:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:72:C5:30:E1:BF:77:2D:4E:6B:DA:31:94:16:5B:9B:AD:FB:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d56923a-7026-3094-831e-6c9662532c2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.141.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:25:00:e3:fc:74:7e:0e:fc:04:4e:bf:a6:77:e2:69:2b:32:
fe:88:33:ed:c9:46:a3:db:ee:3f:54:d2:d2:75:87:54:47:70:
54:6f:ff:12:2a:f4:90:a6:65:10:86:7d:75:5c:91:88:6e:ef:
c3:18:60:d8:6a:d5:0d:bc:6f:f2:24:98:02:f1:37:78:32:8a:
77:f1:ac:19:5e:3c:d4:3d:94:be:0c:0b:19:13:22:a3:1e:9d:
68:ec:4f:b2:00:01:84:9a:76:c5:a6:dd:63:05:75:46:57:92:
db:e1:e7:31:34:9e:e5:f3:e0:1f:5e:44:5d:c2:91:e7:af:a8:
c5:b6:09:c8:84:0e:97:85:4a:f1:71:26:b9:79:f9:96:54:9b:
f9:cd:cc:fb:ce:74:15:cb:b4:05:0c:95:21:f3:e5:d3:95:3f:
00:29:5d:37:77:9a:be:73:de:19:45:fe:fe:f7:fa:8a:7e:d9:
3c:e1:ec:1b:19:9c:27:60:d1:d1:89:2c:23:84:dc:98:d2:91:
76:e4:db:3d:e9:7c:67:26:1e:8e:ed:4b:d6:7f:fb:fa:80:69:
6b:ef:f9:f3:ae:3a:75:86:71:5a:69:20:5f:4e:99:f1:8b:64:
c9:48:80:bf:6d:35:0f:2f:2d:2e:37:c9:48:fc:a9:ac:47:73:
45:11:26:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKEs10GvjDOzzxKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDU4N2Q3OTItMWE3MS00YmVhLWE3YjktZTY2YjBlZDJiOWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQsUdjTdUHFo5oD4tuMaKCdP8f3iOO31aZjE
rWJ1a0En0e5MzxbaEgOW8BM9qSRUeVcSQ/dlAGAUMjhobeySydceYkG1sViZzrDS
Xafky+83gHcHUciwZmqC61OxWBf57UvTpaHJfUegl0DH/7mGeh4Omceke+rsdJjl
1Dqw/spBBO0qWRcIl2ehQD0iSFVuT8AzNDiitggYVOf5CWpOKUuoN51yDfX3e6Ow
aDuqXVGVF03OhYTym7S2LPRCji3T8Yt7DTtvSP0hjp4k8tpD3gk290PNDA3W05uB
uw4kt5qu+0DNJxzn2FKiBQrPtPi42xfYhh//JhlZa65ufx2Q7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+UcsUw4b93LU5r2jGUFlubrfvMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQ1NjkyM2EtNzAyNi0z
MDk0LTgzMWUtNmM5NjYyNTMyYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4lAOP8dH4O/AROv6Z34mkrMv6IM+3JRqPb7j9U0tJ1h1RHcFRv/xIq
9JCmZRCGfXVckYhu78MYYNhq1Q28b/IkmALxN3gyinfxrBlePNQ9lL4MCxkTIqMe
nWjsT7IAAYSadsWm3WMFdUZXktvh5zE0nuXz4B9eRF3CkeevqMW2CciEDpeFSvFx
Jrl5+ZZUm/nNzPvOdBXLtAUMlSHz5dOVPwApXTd3mr5z3hlF/v73+op+2Tzh7BsZ
nCdg0dGJLCOE3JjSkXbk2z3pfGcmHo7tS9Z/+/qAaWvv+fOuOnWGcVppIF9OmfGL
ZMlIgL9tNQ8vLS43yUj8qaxHc0URJh4=
-----END CERTIFICATE-----
Generated at Sun May 11 01:51:30 2025 by rpki-client