Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20e5be60-f1f5-316b-8d42-0b163f99ed92.roa
File: 20e5be60-f1f5-316b-8d42-0b163f99ed92.roa (raw, json)
Hash identifier: Sno5ir8QNaumOpxl6IW4zcc/0cM0M0znB54D0ZAtKv0=
Subject key identifier: 5A:11:AC:E9:15:ED:0D:0B:A0:05:07:23:7A:B1:97:FF:37:ED:EA:35
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A27387307DFAB915E1B1100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20e5be60-f1f5-316b-8d42-0b163f99ed92.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.67.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:27:38:73:07:df:ab:91:5e:1b:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9b814586-59b4-42e2-9731-1a7c43801f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:90:21:25:46:09:20:1a:01:e8:a9:e6:3a:
2e:4f:4f:ec:de:d3:14:a7:66:36:01:7d:05:22:c0:
3c:e9:38:4a:e3:85:c6:bb:5c:8c:df:45:c5:93:b4:
c7:2e:21:63:1f:f7:19:1f:ab:fc:d1:bc:d0:d7:7d:
64:ca:a0:75:35:dd:fa:2f:44:e6:95:cf:0f:84:36:
e4:2c:b7:5b:13:80:67:d8:7b:86:fa:f8:55:fc:51:
ed:ea:bb:b1:58:d6:f0:59:87:89:d4:3d:52:a4:c4:
ca:0f:a4:da:fd:59:85:8e:0d:fc:45:be:60:ee:7a:
dc:bd:a5:54:05:1b:8e:b7:8f:c0:ef:9d:34:ec:cf:
6d:2c:b1:26:ee:d4:6c:e3:fa:2e:b5:36:da:34:fd:
36:e5:7b:76:ce:d1:89:c5:86:3a:59:63:66:e1:40:
1e:c3:3a:aa:b3:56:6c:da:63:bc:94:43:a3:e8:f1:
f5:0b:59:7d:4d:f3:94:87:e5:11:37:66:97:cd:46:
36:51:f7:03:c9:77:62:2f:ec:c7:c8:46:82:1c:8c:
ab:89:62:ee:97:9e:aa:5a:b0:49:eb:84:c9:3c:80:
08:38:c4:50:4a:59:61:84:bd:5f:99:13:c4:e7:4b:
5e:7d:64:b0:e8:65:6a:79:69:97:59:d5:46:ef:a1:
bb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:11:AC:E9:15:ED:0D:0B:A0:05:07:23:7A:B1:97:FF:37:ED:EA:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20e5be60-f1f5-316b-8d42-0b163f99ed92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.67.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:f9:75:7f:66:68:37:12:59:6c:80:59:d2:b5:9f:ee:b6:f1:
f8:d0:06:9e:06:97:87:30:bf:3d:18:b4:df:cd:b2:b4:66:5c:
7f:d4:02:01:3d:a6:c8:35:79:7f:e8:fb:9b:d5:1f:d9:ef:9b:
c6:f6:fa:a7:5f:2a:4d:60:db:ef:b3:1a:2c:53:67:6e:30:c3:
e3:a8:53:fa:22:92:0f:e7:0a:36:df:9e:28:76:17:75:f0:13:
14:16:31:a6:e0:c6:08:47:27:8b:e7:d7:1b:7c:52:06:aa:1c:
70:fe:2e:a5:f4:6a:42:f3:bb:f7:7f:91:d4:a9:2f:b9:2e:17:
af:f7:dc:cf:c3:0d:18:85:90:92:8c:31:d2:5e:d9:ec:51:86:
8f:41:70:d6:f7:20:02:2d:67:57:71:73:d3:25:ef:86:ab:73:
3e:ad:fd:72:95:9f:24:b4:80:a5:92:78:be:f8:22:61:68:ae:
62:25:9b:72:8e:b0:17:bb:bc:35:18:c0:14:f6:9f:ab:59:ea:
de:d7:04:fa:9f:50:e7:ee:12:cb:2a:fc:ec:83:d7:77:c4:00:
21:0e:86:6c:eb:e5:74:90:e9:6d:41:4b:95:8d:e3:c4:44:19:
0c:7c:8b:0d:fc:c4:c8:01:04:c7:29:2f:f2:9f:61:ff:13:78:
33:7e:ab:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJzhzB9+rkV4bEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OWI4MTQ1ODYtNTliNC00MmUyLTk3MzEtMWE3YzQzODAxZjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJmQISVGCSAaAeip5jouT0/s3tMUp2Y2AX0F
IsA86ThK44XGu1yM30XFk7THLiFjH/cZH6v80bzQ131kyqB1Nd36L0Tmlc8PhDbk
LLdbE4Bn2HuG+vhV/FHt6ruxWNbwWYeJ1D1SpMTKD6Ta/VmFjg38Rb5g7nrcvaVU
BRuOt4/A75007M9tLLEm7tRs4/outTbaNP025Xt2ztGJxYY6WWNm4UAewzqqs1Zs
2mO8lEOj6PH1C1l9TfOUh+URN2aXzUY2UfcDyXdiL+zHyEaCHIyriWLul56qWrBJ
64TJPIAIOMRQSllhhL1fmRPE50tefWSw6GVqeWmXWdVG76G7FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFoRrOkV7Q0LoAUHI3qxl/837eo1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjBlNWJlNjAtZjFmNS0z
MTZiLThkNDItMGIxNjNmOTllZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkNgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIn5dX9maDcSWWyAWdK1n+628fjQBp4Gl4cwvz0YtN/NsrRmXH/UAgE9
psg1eX/o+5vVH9nvm8b2+qdfKk1g2++zGixTZ24ww+OoU/oikg/nCjbfnih2F3Xw
ExQWMabgxghHJ4vn1xt8UgaqHHD+LqX0akLzu/d/kdSpL7kuF6/33M/DDRiFkJKM
MdJe2exRho9BcNb3IAItZ1dxc9Ml74arcz6t/XKVnyS0gKWSeL74ImFormIlm3KO
sBe7vDUYwBT2n6tZ6t7XBPqfUOfuEssq/OyD13fEACEOhmzr5XSQ6W1BS5WN48RE
GQx8iw38xMgBBMcpL/KfYf8TeDN+q74=
-----END CERTIFICATE-----
Generated at Sat May 10 13:38:10 2025 by rpki-client