Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21c35294-100f-3938-99a0-d50e2a14b23f.roa
File: 21c35294-100f-3938-99a0-d50e2a14b23f.roa (raw, json)
Hash identifier: GF5M8lgqHzS6kqJUkHnsviV7gXgCaVrJSiN0xE/FVEw=
Subject key identifier: 1E:C7:CB:69:C7:4B:DB:54:6A:6E:53:93:BA:10:1A:EC:4C:F2:CF:9B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285839B8E134542E2FA76095574780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21c35294-100f-3938-99a0-d50e2a14b23f.roa
Signing time: Mon 26 Apr 2021 04:00:00 +0000
ROA not before: Mon 26 Apr 2021 04:00:00 +0000
ROA not after: Sat 29 Jul 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.85.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:b8:e1:34:54:2e:2f:a7:60:95:57:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 26 04:00:00 2021 GMT
Not After : Jul 29 04:00:00 2023 GMT
Subject: CN=ff371fa9-ab03-416f-8019-0eebbce272f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:da:81:c5:5b:a0:aa:fb:bf:18:c0:63:a1:
36:76:36:81:d9:e8:01:90:80:64:9b:76:9e:85:8b:
8f:47:75:92:42:d0:c9:cd:8f:e8:7a:15:c3:07:0c:
54:63:e4:a6:1f:99:d5:e6:08:83:d8:3c:51:4d:75:
8b:17:02:1e:eb:94:9e:9a:d5:c2:77:58:3b:7a:47:
11:f9:6a:f4:09:90:f4:4b:67:14:06:71:9a:a7:c4:
ff:ab:a2:37:be:34:14:f2:be:b1:55:e0:cc:13:7a:
c5:63:74:59:47:99:aa:3d:28:52:12:de:53:68:bd:
50:15:18:44:91:46:62:55:9f:4e:35:5d:44:95:b2:
61:c9:af:2a:b3:c7:1a:18:40:42:07:09:bf:43:1c:
9d:1b:e1:84:8d:75:2d:a6:e0:ab:5f:3a:6c:09:3d:
e0:91:c8:81:6c:3f:d6:fc:92:db:b8:bb:60:60:76:
39:ea:7a:14:f2:ed:b8:92:84:08:07:47:e2:86:23:
dc:8e:95:d4:48:7e:ba:f7:3c:6e:4f:03:9f:90:7d:
ef:60:16:8a:2b:e5:3b:30:a9:07:df:dd:f1:37:96:
f9:06:e7:45:ca:17:aa:d1:34:b7:5e:42:05:e6:f8:
79:7b:06:f4:66:90:e8:a1:18:4e:64:06:78:30:1e:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C7:CB:69:C7:4B:DB:54:6A:6E:53:93:BA:10:1A:EC:4C:F2:CF:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21c35294-100f-3938-99a0-d50e2a14b23f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.85.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:fc:9b:6d:fa:83:1d:3c:8a:dc:c8:c1:ca:cd:0d:5c:91:49:
cd:51:2b:53:63:2d:00:b8:b3:17:01:e3:4e:f1:16:e3:d3:5e:
61:2f:bb:02:39:38:ac:4f:4c:f6:51:26:b0:1a:31:d3:ae:07:
8f:36:7b:72:af:09:4e:33:cd:e5:f6:66:c8:ee:24:23:b4:25:
9d:0a:63:18:65:c3:e0:62:5a:0a:87:e1:a3:b4:0c:5e:97:0e:
88:1b:ae:81:32:a0:a1:f5:23:0a:cd:29:65:3e:37:84:95:54:
39:8c:bb:a9:36:d2:21:bc:38:97:c9:5a:d2:3d:f9:2b:89:59:
3a:66:52:7a:d9:77:fd:6f:d0:49:08:6f:a9:86:a1:d6:ab:6b:
af:64:39:de:a1:cb:0f:a5:f2:f8:a1:4c:af:1c:19:ae:45:9a:
5c:d8:46:5e:54:9a:ff:46:fc:43:34:50:e8:52:2a:02:6e:d2:
49:8f:28:f8:1e:c5:c9:c5:f6:e4:d2:0d:3c:9f:37:7e:45:a2:
15:34:4c:66:2c:37:19:ca:de:9f:ca:0c:28:79:e3:72:e1:c9:
61:39:c1:55:b7:a9:c8:de:3d:b2:0a:13:16:10:09:be:f2:5f:
75:f3:7f:16:41:8f:a0:46:40:5e:dc:8f:7f:02:9b:3b:46:48:
cb:38:3a:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDm44TRULi+nYJVXR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDQyNjA0MDAwMFoXDTIzMDcyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmYzNzFmYTktYWIwMy00MTZmLTgwMTktMGVlYmJjZTI3MmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR3agcVboKr7vxjAY6E2djaB2egBkIBkm3ae
hYuPR3WSQtDJzY/oehXDBwxUY+SmH5nV5giD2DxRTXWLFwIe65SemtXCd1g7ekcR
+Wr0CZD0S2cUBnGap8T/q6I3vjQU8r6xVeDME3rFY3RZR5mqPShSEt5TaL1QFRhE
kUZiVZ9ONV1ElbJhya8qs8caGEBCBwm/QxydG+GEjXUtpuCrXzpsCT3gkciBbD/W
/JLbuLtgYHY56noU8u24koQIB0fihiPcjpXUSH669zxuTwOfkH3vYBaKK+U7MKkH
393xN5b5BudFyheq0TS3XkIF5vh5ewb0ZpDooRhOZAZ4MB5EUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB7Hy2nHS9tUam5Tk7oQGuxM8s+bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjFjMzUyOTQtMTAwZi0z
OTM4LTk5YTAtZDUwZTJhMTRiMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIlUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFD8m236gx08itzIwcrNDVyRSc1RK1NjLQC4sxcB407xFuPTXmEvuwI5
OKxPTPZRJrAaMdOuB482e3KvCU4zzeX2ZsjuJCO0JZ0KYxhlw+BiWgqH4aO0DF6X
DogbroEyoKH1IwrNKWU+N4SVVDmMu6k20iG8OJfJWtI9+SuJWTpmUnrZd/1v0EkI
b6mGodara69kOd6hyw+l8vihTK8cGa5FmlzYRl5Umv9G/EM0UOhSKgJu0kmPKPge
xcnF9uTSDTyfN35FohU0TGYsNxnK3p/KDCh543LhyWE5wVW3qcjePbIKExYQCb7y
X3XzfxZBj6BGQF7cj38CmztGSMs4OuY=
-----END CERTIFICATE-----
Generated at Sat May 10 14:41:46 2025 by rpki-client