Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/250ae71d-6a7e-3ed6-a0e9-a5adfea29d27.roa
File: 250ae71d-6a7e-3ed6-a0e9-a5adfea29d27.roa (raw, json)
Hash identifier: pOwxi5VE0YkZXm8tl6SYApwl9b8IRb5D7OEje2ERmFw=
Subject key identifier: 55:87:B0:1F:2A:F6:8B:FB:98:7A:A1:E1:25:EA:0C:D8:59:16:C1:10
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0BB2D6753C6CCE9B995400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/250ae71d-6a7e-3ed6-a0e9-a5adfea29d27.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.119.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0b:b2:d6:75:3c:6c:ce:9b:99:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=71fc8771-840b-4401-9002-9f42874ae2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d8:9d:07:86:a1:0b:7b:82:8d:df:34:c0:90:
8a:39:14:0b:2a:c7:00:26:25:fd:0b:49:f3:54:7c:
6d:8e:ae:1e:46:d2:a8:cf:89:4a:e1:c1:0d:23:3b:
cb:08:a8:ef:ef:4d:3c:36:56:53:0d:6c:73:ab:7c:
fd:d4:9c:97:ee:72:10:c5:3c:00:c7:b0:6a:eb:60:
65:48:00:52:20:2d:4c:af:99:66:9f:51:ac:42:71:
ad:b9:31:eb:88:e0:77:a7:ab:9d:14:c6:91:fb:69:
02:a0:45:c7:f0:8b:55:e7:ef:3a:99:29:5f:54:90:
1a:5e:65:9b:0d:ac:d4:7f:be:2e:ad:7d:60:66:39:
68:35:fd:9f:21:f2:42:44:52:f8:9d:fc:fc:b7:bd:
0b:ab:2e:09:59:b7:11:21:6a:dc:fb:4d:28:b4:44:
01:55:b1:ee:4d:0a:2e:bc:6f:10:ef:1d:c5:13:87:
51:f9:99:cf:13:99:2f:79:f6:4c:ea:c2:24:34:5c:
75:e4:4f:52:2a:2e:7d:58:f9:23:9d:5d:99:49:ca:
92:1b:cc:a4:5c:8a:e7:ea:82:9b:6f:bf:86:4f:ab:
46:56:23:04:ac:33:5f:1f:75:2b:51:69:8d:9c:81:
ed:81:a2:1c:65:a7:d4:bd:19:1b:72:42:68:0e:5e:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:87:B0:1F:2A:F6:8B:FB:98:7A:A1:E1:25:EA:0C:D8:59:16:C1:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/250ae71d-6a7e-3ed6-a0e9-a5adfea29d27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.119.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:05:8d:c8:6b:a2:3a:65:a8:2a:e4:9d:ed:fc:d7:dd:2e:ad:
a9:3c:ad:24:3c:dd:72:24:db:49:05:c5:2d:e0:98:96:3e:c2:
37:b5:bd:c0:e7:2f:49:81:21:dc:54:17:84:a3:70:4a:00:d6:
f7:23:e0:8a:3d:8f:1d:34:53:ec:b9:77:14:c7:9f:55:ae:42:
31:62:50:88:0d:78:38:ff:dd:a4:c8:ba:29:e3:1b:b6:89:66:
0b:29:1c:af:f4:60:5e:83:60:90:0f:33:78:c6:a7:ee:d2:66:
41:6c:97:ea:9b:11:4c:8d:6a:48:64:a4:94:c5:1a:80:8b:1e:
48:81:63:76:a6:84:e5:35:26:6c:d1:1c:7b:8f:e0:54:ab:82:
85:47:ea:9d:b3:1b:c2:24:65:d3:7b:6a:e4:32:4d:2a:82:3d:
24:f9:e6:a6:ae:14:fa:d6:58:04:26:9e:64:d2:75:48:d5:ce:
0e:7c:89:3a:d3:56:c9:aa:60:5a:c4:e1:3f:74:97:a7:5b:12:
c3:71:9d:da:92:29:dc:e6:17:19:98:95:e7:39:41:2a:ed:0b:
ba:0e:43:70:e4:0b:1b:93:b4:7d:46:e1:57:48:2f:20:1c:4d:
02:a8:37:56:b9:98:16:da:e3:b9:3d:f8:56:4a:08:59:ed:f7:
43:0f:f4:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKC7LWdTxszpuZVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NzFmYzg3NzEtODQwYi00NDAxLTkwMDItOWY0Mjg3NGFlMmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9idB4ahC3uCjd80wJCKORQLKscAJiX9C0nz
VHxtjq4eRtKoz4lK4cENIzvLCKjv7008NlZTDWxzq3z91JyX7nIQxTwAx7Bq62Bl
SABSIC1Mr5lmn1GsQnGtuTHriOB3p6udFMaR+2kCoEXH8ItV5+86mSlfVJAaXmWb
DazUf74urX1gZjloNf2fIfJCRFL4nfz8t70Lqy4JWbcRIWrc+00otEQBVbHuTQou
vG8Q7x3FE4dR+ZnPE5kvefZM6sIkNFx15E9SKi59WPkjnV2ZScqSG8ykXIrn6oKb
b7+GT6tGViMErDNfH3UrUWmNnIHtgaIcZafUvRkbckJoDl4ssQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFWHsB8q9ov7mHqh4SXqDNhZFsEQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjUwYWU3MWQtNmE3ZS0z
ZWQ2LWEwZTktYTVhZGZlYTI5ZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIncAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkFjchrojplqCrkne38190urak8rSQ83XIk20kFxS3gmJY+wje1vcDn
L0mBIdxUF4SjcEoA1vcj4Io9jx00U+y5dxTHn1WuQjFiUIgNeDj/3aTIuinjG7aJ
ZgspHK/0YF6DYJAPM3jGp+7SZkFsl+qbEUyNakhkpJTFGoCLHkiBY3amhOU1JmzR
HHuP4FSrgoVH6p2zG8IkZdN7auQyTSqCPST55qauFPrWWAQmnmTSdUjVzg58iTrT
VsmqYFrE4T90l6dbEsNxndqSKdzmFxmYlec5QSrtC7oOQ3DkCxuTtH1G4VdILyAc
TQKoN1a5mBba47k9+FZKCFnt90MP9Jo=
-----END CERTIFICATE-----
Generated at Sat May 10 14:50:00 2025 by rpki-client