Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25516ed4-3a0a-30e6-b12b-96ae538e3090.roa
File: 25516ed4-3a0a-30e6-b12b-96ae538e3090.roa (raw, json)
Hash identifier: F2LUvx9zudMRjE9N+EbU6iRRNVJ39TxT4+fGiE06siI=
Subject key identifier: 17:15:D3:BB:F5:55:F1:AA:0F:23:30:35:08:1A:F2:AD:71:E5:CE:62
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EC51A1D85942B793AF90E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25516ed4-3a0a-30e6-b12b-96ae538e3090.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.76.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ec:51:a1:d8:59:42:b7:93:af:90:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=cf44f016-b556-40dd-9831-8b42913826a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a5:a4:54:ce:a3:d0:4a:7d:22:f4:5c:e9:9a:
e2:b3:ab:75:53:35:4c:d5:ee:1c:05:f7:1d:29:59:
1c:c8:2c:8b:52:6f:b4:e2:89:90:66:69:ca:70:c5:
42:ea:d5:e3:c9:73:61:cc:2f:94:90:1b:5f:4e:1f:
38:a8:a3:07:0e:55:d3:52:cb:1f:57:b5:8e:38:f4:
70:4b:9f:84:a4:21:18:d9:dc:81:8b:92:81:66:51:
12:e3:80:38:9c:62:e6:13:5c:94:8e:e0:f8:d7:72:
ea:35:8d:1b:92:68:22:a4:c0:1e:d9:67:b3:49:c2:
38:bc:88:ed:a8:1f:e2:05:18:27:9a:e4:29:dd:98:
f5:88:a1:da:22:06:9f:6b:04:6b:ef:76:72:6f:fe:
c2:6c:26:c8:b3:87:bf:ed:2f:a5:4e:d4:c3:99:4e:
e2:c2:de:a1:72:02:45:f6:e8:b2:bc:ea:c3:56:80:
e3:c2:e7:67:81:f2:7f:45:16:29:1e:06:15:fb:84:
55:44:71:c4:99:7e:dd:3b:aa:1c:b7:af:6c:7b:57:
02:45:3b:53:43:10:5c:6e:7d:70:e5:6d:04:98:08:
3a:eb:94:92:7b:f4:c7:82:2a:e9:c3:63:71:5f:1e:
cf:63:31:59:70:24:01:cf:90:ca:9f:f8:b8:5b:bd:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:D3:BB:F5:55:F1:AA:0F:23:30:35:08:1A:F2:AD:71:E5:CE:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25516ed4-3a0a-30e6-b12b-96ae538e3090.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.76.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:a4:03:f4:ba:b5:b9:cf:98:0d:b0:90:dc:6e:6e:2a:41:af:
c1:e0:53:da:57:76:18:12:9f:35:a8:43:d3:89:08:e9:13:cf:
aa:2b:bc:17:3c:a0:7b:d4:08:3c:e3:ce:2b:b1:20:a8:43:43:
ea:07:34:60:a0:4f:08:84:5b:1c:c1:20:59:74:49:94:bc:f5:
22:a5:52:4a:35:11:62:34:a6:ff:1d:e5:9e:76:74:f4:b2:53:
39:db:9c:de:2b:1b:c5:79:d1:12:4a:56:3f:ba:9a:5c:e0:fc:
3f:9d:fe:5c:44:da:df:22:25:0b:3b:23:9c:c1:f8:02:3c:c2:
db:21:5e:b5:9e:34:c2:08:dd:bd:94:74:85:fb:d5:a4:e8:38:
40:21:de:69:e5:b8:a8:00:17:d0:08:77:6e:95:9b:6f:06:50:
75:70:4a:e0:7e:b1:2d:90:5a:cc:80:f5:a8:c6:27:6c:0e:75:
60:4e:3d:ba:37:31:d2:6d:16:c3:24:fe:ba:09:24:ca:6a:4c:
b4:cd:0a:25:3b:6d:8c:1f:d0:32:63:ca:8f:a3:89:e3:a7:7c:
2f:0d:20:34:69:17:d8:50:05:ad:0a:6d:39:ab:d3:5c:ed:27:
1b:7e:36:77:57:00:f4:dc:4c:6a:a0:e1:4c:44:ab:90:c6:d3:
c3:85:e5:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ7FGh2FlCt5OvkOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2Y0NGYwMTYtYjU1Ni00MGRkLTk4MzEtOGI0MjkxMzgyNmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaWkVM6j0Ep9IvRc6Zris6t1UzVM1e4cBfcd
KVkcyCyLUm+04omQZmnKcMVC6tXjyXNhzC+UkBtfTh84qKMHDlXTUssfV7WOOPRw
S5+EpCEY2dyBi5KBZlES44A4nGLmE1yUjuD413LqNY0bkmgipMAe2WezScI4vIjt
qB/iBRgnmuQp3Zj1iKHaIgafawRr73Zyb/7CbCbIs4e/7S+lTtTDmU7iwt6hcgJF
9uiyvOrDVoDjwudngfJ/RRYpHgYV+4RVRHHEmX7dO6oct69se1cCRTtTQxBcbn1w
5W0EmAg665SSe/THgirpw2NxXx7PYzFZcCQBz5DKn/i4W73dOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcV07v1VfGqDyMwNQga8q1x5c5iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjU1MTZlZDQtM2EwYS0z
MGU2LWIxMmItOTZhZTUzOGUzMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkyQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJukA/S6tbnPmA2wkNxubipBr8HgU9pXdhgSnzWoQ9OJCOkTz6orvBc8
oHvUCDzjziuxIKhDQ+oHNGCgTwiEWxzBIFl0SZS89SKlUko1EWI0pv8d5Z52dPSy
UznbnN4rG8V50RJKVj+6mlzg/D+d/lxE2t8iJQs7I5zB+AI8wtshXrWeNMII3b2U
dIX71aToOEAh3mnluKgAF9AId26Vm28GUHVwSuB+sS2QWsyA9ajGJ2wOdWBOPbo3
MdJtFsMk/roJJMpqTLTNCiU7bYwf0DJjyo+jieOnfC8NIDRpF9hQBa0KbTmr01zt
Jxt+NndXAPTcTGqg4UxEq5DG08OF5fg=
-----END CERTIFICATE-----
Generated at Sat May 10 13:05:05 2025 by rpki-client