Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a63fd8f-201f-384b-9af9-4e9db2557b05.roa
File: 2a63fd8f-201f-384b-9af9-4e9db2557b05.roa (raw, json)
Hash identifier: 6ls4kfkRRtJg07bk4VKHDsGenUlg/YLfOYWaRS+4avA=
Subject key identifier: 23:C7:DE:C3:81:A5:6F:9A:FA:2D:29:CE:31:C6:81:E2:7E:CF:04:67
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A631547BE122664DCC2E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a63fd8f-201f-384b-9af9-4e9db2557b05.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.109.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:63:15:47:be:12:26:64:dc:c2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=91460b72-1eea-4113-96a1-74a189be29c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:34:25:7c:d9:d2:29:c5:28:4f:1b:44:87:92:
2b:1d:c4:43:26:c8:82:83:81:b2:32:97:0a:5d:d0:
c6:ff:ce:43:be:96:b9:de:6f:45:c0:cb:fc:80:d1:
05:b2:6e:01:f0:8a:3b:ea:57:ee:57:93:41:9c:d7:
75:36:e1:69:d8:3b:94:2b:63:64:0f:ef:7c:8a:da:
c6:78:ac:74:ca:76:7c:5f:d3:6f:ff:e2:05:54:33:
24:47:f7:d5:dd:57:1d:67:d7:a4:2d:33:73:6b:03:
65:e5:32:bf:9e:bf:24:f9:d2:6d:45:fc:0d:27:57:
4e:02:98:45:b0:0d:fb:a0:d2:9c:ba:86:bd:2b:11:
0d:8a:4f:62:a7:42:a4:6e:4d:9c:34:b2:18:e7:b9:
39:3d:a8:5a:30:fd:3e:91:00:32:0b:21:1c:bd:c2:
14:fa:ff:5f:e5:ed:44:f6:ae:61:4b:ee:b1:85:32:
b2:c5:e7:07:94:d1:08:69:e7:fe:fa:06:e0:54:e5:
b1:cc:76:4e:1c:b8:9a:ea:fc:8e:de:fe:8e:7f:de:
7e:6f:08:ef:42:9d:2a:46:28:23:ad:bc:e4:10:09:
7f:08:e7:a8:e0:75:85:e0:40:11:5c:36:70:13:25:
6e:db:c9:bf:b6:9e:b3:69:da:d6:58:43:04:85:32:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C7:DE:C3:81:A5:6F:9A:FA:2D:29:CE:31:C6:81:E2:7E:CF:04:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a63fd8f-201f-384b-9af9-4e9db2557b05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.109.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:92:b8:63:b4:1a:8d:e3:b6:91:36:5b:87:c9:e0:16:13:81:
44:48:22:86:37:0a:1f:b7:f2:42:d2:31:59:a8:f5:92:2c:d6:
eb:dd:42:31:aa:a7:a2:ad:8e:42:5a:e1:9d:6d:77:26:4a:d0:
fb:85:27:4c:c8:54:5f:5d:42:f4:38:e1:08:97:3f:4e:be:18:
53:f5:10:0d:18:b8:87:3e:0c:56:b0:80:e2:79:45:0b:71:a7:
b1:d0:55:e1:69:87:d5:61:ae:1d:f5:9f:1e:6d:99:14:6f:e8:
f3:51:46:54:d0:9c:02:7b:7d:ce:3a:d3:a2:6d:5b:b1:b8:d4:
ec:c5:cc:f8:05:de:de:d7:92:03:8d:32:af:3e:ce:b0:fc:10:
c8:79:90:f8:a1:97:4f:db:85:21:8a:a3:f8:6e:9a:3e:23:90:
86:0e:9a:40:f4:85:06:2d:98:1b:67:f2:7c:d0:f4:40:3e:fd:
6f:62:35:7b:14:56:30:44:3e:5f:00:bb:96:8a:61:8d:05:1b:
1d:29:b7:93:ea:b3:c7:52:47:43:76:6c:fa:4b:49:81:01:95:
d0:8d:e8:6f:a7:1e:0a:57:99:20:08:6d:59:46:d4:0c:62:41:
c7:41:de:00:55:20:c2:af:67:94:12:97:94:ab:4f:86:0d:ae:
a2:3b:e4:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SmMVR74SJmTcwuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
OTE0NjBiNzItMWVlYS00MTEzLTk2YTEtNzRhMTg5YmUyOWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzQlfNnSKcUoTxtEh5IrHcRDJsiCg4GyMpcK
XdDG/85Dvpa53m9FwMv8gNEFsm4B8Io76lfuV5NBnNd1NuFp2DuUK2NkD+98itrG
eKx0ynZ8X9Nv/+IFVDMkR/fV3VcdZ9ekLTNzawNl5TK/nr8k+dJtRfwNJ1dOAphF
sA37oNKcuoa9KxENik9ip0Kkbk2cNLIY57k5PahaMP0+kQAyCyEcvcIU+v9f5e1E
9q5hS+6xhTKyxecHlNEIaef++gbgVOWxzHZOHLia6vyO3v6Of95+bwjvQp0qRigj
rbzkEAl/COeo4HWF4EARXDZwEyVu28m/tp6zadrWWEMEhTKnTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPH3sOBpW+a+i0pzjHGgeJ+zwRnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmE2M2ZkOGYtMjAxZi0z
ODRiLTlhZjktNGU5ZGIyNTU3YjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIm2gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2SuGO0Go3jtpE2W4fJ4BYTgURIIoY3Ch+38kLSMVmo9ZIs1uvdQjGq
p6KtjkJa4Z1tdyZK0PuFJ0zIVF9dQvQ44QiXP06+GFP1EA0YuIc+DFawgOJ5RQtx
p7HQVeFph9Vhrh31nx5tmRRv6PNRRlTQnAJ7fc4606JtW7G41OzFzPgF3t7XkgON
Mq8+zrD8EMh5kPihl0/bhSGKo/humj4jkIYOmkD0hQYtmBtn8nzQ9EA+/W9iNXsU
VjBEPl8Au5aKYY0FGx0pt5Pqs8dSR0N2bPpLSYEBldCN6G+nHgpXmSAIbVlG1Axi
QcdB3gBVIMKvZ5QSl5SrT4YNrqI75CQ=
-----END CERTIFICATE-----
Generated at Sat May 10 11:24:00 2025 by rpki-client