Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b4ffc26-7c25-363a-9e62-fa0c1feb4e45.roa
File: 2b4ffc26-7c25-363a-9e62-fa0c1feb4e45.roa (raw, json)
Hash identifier: OwdwPy6yWB80G8JUW3ClS7v+1HmrQ8j+e9rmzZbWdqs=
Subject key identifier: E8:2C:68:52:0B:F8:C9:7B:15:3C:3C:24:90:ED:CB:1C:57:89:9D:B0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285839B8DFE9919CA6AFD5276E4B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b4ffc26-7c25-363a-9e62-fa0c1feb4e45.roa
Signing time: Mon 26 Apr 2021 04:00:00 +0000
ROA not before: Mon 26 Apr 2021 04:00:00 +0000
ROA not after: Sat 29 Jul 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.135.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:b8:df:e9:91:9c:a6:af:d5:27:6e:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 26 04:00:00 2021 GMT
Not After : Jul 29 04:00:00 2023 GMT
Subject: CN=5ac5f7a1-0779-45ba-b564-efc60c45a3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:3f:62:a6:d8:2d:e4:9c:03:21:9b:41:80:
45:ac:54:ac:d3:20:62:62:4c:c6:68:32:91:f1:85:
0b:77:34:3d:07:85:82:76:2d:e6:15:ee:f0:0f:95:
7f:66:82:1a:90:48:d0:17:e4:86:81:48:ed:5f:f1:
26:2f:fd:0a:5b:26:00:70:4a:0c:fb:d9:47:f8:6e:
ce:7e:b6:4a:a7:7c:f6:41:a1:80:7f:08:e2:e2:d9:
e6:bc:74:36:fa:06:28:8d:83:f8:e7:d8:2b:ae:9a:
72:81:9f:54:9e:89:cc:76:7c:ab:76:38:2b:a8:ab:
f7:16:ec:49:23:0c:86:b6:e5:6b:73:de:b4:4e:4b:
9e:ff:fa:6c:a9:9c:43:92:73:f8:5f:4a:9e:4c:a2:
d5:ec:e6:ad:52:d4:3b:98:bb:ce:0b:fb:35:34:13:
11:cb:f7:ac:b4:da:f1:92:d4:0b:fa:a8:af:ba:7e:
51:51:a5:18:38:ea:4c:b7:39:93:75:76:1f:f3:71:
d8:d2:aa:59:ab:e5:3a:d3:f6:5e:ab:ee:d7:da:3b:
94:f8:be:aa:18:e1:43:e0:0f:ff:50:1b:be:9d:48:
db:ce:eb:2c:80:7b:c9:fd:6e:67:94:3f:49:69:f6:
ec:6e:e4:25:c3:c2:63:f7:6a:1e:4c:ec:9c:27:51:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:68:52:0B:F8:C9:7B:15:3C:3C:24:90:ED:CB:1C:57:89:9D:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b4ffc26-7c25-363a-9e62-fa0c1feb4e45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.135.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:d4:7c:9a:b6:9f:e6:f3:a9:02:3c:9b:30:53:47:45:9e:c8:
c1:01:4e:de:71:68:d7:37:b8:04:e5:9f:53:d8:28:84:e0:0b:
42:d9:3a:b5:6b:55:06:5e:fe:b3:47:44:f2:71:50:98:01:eb:
4c:28:02:42:84:9d:c1:af:72:69:eb:b7:fd:0c:fc:03:3e:5b:
90:79:7e:04:51:99:8e:a1:2e:7e:2e:45:48:5b:ba:0e:29:48:
40:ac:38:dc:d4:83:56:9d:a7:e6:38:40:16:01:39:ff:d9:29:
a2:e1:3a:e2:e8:29:8a:43:b0:bd:a1:84:4d:05:16:2d:41:26:
9d:43:f1:35:0d:ee:dc:fd:3c:7a:9e:b2:40:f7:47:f9:a7:4b:
26:56:48:6c:29:1a:c5:3a:a3:e9:91:86:09:42:db:33:0e:78:
d5:7a:28:e1:74:d4:b3:d5:5e:e8:b7:7d:d9:5e:92:fd:ad:27:
f4:94:f7:db:f3:21:b1:23:b0:19:ea:f4:1e:cd:c4:0a:a4:d6:
a8:0a:c6:95:c7:f6:42:30:5e:fd:60:da:0e:d1:e7:13:6a:55:
1c:bb:21:78:27:5f:ec:21:66:19:f9:7a:a5:b7:30:fa:93:82:
96:b9:f0:8f:d1:58:1e:09:1d:cb:58:60:43:a8:c5:f3:ad:66:
4b:7b:77:ba
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDm43+mRnKav1SduSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDQyNjA0MDAwMFoXDTIzMDcyOTA0MDAwMFowLzEtMCsGA1UEAxMk
NWFjNWY3YTEtMDc3OS00NWJhLWI1NjQtZWZjNjBjNDVhM2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCA/YqbYLeScAyGbQYBFrFSs0yBiYkzGaDKR
8YULdzQ9B4WCdi3mFe7wD5V/ZoIakEjQF+SGgUjtX/EmL/0KWyYAcEoM+9lH+G7O
frZKp3z2QaGAfwji4tnmvHQ2+gYojYP459grrppygZ9UnonMdnyrdjgrqKv3FuxJ
IwyGtuVrc960Tkue//psqZxDknP4X0qeTKLV7OatUtQ7mLvOC/s1NBMRy/estNrx
ktQL+qivun5RUaUYOOpMtzmTdXYf83HY0qpZq+U60/Zeq+7X2juU+L6qGOFD4A//
UBu+nUjbzussgHvJ/W5nlD9JafbsbuQlw8Jj92oeTOycJ1EDLwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOgsaFIL+Ml7FTw8JJDtyxxXiZ2wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmI0ZmZjMjYtN2MyNS0z
NjNhLTllNjItZmEwYzFmZWI0ZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIocwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAW9R8mraf5vOpAjybMFNHRZ7IwQFO3nFo1ze4BOWfU9gohOALQtk6tWtV
Bl7+s0dE8nFQmAHrTCgCQoSdwa9yaeu3/Qz8Az5bkHl+BFGZjqEufi5FSFu6DilI
QKw43NSDVp2n5jhAFgE5/9kpouE64ugpikOwvaGETQUWLUEmnUPxNQ3u3P08ep6y
QPdH+adLJlZIbCkaxTqj6ZGGCULbMw541Xoo4XTUs9Ve6Ld92V6S/a0n9JT32/Mh
sSOwGer0Hs3ECqTWqArGlcf2QjBe/WDaDtHnE2pVHLsheCdf7CFmGfl6pbcw+pOC
lrnwj9FYHgkdy1hgQ6jF861mS3t3ug==
-----END CERTIFICATE-----
Generated at Sat May 10 22:01:40 2025 by rpki-client