Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cccbd1b-0448-3623-a99b-6d6f7171bd1f.roa
File: 2cccbd1b-0448-3623-a99b-6d6f7171bd1f.roa (raw, json)
Hash identifier: Oimsp+QyVMOcknFVpNHJzqyVLeLIheE+vngk8ttAIGE=
Subject key identifier: B2:50:4A:CE:9D:A4:F8:EF:CA:86:52:6E:45:05:D4:9D:62:35:11:48
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583B7E95F6B824DBFA4E73AFCD80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cccbd1b-0448-3623-a99b-6d6f7171bd1f.roa
Signing time: Tue 05 Oct 2021 04:00:00 +0000
ROA not before: Tue 05 Oct 2021 04:00:00 +0000
ROA not after: Sun 07 Jan 2024 05:00:00 +0000
asID: 396982
IP address blocks: 34.161.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:7e:95:f6:b8:24:db:fa:4e:73:af:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 5 04:00:00 2021 GMT
Not After : Jan 7 05:00:00 2024 GMT
Subject: CN=7e1558dc-4df1-41d5-856a-70110a09459d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:6e:57:b9:8c:15:03:d3:12:a0:12:74:98:
2b:9c:ab:3e:93:a4:1b:d1:bb:b2:8f:ee:6a:34:44:
4a:31:6d:06:b4:c7:91:08:ac:0a:03:29:5c:4e:ef:
15:6b:1b:ec:87:6f:d9:34:f2:01:2c:03:3c:c4:77:
2f:01:f9:f7:a0:d7:1f:56:e3:92:5e:d9:d4:d1:55:
da:90:9d:5e:fb:43:be:9d:cb:2b:9f:b5:f4:0c:b3:
46:fe:96:07:4c:5b:a5:a7:68:41:77:dd:52:19:02:
43:ac:a9:bd:e0:84:10:ef:64:ce:ca:94:21:07:04:
69:45:5e:40:cf:b1:c2:44:40:0a:31:a0:ac:f1:49:
a4:a1:32:08:d4:e1:da:25:4c:8f:23:ad:1f:c7:89:
11:ff:56:2f:91:95:30:4f:31:de:ae:36:a6:19:9b:
4c:d3:14:a6:c7:68:22:9a:3d:3d:e3:26:fc:5c:e1:
e8:ae:e9:d0:81:d1:3e:6f:c3:a0:6c:44:b2:a3:e0:
d3:ac:c1:79:18:93:e3:bb:35:94:1a:59:b8:1e:9c:
19:eb:a6:ac:5b:fa:57:09:27:17:09:2f:de:91:fb:
a6:b1:28:0e:b8:a0:eb:3c:d8:e6:08:04:a1:28:e8:
25:f3:89:de:7f:f1:6d:6d:7a:e7:b6:80:fb:75:2a:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:50:4A:CE:9D:A4:F8:EF:CA:86:52:6E:45:05:D4:9D:62:35:11:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cccbd1b-0448-3623-a99b-6d6f7171bd1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.161.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:ad:92:28:40:df:7f:6b:9d:89:c2:2d:26:a2:be:a8:75:f7:
a4:bf:1b:fe:25:4e:6a:ed:0f:14:29:7b:80:d6:e3:86:30:59:
56:72:17:e0:82:f8:a3:79:8a:52:8a:c7:72:b1:61:4b:db:42:
3c:ea:1b:98:1e:af:58:2d:f9:0f:42:a4:52:a8:5a:8e:34:e4:
92:3c:f6:c9:d8:27:f0:1f:c3:ad:7f:d7:5a:93:be:8a:d7:b6:
f4:5e:10:57:24:f6:14:fd:a2:86:05:90:4c:ee:08:1b:d8:fb:
66:e8:87:e7:85:62:a2:f2:9f:83:a9:39:69:11:f6:59:4e:05:
50:fd:be:e7:3c:94:19:7d:74:52:bf:f1:48:09:8f:0b:39:d5:
78:fd:85:66:42:05:62:b0:df:d0:23:ff:e1:c7:1f:93:59:20:
ce:a7:d6:40:69:e7:c5:8d:b4:09:78:76:81:26:a5:c9:9f:ae:
7e:06:fa:03:9b:b8:ed:3b:a2:59:d4:cd:34:8f:f5:91:63:72:
3f:28:bb:14:a9:dd:65:e5:3d:cd:9f:a6:e4:35:21:04:59:80:
cf:a7:30:27:33:dc:0c:5c:fc:cb:96:6e:20:42:aa:7f:6a:de:
42:22:e6:0a:73:2c:52:f1:08:0d:9a:90:24:f5:78:a3:e6:93:
c4:5d:69:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDt+lfa4JNv6TnOvzYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMTAwNTA0MDAwMFoXDTI0MDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
N2UxNTU4ZGMtNGRmMS00MWQ1LTg1NmEtNzAxMTBhMDk0NTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns9uV7mMFQPTEqASdJgrnKs+k6Qb0buyj+5q
NERKMW0GtMeRCKwKAylcTu8Vaxvsh2/ZNPIBLAM8xHcvAfn3oNcfVuOSXtnU0VXa
kJ1e+0O+ncsrn7X0DLNG/pYHTFulp2hBd91SGQJDrKm94IQQ72TOypQhBwRpRV5A
z7HCREAKMaCs8UmkoTII1OHaJUyPI60fx4kR/1YvkZUwTzHerjamGZtM0xSmx2gi
mj094yb8XOHorunQgdE+b8OgbESyo+DTrMF5GJPjuzWUGlm4HpwZ66asW/pXCScX
CS/ekfumsSgOuKDrPNjmCAShKOgl84nef/FtbXrntoD7dSp/mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJQSs6dpPjvyoZSbkUF1J1iNRFIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmNjY2JkMWItMDQ0OC0z
NjIzLWE5OWItNmQ2ZjcxNzFiZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWtkihA339rnYnCLSaivqh196S/G/4lTmrtDxQpe4DW44YwWVZyF+CC
+KN5ilKKx3KxYUvbQjzqG5ger1gt+Q9CpFKoWo405JI89snYJ/Afw61/11qTvorX
tvReEFck9hT9ooYFkEzuCBvY+2boh+eFYqLyn4OpOWkR9llOBVD9vuc8lBl9dFK/
8UgJjws51Xj9hWZCBWKw39Aj/+HHH5NZIM6n1kBp58WNtAl4doEmpcmfrn4G+gOb
uO07olnUzTSP9ZFjcj8ouxSp3WXlPc2fpuQ1IQRZgM+nMCcz3Axc/MuWbiBCqn9q
3kIi5gpzLFLxCA2akCT1eKPmk8RdaVc=
-----END CERTIFICATE-----
Generated at Sat May 10 12:43:20 2025 by rpki-client