Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f5a9c81-7a2d-33fd-8262-cff2da0c6955.roa
File: 2f5a9c81-7a2d-33fd-8262-cff2da0c6955.roa (raw, json)
Hash identifier: P3yI4sLJ3hgdrZObOAx4Prr4t6ZpkBmct/0O6qOdhJk=
Subject key identifier: 3C:FB:43:81:49:29:64:74:3F:04:D2:71:A5:30:56:4B:63:9F:B5:60
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A090167DF912441D7C7F100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f5a9c81-7a2d-33fd-8262-cff2da0c6955.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.116.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:09:01:67:df:91:24:41:d7:c7:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=302df865-997e-46a2-842e-1ace82a7b79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:80:ab:c3:49:03:9f:81:d0:04:ad:8d:0a:
5a:20:57:2e:59:5f:aa:a4:ca:f5:b4:67:7e:6b:68:
a2:f5:11:9c:cd:05:28:11:b7:49:75:cb:01:25:1c:
bd:f2:fc:81:f5:73:0a:69:44:a2:54:41:52:7f:41:
ba:53:1b:cd:fd:7d:73:04:fa:6f:e6:82:80:07:dc:
3a:f6:8b:63:09:62:84:7b:c4:22:93:ae:88:03:67:
16:71:a7:0e:01:f0:e9:4e:22:f0:ca:b8:50:53:02:
65:85:80:8d:a1:f1:70:40:db:2c:76:b2:b8:f4:2b:
a6:23:c6:78:52:d7:09:70:83:9b:07:4b:c9:89:1b:
2f:c1:7b:c5:7f:e6:64:57:ea:73:00:bb:8d:49:d0:
29:81:e2:04:a1:df:05:3c:5d:62:68:99:bb:c5:64:
1e:48:1d:07:9a:83:c9:25:5d:2a:9b:f8:26:94:93:
85:38:19:2c:41:de:12:2a:1b:1f:01:d5:06:ba:bf:
09:51:a7:24:e5:9d:ec:b3:ec:35:26:bc:3c:58:62:
4d:07:c3:ac:53:8d:a4:5d:ab:5a:12:49:ec:bb:91:
73:7c:d3:66:a8:1b:db:eb:72:3f:54:fa:45:30:a1:
2d:98:dc:61:09:7e:da:0d:10:41:c9:54:27:3a:52:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FB:43:81:49:29:64:74:3F:04:D2:71:A5:30:56:4B:63:9F:B5:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f5a9c81-7a2d-33fd-8262-cff2da0c6955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.116.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:59:92:7a:a2:33:6b:2a:db:45:22:97:bb:64:48:b0:71:03:
f2:56:15:99:e1:d1:84:55:60:c1:91:bf:48:97:68:5a:fe:a8:
cf:29:4d:c2:4b:92:6d:d7:f2:7e:fa:23:d4:15:c4:57:84:42:
70:d2:15:a8:38:39:18:d8:f6:29:1d:e4:d5:60:bc:56:50:cc:
2e:cb:ee:ff:ae:18:83:93:99:17:ab:c2:e1:00:2d:6e:3b:b7:
d8:6a:c9:6e:dc:59:b7:e9:3e:62:f4:dd:b9:96:b1:6e:39:2f:
13:af:dc:1d:9c:d1:ec:37:e7:36:05:c2:7a:9b:04:03:05:3b:
79:66:3d:85:f1:3d:0a:70:fe:99:0a:cb:86:b3:57:0b:df:59:
f1:72:d3:4f:4c:11:35:6d:21:19:08:cd:06:e0:5b:09:d9:5a:
86:48:67:f6:0a:f7:0b:cd:cf:43:97:d1:12:cd:b9:49:c6:9d:
74:5f:06:65:f6:6f:43:76:f2:2c:4c:05:a0:67:f1:20:66:b5:
c8:11:b0:99:56:60:dc:1d:73:1a:19:77:ac:52:30:b1:39:bf:
68:4a:09:be:2d:eb:62:fc:c2:fe:8d:c5:a8:f3:7f:22:8d:63:
20:4d:21:5f:ac:0b:28:f5:ce:de:06:4a:3e:e4:34:2b:6c:33:
61:53:97:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKCQFn35EkQdfH8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MzAyZGY4NjUtOTk3ZS00NmEyLTg0MmUtMWFjZTgyYTdiNzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2KAq8NJA5+B0AStjQpaIFcuWV+qpMr1tGd+
a2ii9RGczQUoEbdJdcsBJRy98vyB9XMKaUSiVEFSf0G6UxvN/X1zBPpv5oKAB9w6
9otjCWKEe8Qik66IA2cWcacOAfDpTiLwyrhQUwJlhYCNofFwQNssdrK49CumI8Z4
UtcJcIObB0vJiRsvwXvFf+ZkV+pzALuNSdApgeIEod8FPF1iaJm7xWQeSB0HmoPJ
JV0qm/gmlJOFOBksQd4SKhsfAdUGur8JUack5Z3ss+w1Jrw8WGJNB8OsU42kXata
Eknsu5FzfNNmqBvb63I/VPpFMKEtmNxhCX7aDRBByVQnOlKeDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDz7Q4FJKWR0PwTScaUwVktjn7VgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmY1YTljODEtN2EyZC0z
M2ZkLTgyNjItY2ZmMmRhMGM2OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInRwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9ZknqiM2sq20Uil7tkSLBxA/JWFZnh0YRVYMGRv0iXaFr+qM8pTcJL
km3X8n76I9QVxFeEQnDSFag4ORjY9ikd5NVgvFZQzC7L7v+uGIOTmRerwuEALW47
t9hqyW7cWbfpPmL03bmWsW45LxOv3B2c0ew35zYFwnqbBAMFO3lmPYXxPQpw/pkK
y4azVwvfWfFy009METVtIRkIzQbgWwnZWoZIZ/YK9wvNz0OX0RLNuUnGnXRfBmX2
b0N28ixMBaBn8SBmtcgRsJlWYNwdcxoZd6xSMLE5v2hKCb4t62L8wv6NxajzfyKN
YyBNIV+sCyj1zt4GSj7kNCtsM2FTl28=
-----END CERTIFICATE-----
Generated at Sat May 10 15:03:48 2025 by rpki-client