Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3525fa65-679f-3c0c-b1a1-03cf40f202f6.roa
File: 3525fa65-679f-3c0c-b1a1-03cf40f202f6.roa (raw, json)
Hash identifier: 04QQg8ufqOWC9l0ezV7IuvrpTzGDk5jQ6DywdygXqzk=
Subject key identifier: FE:2A:40:4D:6B:42:8D:7C:A0:CA:D2:1A:1C:50:44:42:59:9D:BE:6C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A2008487213F111010C1980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3525fa65-679f-3c0c-b1a1-03cf40f202f6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.146.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:20:08:48:72:13:f1:11:01:0c:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c9618a26-fb67-47dc-b7bb-d29a55942e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:49:bb:11:85:7d:75:33:a3:98:a4:8e:6a:
92:0f:39:70:50:21:69:f3:b5:8f:fa:c4:1e:00:c4:
a1:1a:18:f0:64:dd:16:c0:65:f8:06:bb:d0:7a:35:
c9:59:db:c4:ef:8c:73:e9:2a:a1:64:a6:ee:70:13:
fa:94:8b:91:78:ea:10:c4:dc:c7:c2:03:28:57:2a:
15:4e:ca:ea:01:8c:61:0f:54:f2:90:e3:8d:ac:a4:
94:b1:9a:d3:f6:8c:4c:32:3d:9c:a7:d3:dc:c6:2d:
d5:03:da:d6:ac:ab:ab:15:a5:a2:cb:05:42:d3:0d:
f9:2c:87:87:eb:3e:22:eb:32:4f:63:e7:52:e3:8c:
5a:6e:c9:15:60:f5:b2:7e:21:d6:ea:45:2c:c3:9d:
e8:99:e2:34:14:3c:d8:9f:0b:6b:2f:e0:e1:ba:c8:
b0:bb:84:9b:84:07:7f:42:88:d7:66:db:fd:2e:ce:
ed:6e:aa:25:5e:81:ae:7b:44:99:88:0a:c2:9a:c1:
42:6a:a0:ec:36:62:5b:2a:d9:d9:ff:8f:56:47:a9:
d0:a7:8f:ad:48:79:79:5e:58:56:04:0f:e0:5d:00:
89:73:6b:83:1f:5f:22:85:ba:50:06:9a:29:01:a1:
75:b5:c6:72:f0:00:fe:c9:f5:4f:54:1d:94:d2:6f:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2A:40:4D:6B:42:8D:7C:A0:CA:D2:1A:1C:50:44:42:59:9D:BE:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3525fa65-679f-3c0c-b1a1-03cf40f202f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.146.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:15:64:9d:22:41:99:9b:57:b8:24:f7:ce:5b:98:d2:e5:fe:
82:d4:73:d7:2f:7f:6b:1b:70:4a:eb:51:4e:f5:a6:10:c2:6a:
0f:7a:1a:fe:82:14:f5:59:03:7c:47:59:94:bb:66:f3:4d:c0:
d7:63:23:fc:d8:52:6e:e7:2b:22:d1:33:f8:d1:39:20:dc:19:
63:c2:52:03:8a:1b:19:af:fd:8f:ac:5f:0a:73:c1:0c:a8:ac:
59:a9:40:1b:bf:c5:a4:a7:a6:1d:48:15:04:83:7c:da:7f:be:
20:42:76:f6:66:71:ab:f9:4c:40:7c:45:fc:ae:c6:f6:f9:b8:
a4:33:0a:93:8a:22:5c:52:33:bb:16:e0:e3:57:22:3e:86:f7:
41:ec:82:65:da:f1:65:20:66:e7:b1:26:b4:c3:2c:1f:aa:3d:
95:4c:91:67:c8:7d:f2:0e:86:dd:55:9c:ab:ef:e0:9c:54:87:
5e:a2:5d:8d:35:9a:b9:ba:00:f1:a5:be:b0:ba:a2:4d:6b:1c:
b8:b1:c7:04:4e:dc:02:34:ad:bd:e8:02:2b:bc:57:de:52:85:
f0:c8:19:84:e8:37:85:ac:8b:0c:e0:7e:a8:56:58:3b:7a:9d:
64:d8:14:56:2d:cb:5f:88:52:43:c0:d9:26:55:f0:4a:73:4e:
e3:8e:a1:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKIAhIchPxEQEMGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
Yzk2MThhMjYtZmI2Ny00N2RjLWI3YmItZDI5YTU1OTQyZTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqRJuxGFfXUzo5ikjmqSDzlwUCFp87WP+sQe
AMShGhjwZN0WwGX4BrvQejXJWdvE74xz6SqhZKbucBP6lIuReOoQxNzHwgMoVyoV
TsrqAYxhD1TykOONrKSUsZrT9oxMMj2cp9Pcxi3VA9rWrKurFaWiywVC0w35LIeH
6z4i6zJPY+dS44xabskVYPWyfiHW6kUsw53omeI0FDzYnwtrL+Dhusiwu4SbhAd/
QojXZtv9Ls7tbqolXoGue0SZiArCmsFCaqDsNmJbKtnZ/49WR6nQp4+tSHl5XlhW
BA/gXQCJc2uDH18ihbpQBpopAaF1tcZy8AD+yfVPVB2U0m/lgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4qQE1rQo18oMrSGhxQREJZnb5sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzUyNWZhNjUtNjc5Zi0z
YzBjLWIxYTEtMDNjZjQwZjIwMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpLgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8VZJ0iQZmbV7gk985bmNLl/oLUc9cvf2sbcErrUU71phDCag96Gv6C
FPVZA3xHWZS7ZvNNwNdjI/zYUm7nKyLRM/jROSDcGWPCUgOKGxmv/Y+sXwpzwQyo
rFmpQBu/xaSnph1IFQSDfNp/viBCdvZmcav5TEB8Rfyuxvb5uKQzCpOKIlxSM7sW
4ONXIj6G90HsgmXa8WUgZuexJrTDLB+qPZVMkWfIffIOht1VnKvv4JxUh16iXY01
mrm6APGlvrC6ok1rHLixxwRO3AI0rb3oAiu8V95ShfDIGYToN4WsiwzgfqhWWDt6
nWTYFFYty1+IUkPA2SZV8EpzTuOOof0=
-----END CERTIFICATE-----
Generated at Sat May 10 12:21:32 2025 by rpki-client