Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b93b4c3-66bd-36ff-b1ea-f70c9beb635d.roa
File: 3b93b4c3-66bd-36ff-b1ea-f70c9beb635d.roa (raw, json)
Hash identifier: KqHlNYfYGnYtN+FUXU1feRLJ+7LPDqqku0XBGY4C6ck=
Subject key identifier: B2:D3:40:EA:CC:79:C1:C4:0F:AA:CC:4B:92:FD:76:A9:B2:2C:9C:8F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B86FEE2F061385693DCB90
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b93b4c3-66bd-36ff-b1ea-f70c9beb635d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.133.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b8:6f:ee:2f:06:13:85:69:3d:cb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d3015124-378d-4ad5-8699-2dc4a1d0a270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:be:ab:3e:55:a8:38:2f:cc:3d:8e:b2:29:
5f:a7:a6:a0:c0:69:1e:22:a5:9d:fd:81:59:85:77:
36:a6:3e:f0:f8:15:81:a9:70:20:e1:4c:19:00:d2:
c7:37:92:fa:27:81:14:01:7f:cc:b0:17:ab:4e:fe:
90:71:de:22:60:be:69:bc:1c:14:40:cd:3b:95:20:
26:23:a7:2d:3c:fd:8d:b1:8c:c5:f4:59:e2:d5:d0:
c3:9a:88:94:31:f1:33:86:61:a5:6c:29:ea:ec:60:
79:51:e3:ec:df:ea:6c:2a:ef:22:9b:c3:e0:3f:4c:
2e:09:c5:64:ba:61:93:ab:b4:2f:8f:7d:82:6b:74:
42:7e:3a:c0:d5:d8:0c:63:cd:1f:67:03:df:2b:fe:
ca:b0:48:51:49:21:02:81:b1:88:05:f5:40:2c:91:
6d:a5:21:a7:7a:4d:d6:20:ab:93:a4:47:b5:16:53:
6b:92:7c:f1:3d:10:86:50:c2:62:b6:24:5a:be:61:
cf:cd:cc:16:93:8f:28:4d:28:39:dc:88:1d:f9:2f:
91:6e:58:0e:dc:e0:0c:83:a2:6e:ad:44:b1:9f:01:
2e:c4:01:8b:26:b7:6a:4c:7b:86:e9:c2:09:6e:12:
06:6a:b5:a8:1c:49:b1:a5:18:c7:6f:c0:93:46:f3:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D3:40:EA:CC:79:C1:C4:0F:AA:CC:4B:92:FD:76:A9:B2:2C:9C:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b93b4c3-66bd-36ff-b1ea-f70c9beb635d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.133.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:16:15:62:d6:cf:c9:c3:1c:ef:f3:78:33:2f:d3:bd:30:9e:
9e:87:dd:cb:31:0b:ab:c9:ea:b2:27:55:ad:c2:62:e9:8d:68:
2a:95:d0:9a:9d:56:a3:34:4c:3c:6e:df:e5:24:c5:25:3b:db:
55:44:09:5d:23:2c:96:fb:ec:4c:bf:ce:60:b4:94:0a:22:83:
64:6e:70:ec:65:c0:bf:91:87:4f:3f:da:24:a1:36:70:a0:0d:
5c:cd:f3:41:cb:82:67:33:9c:6d:8b:c2:6a:b0:da:7a:a5:f2:
02:58:1a:61:d8:15:5c:21:24:59:3d:b1:f9:84:fe:53:7f:10:
22:16:aa:99:b9:bc:f9:fb:e1:6f:ce:78:36:c6:92:01:00:67:
af:f7:52:f1:0b:0f:81:59:34:4d:5e:6d:36:c5:e0:9a:6b:cd:
ff:67:db:01:3e:ed:ce:e6:6b:83:99:93:f0:37:48:61:1b:8c:
eb:8e:a5:45:64:ba:50:52:79:2d:c6:45:90:85:1f:3f:63:7e:
2b:66:2d:aa:f1:3d:2e:b5:e8:5b:cc:cf:34:92:64:53:e2:15:
6d:9a:54:25:9f:66:4c:7f:a9:96:6a:67:06:af:37:16:de:47:
df:55:11:2c:e0:30:2e:bd:93:9f:62:9e:70:76:bd:b1:80:bb:
26:d2:fa:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnuG/uLwYThWk9y5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDMwMTUxMjQtMzc4ZC00YWQ1LTg2OTktMmRjNGExZDBhMjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibu+qz5VqDgvzD2Osilfp6agwGkeIqWd/YFZ
hXc2pj7w+BWBqXAg4UwZANLHN5L6J4EUAX/MsBerTv6Qcd4iYL5pvBwUQM07lSAm
I6ctPP2NsYzF9Fni1dDDmoiUMfEzhmGlbCnq7GB5UePs3+psKu8im8PgP0wuCcVk
umGTq7Qvj32Ca3RCfjrA1dgMY80fZwPfK/7KsEhRSSECgbGIBfVALJFtpSGnek3W
IKuTpEe1FlNrknzxPRCGUMJitiRavmHPzcwWk48oTSg53Igd+S+RblgO3OAMg6Ju
rUSxnwEuxAGLJrdqTHuG6cIJbhIGarWoHEmxpRjHb8CTRvPHgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLLTQOrMecHED6rMS5L9dqmyLJyPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2I5M2I0YzMtNjZiZC0z
NmZmLWIxZWEtZjcwYzliZWI2MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwWFWLWz8nDHO/zeDMv070wnp6H3csxC6vJ6rInVa3CYumNaCqV0Jqd
VqM0TDxu3+UkxSU721VECV0jLJb77Ey/zmC0lAoig2RucOxlwL+Rh08/2iShNnCg
DVzN80HLgmcznG2Lwmqw2nql8gJYGmHYFVwhJFk9sfmE/lN/ECIWqpm5vPn74W/O
eDbGkgEAZ6/3UvELD4FZNE1ebTbF4Jprzf9n2wE+7c7ma4OZk/A3SGEbjOuOpUVk
ulBSeS3GRZCFHz9jfitmLarxPS616FvMzzSSZFPiFW2aVCWfZkx/qZZqZwavNxbe
R99VESzgMC69k59innB2vbGAuybS+n8=
-----END CERTIFICATE-----
Generated at Sat May 10 19:11:22 2025 by rpki-client