Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c955ddd-3ecf-3a78-a8ff-0f93bc8cc5d7.roa
File: 3c955ddd-3ecf-3a78-a8ff-0f93bc8cc5d7.roa (raw, json)
Hash identifier: N0FAshDrS+EqJq02O+PLlj879ZeHAuyKEG/jwLTRKWA=
Subject key identifier: DC:A6:04:5B:15:26:77:43:3A:40:11:EF:D9:15:27:95:0B:47:6C:E0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A17C9BC344213D77B064680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c955ddd-3ecf-3a78-a8ff-0f93bc8cc5d7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.140.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:17:c9:bc:34:42:13:d7:7b:06:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8cbb2f59-48dd-4019-832f-1ef519ebf8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:1e:76:c9:a7:b8:a9:62:e7:51:22:52:10:
63:03:d8:23:7a:8d:9a:df:be:88:64:6a:c8:e2:ef:
42:88:ca:f0:01:46:74:2a:66:b8:c6:85:7c:c3:c6:
9d:65:a1:50:91:ba:16:21:b6:49:e6:dc:82:c7:05:
19:e1:83:5b:09:1c:30:17:53:10:b6:7a:07:9a:a0:
fb:f9:0c:21:67:2d:47:de:f2:c9:ef:4b:11:c6:d7:
b8:9c:10:d9:d5:48:40:81:fc:f2:ad:2a:06:68:50:
a0:ff:de:5a:be:d8:b7:52:50:7a:dd:9a:ce:09:06:
e7:12:43:d5:00:1c:24:39:93:44:80:38:54:49:7f:
a7:1c:5c:9c:08:d9:e2:03:55:32:64:fb:2e:b7:f1:
04:9f:3f:e6:ce:b0:e3:21:24:07:1a:41:29:19:23:
c4:eb:7d:20:26:fe:bf:5e:44:73:73:7a:09:d8:92:
57:8b:42:da:66:b7:39:69:f3:e3:81:c1:23:78:87:
52:74:05:ef:d8:f7:5f:48:72:c4:ff:f0:31:71:d9:
ef:18:1e:26:67:90:4e:1e:02:17:a9:b1:83:af:6d:
d2:bf:b9:75:6d:b7:6c:80:cf:a3:95:f3:b0:77:ea:
a0:58:2c:55:0a:1b:5b:b6:06:91:b5:23:98:4a:d7:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A6:04:5B:15:26:77:43:3A:40:11:EF:D9:15:27:95:0B:47:6C:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c955ddd-3ecf-3a78-a8ff-0f93bc8cc5d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.140.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:ec:df:18:34:66:ad:67:56:63:aa:e4:b8:9f:d6:1d:46:c3:
95:10:fa:95:b2:5d:48:fe:f5:ec:7f:77:c8:27:eb:8e:13:cb:
d4:97:b1:82:e9:2f:1a:84:1d:3a:e4:dd:48:0d:21:12:80:96:
ba:e6:4d:9e:be:02:c4:a6:f8:4f:2a:08:3f:78:76:8a:4f:a6:
01:26:0c:56:e7:17:f0:c5:b3:09:ef:3f:83:4a:ae:e3:63:ea:
82:e6:4c:32:40:fd:87:e2:a1:3b:e4:77:54:7c:38:e4:70:8b:
b5:8d:a7:1d:7c:a2:8a:87:d8:86:8d:25:9d:72:b6:25:28:45:
54:15:66:1b:1e:0c:19:57:fb:55:8a:b2:ba:5d:88:e8:7e:54:
95:66:77:71:a1:df:7a:50:af:d2:45:c1:52:27:a3:3d:bc:2d:
80:e1:cc:7b:c1:89:99:51:63:ef:39:16:de:44:90:30:48:c8:
07:39:ec:b6:9c:05:b2:e0:b2:ae:1e:bf:c7:f7:f9:7f:c1:af:
e0:ff:43:f6:39:9a:fe:67:e4:f5:2c:7a:f9:8f:6a:89:12:9a:
28:23:53:5b:17:d6:8c:b3:93:45:6f:31:ee:88:6a:23:2f:07:
d0:18:0a:b8:01:83:fe:19:a3:79:9f:e1:6a:fd:34:52:63:82:
eb:d7:74:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKF8m8NEIT13sGRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OGNiYjJmNTktNDhkZC00MDE5LTgzMmYtMWVmNTE5ZWJmOGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCsedsmnuKli51EiUhBjA9gjeo2a376IZGrI
4u9CiMrwAUZ0Kma4xoV8w8adZaFQkboWIbZJ5tyCxwUZ4YNbCRwwF1MQtnoHmqD7
+QwhZy1H3vLJ70sRxte4nBDZ1UhAgfzyrSoGaFCg/95avti3UlB63ZrOCQbnEkPV
ABwkOZNEgDhUSX+nHFycCNniA1UyZPsut/EEnz/mzrDjISQHGkEpGSPE630gJv6/
XkRzc3oJ2JJXi0LaZrc5afPjgcEjeIdSdAXv2PdfSHLE//AxcdnvGB4mZ5BOHgIX
qbGDr23Sv7l1bbdsgM+jlfOwd+qgWCxVChtbtgaRtSOYStftqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNymBFsVJndDOkAR79kVJ5ULR2zgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2M5NTVkZGQtM2VjZi0z
YTc4LWE4ZmYtMGY5M2JjOGNjNWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrs3xg0Zq1nVmOq5Lif1h1Gw5UQ+pWyXUj+9ex/d8gn644Ty9SXsYLp
LxqEHTrk3UgNIRKAlrrmTZ6+AsSm+E8qCD94dopPpgEmDFbnF/DFswnvP4NKruNj
6oLmTDJA/YfioTvkd1R8OORwi7WNpx18ooqH2IaNJZ1ytiUoRVQVZhseDBlX+1WK
srpdiOh+VJVmd3Gh33pQr9JFwVInoz28LYDhzHvBiZlRY+85Ft5EkDBIyAc57Lac
BbLgsq4ev8f3+X/Br+D/Q/Y5mv5n5PUsevmPaokSmigjU1sX1oyzk0VvMe6IaiMv
B9AYCrgBg/4Zo3mf4Wr9NFJjguvXdCI=
-----END CERTIFICATE-----
Generated at Sat May 10 11:29:00 2025 by rpki-client