Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/440afe7a-678c-398a-ab26-acd51ee9d725.roa
File: 440afe7a-678c-398a-ab26-acd51ee9d725.roa (raw, json)
Hash identifier: oZJHcNR3fa8i945xbTpLOXclkGtLs57woI1jrUQaOzk=
Subject key identifier: 87:D5:DE:71:60:13:F7:55:EF:2A:38:42:47:40:5F:18:1A:46:1F:D3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A598DD67D8E42749C7C40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/440afe7a-678c-398a-ab26-acd51ee9d725.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.64.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:59:8d:d6:7d:8e:42:74:9c:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=a149b7a4-d4f8-44bf-9a75-b9cc6d76aa3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:f5:63:bc:b7:11:0d:78:3b:72:c1:2b:a1:
30:2c:36:7e:17:16:00:01:a0:33:9d:fc:6a:f1:96:
40:f0:be:24:c9:e7:57:71:0e:ee:2f:88:4c:16:40:
ca:f0:72:25:36:84:ac:cf:a4:fc:be:50:a1:24:85:
70:f7:cc:c0:3e:db:1a:2b:f6:f8:1b:d0:fd:f5:63:
cd:42:43:d3:cb:b7:94:5a:83:f9:75:e6:41:71:b0:
ef:3d:53:d4:c8:5c:3b:92:0d:62:3a:99:68:1e:f1:
90:80:81:38:63:c3:da:12:3b:4f:51:43:e7:a9:1f:
42:e0:34:54:85:e2:11:ae:89:37:97:c9:2c:9c:4d:
bc:0a:3d:c4:4f:54:22:ae:e9:d2:e4:7a:e2:f5:97:
98:03:af:ba:ea:b3:51:19:93:09:aa:36:14:ee:f1:
14:82:aa:a7:b8:67:70:84:26:fd:10:7a:58:01:71:
37:a7:e2:32:9e:a4:85:a8:fa:a6:9f:e2:f9:88:9b:
a6:20:11:c7:19:02:9d:5d:6a:62:ca:8c:37:ef:9a:
5d:3a:53:28:1d:76:e0:9c:fa:11:d0:87:df:a8:b2:
0f:6a:4c:72:aa:79:bd:f9:18:29:e1:bc:f4:ab:68:
00:2f:e0:8e:ea:86:92:c4:57:bb:13:e3:4b:ee:c3:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D5:DE:71:60:13:F7:55:EF:2A:38:42:47:40:5F:18:1A:46:1F:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/440afe7a-678c-398a-ab26-acd51ee9d725.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.64.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:21:ba:b0:36:3c:fe:f6:00:e7:c5:e4:e3:7d:60:f2:34:b3:
10:7d:88:99:21:f5:43:83:ce:ac:fc:37:d7:12:9b:4c:41:d3:
20:a4:a3:dd:45:cd:c6:fe:1a:44:0a:76:cb:64:f3:ff:c0:d9:
1c:a0:df:15:c3:99:4c:f1:8d:b5:b0:5d:2d:08:fd:5a:ff:d8:
5e:10:c6:eb:13:2a:86:c3:a7:0a:4c:1e:a7:c2:e9:be:af:dc:
39:ab:31:b2:eb:95:81:e1:e2:d7:ad:55:b7:70:2e:29:36:00:
9b:57:2f:1a:fc:fe:f4:00:b4:48:8c:cf:0b:61:78:d4:2a:77:
cf:65:38:9a:80:be:a4:52:48:e3:53:e5:71:61:8a:5a:e1:d5:
35:8b:4b:6c:65:f4:6f:8f:81:2f:f1:5d:8b:43:eb:8f:0d:7e:
8b:a6:27:64:6c:64:db:7a:fb:e0:a7:ad:f4:00:d3:bc:9d:2f:
4d:25:15:75:7e:23:94:92:14:d0:38:87:b1:98:5c:ec:64:83:
ca:28:e7:14:68:87:5c:41:99:8a:46:63:0a:1b:17:5e:e4:6b:
b8:a2:7f:cc:59:47:b5:17:31:16:26:2c:d2:49:2d:59:5c:3f:
50:d1:f0:ca:e8:ba:a8:c7:5b:01:79:5a:a8:b2:e9:0b:f3:a3:
09:00:ba:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SlmN1n2OQnScfEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
YTE0OWI3YTQtZDRmOC00NGJmLTlhNzUtYjljYzZkNzZhYTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhf1Y7y3EQ14O3LBK6EwLDZ+FxYAAaAznfxq
8ZZA8L4kyedXcQ7uL4hMFkDK8HIlNoSsz6T8vlChJIVw98zAPtsaK/b4G9D99WPN
QkPTy7eUWoP5deZBcbDvPVPUyFw7kg1iOploHvGQgIE4Y8PaEjtPUUPnqR9C4DRU
heIRrok3l8ksnE28Cj3ET1QirunS5Hri9ZeYA6+66rNRGZMJqjYU7vEUgqqnuGdw
hCb9EHpYAXE3p+IynqSFqPqmn+L5iJumIBHHGQKdXWpiyow375pdOlMoHXbgnPoR
0IffqLIPakxyqnm9+Rgp4bz0q2gAL+CO6oaSxFe7E+NL7sMQPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfV3nFgE/dV7yo4QkdAXxgaRh/TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDQwYWZlN2EtNjc4Yy0z
OThhLWFiMjYtYWNkNTFlZTlkNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIkCgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJchurA2PP72AOfF5ON9YPI0sxB9iJkh9UODzqz8N9cSm0xB0yCko91F
zcb+GkQKdstk8//A2Ryg3xXDmUzxjbWwXS0I/Vr/2F4QxusTKobDpwpMHqfC6b6v
3DmrMbLrlYHh4tetVbdwLik2AJtXLxr8/vQAtEiMzwtheNQqd89lOJqAvqRSSONT
5XFhilrh1TWLS2xl9G+PgS/xXYtD648NfoumJ2RsZNt6++CnrfQA07ydL00lFXV+
I5SSFNA4h7GYXOxkg8oo5xRoh1xBmYpGYwobF17ka7iif8xZR7UXMRYmLNJJLVlc
P1DR8MrouqjHWwF5Wqiy6QvzowkAulA=
-----END CERTIFICATE-----
Generated at Sun May 11 09:18:26 2025 by rpki-client