Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4772af8c-9694-35a6-bf0a-92e7880c7250.roa
File: 4772af8c-9694-35a6-bf0a-92e7880c7250.roa (raw, json)
Hash identifier: lp21ifjoJtcwg2+PQKRC/f1wDQ+r96K9xiQzZ7ILzHs=
Subject key identifier: 81:AF:CA:DF:C9:C4:20:89:30:21:1B:0F:A7:AA:3F:B2:04:23:C3:F7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A78729364B4D798CA9680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4772af8c-9694-35a6-bf0a-92e7880c7250.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.116.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:78:72:93:64:b4:d7:98:ca:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=e85512cb-9e15-40e9-897a-89634f3d0eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:ee:12:d7:cc:e5:8e:8e:34:3e:09:1d:0c:
b3:c4:3b:a7:da:7e:39:60:d5:92:c5:cc:dd:5d:07:
cd:d0:7e:60:ee:14:cc:c7:ee:30:7f:ce:4d:a8:de:
c1:0b:8c:e7:65:87:6e:82:f2:d9:db:ef:2b:b4:ed:
5e:17:d4:07:06:94:cc:d6:7f:64:d8:c2:e6:35:97:
68:76:ef:96:75:26:71:48:0d:f8:b3:b4:bb:fb:65:
c6:ef:08:34:f9:48:49:c5:9f:02:68:cb:c0:60:98:
e2:aa:c1:33:e4:96:7a:88:bb:e9:78:d6:67:3a:c3:
5b:14:27:d4:d7:b4:7b:05:11:10:f5:9f:cd:77:f6:
0c:3b:79:e5:24:ec:a5:63:e3:a6:a8:4a:31:68:76:
0b:d5:cc:a7:5f:4e:05:ce:3c:e6:8e:11:5f:a1:7c:
76:30:03:bf:1e:ea:41:95:cd:d1:7b:f9:6e:e1:bc:
dd:e0:d7:82:51:91:0b:80:aa:c8:89:ee:f3:6c:14:
01:f6:28:64:33:d5:95:8a:04:f6:95:c8:a0:09:18:
ac:5c:2d:5a:72:84:7d:71:77:af:23:d9:18:89:47:
79:ec:f8:a9:f4:dc:5f:60:5d:86:95:d2:eb:2a:db:
74:b3:8a:12:b1:c2:d2:6e:c4:56:a6:75:e3:6b:f2:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AF:CA:DF:C9:C4:20:89:30:21:1B:0F:A7:AA:3F:B2:04:23:C3:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4772af8c-9694-35a6-bf0a-92e7880c7250.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.116.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:70:fa:e1:14:62:6a:f6:26:14:61:92:4b:9d:82:2a:54:61:
8b:35:da:40:a7:af:45:45:58:86:d0:10:dd:6b:87:b5:3b:36:
94:ef:8a:66:00:35:fc:bb:d7:e0:81:ac:e4:c5:cd:89:e5:40:
41:a7:b9:3e:11:5f:1a:69:df:f1:ca:fe:8b:b0:46:84:1c:54:
d5:9a:8a:95:61:d4:d7:4b:de:19:33:6e:34:e0:b5:17:d4:41:
64:ce:d8:ea:69:c3:0a:17:0c:55:9a:60:06:b3:d3:88:2b:9b:
ff:c8:42:ca:84:29:8e:3d:1b:d7:05:93:3e:8d:02:be:bb:e5:
94:48:5a:a1:28:4c:40:cb:39:8a:7a:7b:e4:8c:4f:f4:f5:e3:
25:5a:7e:ae:9e:46:fd:54:ec:35:9e:b9:93:f2:50:01:1a:ea:
67:fc:2b:14:8e:67:2e:4e:6c:02:23:b4:2e:2c:75:4f:b0:af:
fa:18:de:f1:09:a8:e2:01:63:a7:3c:88:fc:73:7d:9e:b4:c2:
2c:2d:d8:0c:7e:3f:ab:1b:e7:a8:c0:e8:97:81:78:fa:05:05:
2c:8d:9f:e2:8d:33:48:4e:b5:af:79:b6:06:4a:f2:1c:70:f2:
08:14:e8:ae:b8:73:3e:c8:1f:7f:72:f3:4b:ab:3d:e0:2c:7e:
29:c4:96:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/Snhyk2S015jKloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
ZTg1NTEyY2ItOWUxNS00MGU5LTg5N2EtODk2MzRmM2QwZWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmObuEtfM5Y6OND4JHQyzxDun2n45YNWSxczd
XQfN0H5g7hTMx+4wf85NqN7BC4znZYdugvLZ2+8rtO1eF9QHBpTM1n9k2MLmNZdo
du+WdSZxSA34s7S7+2XG7wg0+UhJxZ8CaMvAYJjiqsEz5JZ6iLvpeNZnOsNbFCfU
17R7BREQ9Z/Nd/YMO3nlJOylY+OmqEoxaHYL1cynX04FzjzmjhFfoXx2MAO/HupB
lc3Re/lu4bzd4NeCUZELgKrIie7zbBQB9ihkM9WVigT2lcigCRisXC1acoR9cXev
I9kYiUd57Pip9NxfYF2GldLrKtt0s4oSscLSbsRWpnXja/J1RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIGvyt/JxCCJMCEbD6eqP7IEI8P3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDc3MmFmOGMtOTY5NC0z
NWE2LWJmMGEtOTJlNzg4MGM3MjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHInSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1w+uEUYmr2JhRhkkudgipUYYs12kCnr0VFWIbQEN1rh7U7NpTvimYA
Nfy71+CBrOTFzYnlQEGnuT4RXxpp3/HK/ouwRoQcVNWaipVh1NdL3hkzbjTgtRfU
QWTO2OppwwoXDFWaYAaz04grm//IQsqEKY49G9cFkz6NAr675ZRIWqEoTEDLOYp6
e+SMT/T14yVafq6eRv1U7DWeuZPyUAEa6mf8KxSOZy5ObAIjtC4sdU+wr/oY3vEJ
qOIBY6c8iPxzfZ60wiwt2Ax+P6sb56jA6JeBePoFBSyNn+KNM0hOta95tgZK8hxw
8ggU6K64cz7IH39y80urPeAsfinElvU=
-----END CERTIFICATE-----
Generated at Sat May 10 14:57:47 2025 by rpki-client