Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b95e65f-09a9-3dbf-850c-83070c3eac1e.roa
File: 4b95e65f-09a9-3dbf-850c-83070c3eac1e.roa (raw, json)
Hash identifier: 7ryqXDYINgQ0U1zl45ihWdYcGp0cjNDTW4+hskREEUY=
Subject key identifier: 12:71:69:04:79:DE:40:33:AC:3D:29:81:8A:B8:8C:C2:92:18:6F:D1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6F2EE269C4BAD0A26200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b95e65f-09a9-3dbf-850c-83070c3eac1e.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.109.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6f:2e:e2:69:c4:ba:d0:a2:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=0904a6d5-0d98-49bb-a022-b6a3dfe58d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:e4:b2:95:2c:39:e9:7a:4a:fc:bb:2b:78:
a8:f7:80:29:48:ac:cb:c1:bf:73:43:86:7a:ab:c0:
7e:cc:cc:fa:5e:9d:f9:84:0b:80:8f:4e:3d:ba:d7:
f1:7e:01:be:b4:ea:45:69:79:4e:a1:d3:fa:75:0f:
23:47:fe:0a:c5:df:04:7e:c5:e7:ab:f4:41:97:d3:
67:02:29:de:42:28:ac:3e:db:30:45:2c:de:04:e5:
f4:5a:aa:e3:05:b7:ec:18:b2:7e:51:f7:0b:a1:bc:
4b:24:9f:8a:7d:d2:96:e5:de:5a:9c:bd:72:47:f9:
75:56:a1:83:03:aa:71:2b:cf:d1:dc:ae:a6:45:1a:
8f:ff:16:08:b8:a9:85:ee:95:9b:57:aa:ea:6a:4a:
ae:10:93:36:58:a2:0d:de:e1:0e:74:98:8c:6f:f5:
41:e8:00:02:c0:e9:93:10:5d:d9:4c:3c:c4:0d:37:
46:6a:29:52:a6:3b:b9:1e:ef:b8:d4:75:dc:8b:2d:
c8:f6:a1:ad:59:30:94:82:fe:f0:5b:63:aa:e7:bf:
33:d9:0e:22:79:95:a5:fe:18:93:28:82:f3:08:0c:
f5:ec:24:99:77:61:6a:c1:e1:16:e5:58:d4:8c:36:
16:8e:b4:18:89:1c:9d:a6:7d:df:2a:d3:9a:ea:fb:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:71:69:04:79:DE:40:33:AC:3D:29:81:8A:B8:8C:C2:92:18:6F:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b95e65f-09a9-3dbf-850c-83070c3eac1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.109.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:bb:7e:3b:35:56:0d:f7:2e:9d:a2:93:7b:b1:9d:05:94:38:
83:b3:e5:ef:eb:25:3a:9d:68:04:9a:28:28:52:d0:65:66:0f:
5d:b4:61:c6:a2:6d:b9:df:a4:aa:8c:b1:c6:51:54:82:6e:da:
ec:9f:f2:98:84:4f:8f:70:ff:3f:7c:98:7f:db:09:fc:04:5a:
ef:f7:8f:17:4b:94:03:17:6a:35:61:1f:b3:b8:ad:78:2f:46:
d4:81:a6:b1:a3:4e:8b:ec:6b:01:2d:8f:ec:87:60:05:2a:71:
83:10:1f:33:4f:43:c3:e2:5b:6f:67:55:6c:6a:d2:31:b8:a2:
cc:8b:35:7a:10:91:6d:29:6e:a0:2b:fd:02:66:79:07:8b:ca:
64:1d:af:fd:c5:ca:86:94:c9:b7:db:aa:48:16:94:6d:ac:eb:
b4:ab:e0:75:21:95:bd:fa:81:a4:8f:7b:5a:63:1e:f0:f4:37:
f7:40:72:7c:32:92:70:12:bc:83:7d:95:92:00:1b:4c:9e:f4:
eb:8b:9b:0b:5e:38:17:05:5a:c5:fa:32:e8:f1:da:da:35:35:
53:48:33:64:a8:db:17:91:69:7f:41:e1:ea:fb:86:30:96:da:
60:4c:a7:ed:23:d5:86:54:69:b4:c5:7b:81:72:09:f5:3c:d8:
69:c8:93:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/Sm8u4mnEutCiYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
MDkwNGE2ZDUtMGQ5OC00OWJiLWEwMjItYjZhM2RmZTU4ZDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnibkspUsOel6Svy7K3io94ApSKzLwb9zQ4Z6
q8B+zMz6Xp35hAuAj049utfxfgG+tOpFaXlOodP6dQ8jR/4Kxd8EfsXnq/RBl9Nn
AineQiisPtswRSzeBOX0WqrjBbfsGLJ+UfcLobxLJJ+KfdKW5d5anL1yR/l1VqGD
A6pxK8/R3K6mRRqP/xYIuKmF7pWbV6rqakquEJM2WKIN3uEOdJiMb/VB6AACwOmT
EF3ZTDzEDTdGailSpju5Hu+41HXciy3I9qGtWTCUgv7wW2Oq578z2Q4ieZWl/hiT
KILzCAz17CSZd2FqweEW5VjUjDYWjrQYiRydpn3fKtOa6vveuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBJxaQR53kAzrD0pgYq4jMKSGG/RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGI5NWU2NWYtMDlhOS0z
ZGJmLTg1MGMtODMwNzBjM2VhYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIm1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACi7fjs1Vg33Lp2ik3uxnQWUOIOz5e/rJTqdaASaKChS0GVmD120Ycai
bbnfpKqMscZRVIJu2uyf8piET49w/z98mH/bCfwEWu/3jxdLlAMXajVhH7O4rXgv
RtSBprGjTovsawEtj+yHYAUqcYMQHzNPQ8PiW29nVWxq0jG4osyLNXoQkW0pbqAr
/QJmeQeLymQdr/3FyoaUybfbqkgWlG2s67Sr4HUhlb36gaSPe1pjHvD0N/dAcnwy
knASvIN9lZIAG0ye9OuLmwteOBcFWsX6Mujx2to1NVNIM2So2xeRaX9B4er7hjCW
2mBMp+0j1YZUabTFe4FyCfU82GnIk1M=
-----END CERTIFICATE-----
Generated at Sat May 10 11:19:01 2025 by rpki-client