Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c839694-ae99-3584-a05c-e5ec2f28b929.roa
File: 4c839694-ae99-3584-a05c-e5ec2f28b929.roa (raw, json)
Hash identifier: mYAvYiDXxKIBAIVWm0Yim8SH3shJ+qa7oEfy2XIrxfE=
Subject key identifier: 3E:B7:79:B8:63:46:19:97:C0:D1:C1:5F:75:71:B8:67:FC:E9:3F:EC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6BFF050F311D49F7E280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c839694-ae99-3584-a05c-e5ec2f28b929.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.96.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6b:ff:05:0f:31:1d:49:f7:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=ba7474bf-0724-49a5-932c-70766ce14cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:29:fc:34:76:c8:37:60:88:a7:32:db:41:
b7:eb:fd:39:ed:1b:66:b1:4b:bf:f8:ac:ed:90:40:
9d:77:88:d6:29:54:f8:d9:73:a2:6f:df:a0:08:84:
4d:4f:6b:9a:80:14:5a:2e:40:33:c6:b6:e2:2b:b1:
ad:3f:34:5a:34:52:14:50:83:e4:58:f9:a8:75:a3:
94:99:5b:14:e2:98:e2:2c:5c:0a:7b:d7:91:f1:79:
fa:ad:19:93:71:3d:e9:7e:3f:4d:35:23:c0:40:e5:
f6:22:3b:a6:7e:95:70:72:c4:aa:59:fa:b3:c0:99:
ea:e7:e6:f1:7d:22:d1:12:d1:a2:0c:05:8b:8c:66:
25:32:15:64:1f:01:51:6e:f7:eb:65:2f:ee:fd:44:
82:e1:90:c9:4f:48:a6:d0:f2:cf:1c:1b:a0:3f:d8:
a0:5e:70:d3:dd:55:4a:d1:df:e0:ee:39:b4:b6:08:
d3:7e:0c:47:d1:20:c9:b5:15:fc:c3:26:6c:d6:6a:
d1:1d:58:82:9d:4b:41:bd:07:ad:2d:82:6c:06:c6:
8d:d2:06:de:84:bd:77:fa:d4:d1:14:08:04:23:0e:
7f:88:64:6c:3e:fa:29:d9:47:00:a5:96:94:9b:c1:
75:42:61:ee:b7:50:61:e7:74:88:b4:db:73:ff:2d:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:79:B8:63:46:19:97:C0:D1:C1:5F:75:71:B8:67:FC:E9:3F:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c839694-ae99-3584-a05c-e5ec2f28b929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.96.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:24:19:ac:60:43:a2:ea:2e:74:c0:f9:d9:69:09:7e:99:08:
f8:6e:dc:ce:8b:21:7b:2b:ba:d3:af:bb:19:11:7a:35:52:38:
17:c6:fb:48:9f:0e:f3:fd:1a:38:3b:70:36:04:2c:67:68:40:
b1:21:4b:69:57:25:ba:6d:bb:02:be:f2:7d:1c:7e:a7:87:26:
6a:bd:dc:32:66:7e:da:a1:e2:e3:32:83:1d:3b:61:37:41:df:
b8:ea:c9:4c:f8:0d:0b:a6:f6:4b:41:52:68:20:20:63:cf:d6:
3c:e6:fb:62:bb:da:8d:1a:29:9b:ab:1b:2b:f1:f4:ed:f9:b7:
a3:db:2b:c3:41:d5:4e:53:21:3b:07:fc:60:92:81:e7:da:c9:
5c:50:1a:e4:8e:63:5b:f1:08:4d:04:7b:b8:a2:fb:98:1c:3b:
d2:15:d8:3c:a9:ab:8f:1f:44:9b:9d:58:af:79:e5:3c:84:7c:
b5:3b:db:5c:51:ad:92:e8:06:13:23:a1:81:38:78:50:17:77:
43:82:84:8c:87:56:42:00:99:f1:7e:92:87:98:f1:a4:f1:dd:
bb:db:03:c5:56:db:7e:ec:76:12:ed:7a:0a:35:9c:ae:c5:b1:
11:7e:66:fb:d5:d5:e0:0d:59:ab:ec:dd:47:b7:b3:11:14:9c:
e5:7d:6c:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/Smv/BQ8xHUn34oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
YmE3NDc0YmYtMDcyNC00OWE1LTkzMmMtNzA3NjZjZTE0Y2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcop/DR2yDdgiKcy20G36/057RtmsUu/+Kzt
kECdd4jWKVT42XOib9+gCIRNT2uagBRaLkAzxrbiK7GtPzRaNFIUUIPkWPmodaOU
mVsU4pjiLFwKe9eR8Xn6rRmTcT3pfj9NNSPAQOX2IjumfpVwcsSqWfqzwJnq5+bx
fSLREtGiDAWLjGYlMhVkHwFRbvfrZS/u/USC4ZDJT0im0PLPHBugP9igXnDT3VVK
0d/g7jm0tgjTfgxH0SDJtRX8wyZs1mrRHViCnUtBvQetLYJsBsaN0gbehL13+tTR
FAgEIw5/iGRsPvop2UcApZaUm8F1QmHut1Bh53SItNtz/y2VlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD63ebhjRhmXwNHBX3VxuGf86T/sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGM4Mzk2OTQtYWU5OS0z
NTg0LWEwNWMtZTVlYzJmMjhiOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHImCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADokGaxgQ6LqLnTA+dlpCX6ZCPhu3M6LIXsrutOvuxkRejVSOBfG+0if
DvP9Gjg7cDYELGdoQLEhS2lXJbptuwK+8n0cfqeHJmq93DJmftqh4uMygx07YTdB
37jqyUz4DQum9ktBUmggIGPP1jzm+2K72o0aKZurGyvx9O35t6PbK8NB1U5TITsH
/GCSgefayVxQGuSOY1vxCE0Ee7ii+5gcO9IV2Dypq48fRJudWK955TyEfLU721xR
rZLoBhMjoYE4eFAXd0OChIyHVkIAmfF+koeY8aTx3bvbA8VW237sdhLtego1nK7F
sRF+ZvvV1eANWavs3Ue3sxEUnOV9bDM=
-----END CERTIFICATE-----
Generated at Sat May 10 11:34:39 2025 by rpki-client