Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dabd3b6-32a2-3ea2-be88-1def12894212.roa
File: 4dabd3b6-32a2-3ea2-be88-1def12894212.roa (raw, json)
Hash identifier: S6Bo9GTPDri1zZI6hu+Rnal/eE99dWev71ndwyOBS4g=
Subject key identifier: A8:65:12:0A:11:8B:95:36:0C:C3:43:8D:20:5F:A8:EB:10:D0:55:72
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BE85C557B468193A2347D500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dabd3b6-32a2-3ea2-be88-1def12894212.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Sun 29 Sep 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.154.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:be:85:c5:57:b4:68:19:3a:23:47:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Sep 29 04:00:00 2024 GMT
Subject: CN=41671e13-2eb6-4277-ac4e-dee74a6ca1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:3c:b5:55:74:c8:0a:49:35:1e:8c:68:5a:
38:da:19:aa:89:ae:0a:29:6c:68:d1:f3:66:ae:07:
d6:fb:ca:01:38:9a:cd:0e:e2:25:82:bd:2b:21:9a:
ff:f8:01:41:63:ca:12:e4:21:fa:48:22:bb:a1:fe:
31:7e:0b:9d:c1:c4:bf:b7:94:19:88:d1:fd:33:40:
54:43:eb:38:29:44:55:47:15:f7:8a:23:70:5b:5c:
e4:a7:ae:34:4e:9d:37:b2:7a:6d:3c:16:f2:42:2c:
b5:f7:da:2c:20:74:b7:59:34:25:ab:5e:14:97:86:
68:19:de:3f:d3:70:ad:d8:08:70:6b:b3:7f:ec:bd:
ab:d1:8b:87:fd:b3:10:78:9b:20:a2:33:ba:0d:64:
e8:ef:50:8c:c2:cf:09:28:12:8d:ee:30:ea:94:9f:
c6:f7:64:54:8f:42:df:f0:50:39:2d:74:40:74:03:
28:e8:d8:f4:c4:17:6e:53:ce:b6:38:21:da:e3:4f:
45:76:3a:53:42:87:10:4c:8a:b4:1e:8e:f4:56:d1:
79:fc:a0:f7:2b:ec:80:ff:0a:f0:56:5f:cf:57:4a:
5b:45:95:c1:1b:62:48:8e:e1:7b:12:1c:af:26:db:
83:e1:13:5c:a4:0b:61:8b:e1:93:d0:22:e5:6c:5f:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:65:12:0A:11:8B:95:36:0C:C3:43:8D:20:5F:A8:EB:10:D0:55:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dabd3b6-32a2-3ea2-be88-1def12894212.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.154.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:67:92:e8:fc:ef:07:29:95:08:5f:88:77:b4:b3:4d:ed:1b:
07:b4:00:c2:b6:32:43:92:9f:38:5c:a7:65:18:3b:c8:94:d0:
50:c6:1a:5f:7a:80:90:0b:f4:da:66:44:96:c7:3f:7d:d1:e2:
fe:ed:0c:94:7d:c1:98:d4:8b:c1:80:80:be:9a:42:a8:d2:08:
0a:97:56:8e:c8:42:58:83:66:80:6d:34:a4:17:4a:cb:d6:7e:
9c:03:d6:7f:ee:d3:2e:cb:b2:77:2a:e7:61:aa:33:71:fb:e6:
1d:a9:4a:62:b1:a9:c0:d7:ab:cc:8d:78:41:34:b6:32:33:60:
d0:71:05:b4:25:ff:23:f4:7d:71:91:80:4e:2f:0a:82:56:05:
3e:0c:f9:90:64:28:90:a6:be:72:f5:5a:33:8a:46:b6:c4:72:
19:8c:c5:b2:12:0f:7f:00:2d:b1:66:58:e3:ed:a1:4b:d4:46:
1c:5b:3a:05:70:5c:a1:e5:02:9e:ca:be:ad:49:54:68:c2:3f:
15:40:7d:8b:9d:bd:67:3f:c4:84:05:ff:ca:fd:74:41:74:6f:
7b:4a:bf:e3:25:fc:a2:e0:34:73:0d:ba:d1:6f:17:d4:3f:0d:
44:0d:81:f0:72:82:8d:6e:1f:fc:06:a6:38:3f:df:56:ee:e5:
66:a1:69:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEK+hcVXtGgZOiNH1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDczMTEyMDAwMFoXDTI0MDkyOTA0MDAwMFowLzEtMCsGA1UEAxMk
NDE2NzFlMTMtMmViNi00Mjc3LWFjNGUtZGVlNzRhNmNhMWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kk8tVV0yApJNR6MaFo42hmqia4KKWxo0fNm
rgfW+8oBOJrNDuIlgr0rIZr/+AFBY8oS5CH6SCK7of4xfgudwcS/t5QZiNH9M0BU
Q+s4KURVRxX3iiNwW1zkp640Tp03snptPBbyQiy199osIHS3WTQlq14Ul4ZoGd4/
03Ct2Ahwa7N/7L2r0YuH/bMQeJsgojO6DWTo71CMws8JKBKN7jDqlJ/G92RUj0Lf
8FA5LXRAdAMo6Nj0xBduU862OCHa409FdjpTQocQTIq0Ho70VtF5/KD3K+yA/wrw
Vl/PV0pbRZXBG2JIjuF7EhyvJtuD4RNcpAthi+GT0CLlbF+5TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhlEgoRi5U2DMNDjSBfqOsQ0FVyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGRhYmQzYjYtMzJhMi0z
ZWEyLWJlODgtMWRlZjEyODk0MjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIppgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhnkuj87wcplQhfiHe0s03tGwe0AMK2MkOSnzhcp2UYO8iU0FDGGl96
gJAL9NpmRJbHP33R4v7tDJR9wZjUi8GAgL6aQqjSCAqXVo7IQliDZoBtNKQXSsvW
fpwD1n/u0y7Lsncq52GqM3H75h2pSmKxqcDXq8yNeEE0tjIzYNBxBbQl/yP0fXGR
gE4vCoJWBT4M+ZBkKJCmvnL1WjOKRrbEchmMxbISD38ALbFmWOPtoUvURhxbOgVw
XKHlAp7Kvq1JVGjCPxVAfYudvWc/xIQF/8r9dEF0b3tKv+Ml/KLgNHMNutFvF9Q/
DUQNgfBygo1uH/wGpjg/31bu5WahadM=
-----END CERTIFICATE-----
Generated at Sat May 10 22:23:39 2025 by rpki-client