Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/539364fc-f141-30a1-adf2-c1e1e5ee75d3.roa
File: 539364fc-f141-30a1-adf2-c1e1e5ee75d3.roa (raw, json)
Hash identifier: 5GlCtJXbGiODqQMYS+F6zPTstuK0UoJQTl6GJ7Y5rHE=
Subject key identifier: 29:6B:7E:F5:8F:C0:A0:26:AB:97:17:EF:37:E9:B3:F2:8D:6E:0A:8F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285844720B4697914510EF9CA9C580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/539364fc-f141-30a1-adf2-c1e1e5ee75d3.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 396982
IP address blocks: 34.168.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0b:46:97:91:45:10:ef:9c:a9:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=3525eef6-4cc1-4878-82fa-c5d1d9b03d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:a0:d4:f8:b8:df:88:0d:75:ce:77:4f:c2:
c9:a0:07:ed:61:bd:a6:74:4f:5f:d4:de:da:87:a6:
46:3f:86:fe:73:a3:0f:ac:5e:90:ce:92:1e:67:1e:
e4:e7:26:bd:34:2a:37:9c:47:61:0e:bd:cf:b9:af:
af:ca:ed:78:13:18:7e:e9:5d:56:8c:fb:ff:f6:fd:
e0:b9:e2:0a:14:0f:87:b1:0b:ea:e0:a3:1a:e1:b3:
ec:f2:06:60:a3:9d:c9:9d:77:9f:a9:3b:27:62:e2:
d8:0d:8c:36:99:8e:ad:44:77:a7:ca:b8:e9:74:6a:
d6:52:cf:26:4a:8b:39:a3:e5:07:f2:72:8c:37:3c:
17:c4:fb:f3:57:2e:ca:b9:7e:92:0a:5e:68:10:7d:
ac:e4:9d:f0:c0:a4:b8:75:ac:a9:e8:60:df:27:98:
26:a8:a2:e1:aa:50:33:0c:96:fc:98:d1:09:cd:4d:
14:96:c9:d7:47:42:7b:71:04:94:43:84:cc:f1:e7:
ff:60:99:24:14:8f:8d:a0:8f:11:b6:e2:03:e4:18:
26:83:62:2e:95:17:bc:e8:7d:75:72:83:7a:98:32:
d0:68:9f:b2:6b:48:64:4b:a0:ad:8c:7b:90:01:6b:
f1:16:b8:b8:be:0c:56:8e:95:d4:0e:c1:5d:48:31:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6B:7E:F5:8F:C0:A0:26:AB:97:17:EF:37:E9:B3:F2:8D:6E:0A:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/539364fc-f141-30a1-adf2-c1e1e5ee75d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:cd:97:2d:34:29:51:a0:70:0a:f7:0b:8d:e9:e4:bd:9a:d6:
e4:e4:08:d0:8d:9e:91:2d:cc:70:44:b4:28:65:65:b2:99:ec:
0b:e9:79:e2:c1:9e:99:28:88:32:6a:27:42:e5:23:d4:b5:76:
ee:a1:bc:df:25:4f:b1:98:f7:bb:6c:a4:1a:80:de:b2:59:2b:
4a:44:5d:b2:9c:3a:c5:d7:39:30:5b:e5:26:b6:7c:cd:5e:f5:
94:d5:41:1d:82:73:7e:f3:ef:9b:bb:95:64:e0:17:9d:74:d9:
64:eb:39:68:0f:b7:01:e3:d3:93:35:c0:87:51:06:82:44:1f:
5c:53:10:5a:06:ac:39:38:cd:7f:db:6a:8d:2b:55:52:56:e0:
94:37:ec:f8:c2:a1:69:09:a2:22:21:58:ca:9f:a1:3a:bd:fd:
5c:d5:99:94:d7:38:6c:8c:b3:85:82:34:fa:f8:96:23:43:e2:
48:86:88:3e:82:e5:ac:e2:ca:f5:a8:3d:ff:3a:77:df:18:4c:
62:b2:6a:c0:25:a4:16:ae:6c:04:92:dc:64:aa:53:5d:89:b0:
41:4a:1f:56:09:9d:2c:ec:16:e7:e4:a0:ca:c9:e0:e3:89:2b:
92:b7:d8:29:02:35:3c:4f:ac:47:6e:31:8e:61:c7:18:62:91:
2a:fe:86:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERyC0aXkUUQ75ypxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDEwMzEyMDAwMFoXDTI1MDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
MzUyNWVlZjYtNGNjMS00ODc4LTgyZmEtYzVkMWQ5YjAzZDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AKg1Pi434gNdc53T8LJoAftYb2mdE9f1N7a
h6ZGP4b+c6MPrF6QzpIeZx7k5ya9NCo3nEdhDr3Pua+vyu14Exh+6V1WjPv/9v3g
ueIKFA+HsQvq4KMa4bPs8gZgo53JnXefqTsnYuLYDYw2mY6tRHenyrjpdGrWUs8m
Sos5o+UH8nKMNzwXxPvzVy7KuX6SCl5oEH2s5J3wwKS4dayp6GDfJ5gmqKLhqlAz
DJb8mNEJzU0UlsnXR0J7cQSUQ4TM8ef/YJkkFI+NoI8RtuID5Bgmg2IulRe86H11
coN6mDLQaJ+ya0hkS6CtjHuQAWvxFri4vgxWjpXUDsFdSDH2twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFClrfvWPwKAmq5cX7zfps/KNbgqPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTM5MzY0ZmMtZjE0MS0z
MGExLWFkZjItYzFlMWU1ZWU3NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDNly00KVGgcAr3C43p5L2a1uTkCNCNnpEtzHBEtChlZbKZ7AvpeeLB
npkoiDJqJ0LlI9S1du6hvN8lT7GY97tspBqA3rJZK0pEXbKcOsXXOTBb5Sa2fM1e
9ZTVQR2Cc37z75u7lWTgF5102WTrOWgPtwHj05M1wIdRBoJEH1xTEFoGrDk4zX/b
ao0rVVJW4JQ37PjCoWkJoiIhWMqfoTq9/VzVmZTXOGyMs4WCNPr4liND4kiGiD6C
5aziyvWoPf86d98YTGKyasAlpBaubASS3GSqU12JsEFKH1YJnSzsFufkoMrJ4OOJ
K5K32CkCNTxPrEduMY5hxxhikSr+hgo=
-----END CERTIFICATE-----
Generated at Sat May 10 11:45:32 2025 by rpki-client