Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5859dcb9-a45e-365f-9d02-aacda434e00d.roa
File: 5859dcb9-a45e-365f-9d02-aacda434e00d.roa (raw, json)
Hash identifier: VgxfK7oPIx+xxI6RkoQaBKGoaBS+Hai8m6gCChxULsY=
Subject key identifier: 9A:B9:2D:10:74:3C:D8:CD:4E:13:D9:73:00:4A:A1:8D:8F:9C:11:61
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285844720A8C5A4A3F655E61B6EE68
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5859dcb9-a45e-365f-9d02-aacda434e00d.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 396982
IP address blocks: 34.167.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:8c:5a:4a:3f:65:5e:61:b6:ee:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=c61a8f8c-7187-47ef-a738-21a1cc332a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:31:31:53:8b:f0:a7:40:1b:51:07:83:ac:
b8:36:c5:2a:8a:07:b2:25:29:99:33:82:b8:69:70:
b3:a8:3e:af:00:86:7d:5d:07:4a:99:be:8f:57:e2:
d9:d4:69:a1:33:31:98:34:25:4c:96:3e:59:8f:ea:
da:18:3f:35:b1:bc:74:ae:4a:99:93:ea:52:78:ab:
58:7e:94:b6:37:d3:d2:aa:1c:24:67:b8:83:ff:70:
b3:af:ad:6f:64:85:79:95:f3:a4:cb:4c:89:7b:9c:
f5:be:6f:d7:22:d1:22:72:49:45:fa:33:a6:8c:96:
54:cd:29:ad:af:31:1a:52:b8:d4:14:96:3d:29:15:
71:5a:c3:0b:75:c7:6a:05:81:b9:58:2e:b5:f4:26:
8d:05:8d:52:41:76:a1:1f:c1:7a:49:8f:b7:d9:f7:
16:ab:8a:a3:a5:12:52:8d:f8:82:23:3d:54:6e:9b:
1c:1a:38:86:96:7a:ed:79:92:77:b6:97:7a:ef:cd:
6c:5a:f2:d9:64:54:eb:50:8b:6b:51:a6:19:d2:27:
23:5e:f2:37:f2:9c:4b:da:3f:8a:2d:10:89:8c:aa:
ac:b4:0a:94:b4:ae:02:73:56:1b:60:0b:93:ce:d1:
62:f9:bc:cd:6d:da:98:71:1b:cb:6c:23:1a:14:5b:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B9:2D:10:74:3C:D8:CD:4E:13:D9:73:00:4A:A1:8D:8F:9C:11:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5859dcb9-a45e-365f-9d02-aacda434e00d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:61:d4:ff:19:cf:ab:a2:e5:12:a2:55:5e:aa:20:c3:aa:2b:
13:11:3a:00:65:08:75:93:4c:4a:e0:be:bb:8a:a8:3c:d2:60:
17:08:ce:ad:23:84:0e:20:73:9b:d6:ae:b7:76:b9:6f:65:a8:
15:1b:36:40:07:29:3f:f8:92:6f:4c:6d:ff:bf:3c:86:4f:de:
1e:78:eb:0d:b8:8a:42:a6:cb:e9:70:43:0d:d9:3c:f8:aa:f2:
8b:ee:4a:df:12:31:44:be:99:0f:61:02:cc:8b:a9:75:85:07:
bb:e5:81:2e:a2:a4:cd:80:1d:11:62:15:99:f0:32:40:14:d4:
75:e1:87:91:59:0e:25:49:85:d7:48:8d:a9:73:87:a8:ca:50:
6a:ed:37:5e:4a:b9:83:03:75:8f:45:a4:62:a6:18:3a:f3:24:
4e:05:c0:6f:1a:51:e0:d9:5c:a0:94:3d:a5:3f:db:78:32:6d:
8e:78:cd:6a:8d:fe:0e:d0:3e:9c:fb:6d:0a:a8:34:12:9d:59:
18:21:6e:91:c6:ed:06:a1:78:09:36:b6:18:ff:44:50:ea:e9:
66:8a:d8:75:24:85:87:b1:92:77:07:0f:eb:e0:d2:42:b5:84:
a4:69:32:f2:f7:c7:5c:08:ee:19:a0:e5:f6:c5:ab:7f:eb:f0:
b3:cd:02:1e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWERyCoxaSj9lXmG27mgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDEwMzEyMDAwMFoXDTI1MDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
YzYxYThmOGMtNzE4Ny00N2VmLWE3MzgtMjFhMWNjMzMyYTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGsxMVOL8KdAG1EHg6y4NsUqigeyJSmZM4K4
aXCzqD6vAIZ9XQdKmb6PV+LZ1GmhMzGYNCVMlj5Zj+raGD81sbx0rkqZk+pSeKtY
fpS2N9PSqhwkZ7iD/3Czr61vZIV5lfOky0yJe5z1vm/XItEicklF+jOmjJZUzSmt
rzEaUrjUFJY9KRVxWsMLdcdqBYG5WC619CaNBY1SQXahH8F6SY+32fcWq4qjpRJS
jfiCIz1UbpscGjiGlnrteZJ3tpd6781sWvLZZFTrUItrUaYZ0icjXvI38pxL2j+K
LRCJjKqstAqUtK4Cc1YbYAuTztFi+bzNbdqYcRvLbCMaFFuniwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJq5LRB0PNjNThPZcwBKoY2PnBFhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg1OWRjYjktYTQ1ZS0z
NjVmLTlkMDItYWFjZGE0MzRlMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWmHU/xnPq6LlEqJVXqogw6orExE6AGUIdZNMSuC+u4qoPNJgFwjOrSOE
DiBzm9aut3a5b2WoFRs2QAcpP/iSb0xt/788hk/eHnjrDbiKQqbL6XBDDdk8+Kry
i+5K3xIxRL6ZD2ECzIupdYUHu+WBLqKkzYAdEWIVmfAyQBTUdeGHkVkOJUmF10iN
qXOHqMpQau03Xkq5gwN1j0WkYqYYOvMkTgXAbxpR4NlcoJQ9pT/beDJtjnjNao3+
DtA+nPttCqg0Ep1ZGCFukcbtBqF4CTa2GP9EUOrpZorYdSSFh7GSdwcP6+DSQrWE
pGky8vfHXAjuGaDl9sWrf+vws80CHg==
-----END CERTIFICATE-----
Generated at Sat May 10 11:31:51 2025 by rpki-client