Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7354f1-0bec-3923-b2d5-b5324988aa1a.roa
File: 5c7354f1-0bec-3923-b2d5-b5324988aa1a.roa (raw, json)
Hash identifier: qyuKoRDQ/nsnpQCFl3OH/LJraY1OI5wyCAhdoSK9Ggo=
Subject key identifier: EC:54:FB:45:7F:05:E2:6D:83:64:F7:EF:5E:53:83:CB:AB:2D:1B:BB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AADD93B8D684BB3F8932E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7354f1-0bec-3923-b2d5-b5324988aa1a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.99.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:aa:dd:93:b8:d6:84:bb:3f:89:32:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=1ce09ea5-b459-4fb3-be0c-eab18d27d116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:e2:93:72:37:e9:93:fd:e2:35:b7:70:c6:
ca:61:7e:de:41:ea:a5:0b:ae:04:b2:50:3c:33:e3:
b9:87:1d:11:17:b7:93:ea:ac:b1:4a:e2:9d:a6:57:
f5:da:ec:e8:60:02:a9:93:6d:fd:f8:3d:87:aa:bd:
1c:97:6b:2d:12:27:29:03:11:a4:b0:98:41:9b:c6:
69:89:41:d5:02:5b:f9:81:81:23:bd:8a:7e:e4:ef:
b1:09:1a:32:30:5b:f6:82:d3:ca:f1:bb:94:e8:4f:
1f:76:53:36:12:7d:4e:48:76:b4:d5:17:9f:c6:39:
14:d1:a3:cb:e0:d7:c8:a6:97:98:f2:de:81:14:b0:
70:18:a5:f7:b0:14:bd:15:22:ce:b5:29:cd:ef:11:
4e:78:2c:13:10:26:b3:9f:e0:9f:bd:80:95:fe:39:
cc:73:11:50:3c:3f:67:53:c7:9c:33:80:6d:d1:c8:
06:dd:4d:e8:c0:d2:64:9f:ff:cf:81:3c:ae:8f:eb:
3c:ae:c6:7f:4e:11:aa:06:37:c1:38:26:91:dd:28:
08:28:99:07:e8:94:2a:51:f9:72:d7:16:9e:df:d1:
42:61:23:75:be:1e:51:f6:94:95:cb:43:9b:05:22:
31:1c:8a:84:2d:2e:c2:97:fc:7f:eb:8e:eb:12:ff:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:54:FB:45:7F:05:E2:6D:83:64:F7:EF:5E:53:83:CB:AB:2D:1B:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7354f1-0bec-3923-b2d5-b5324988aa1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.99.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:9b:e9:09:09:62:0f:6e:60:4a:5e:b5:a2:d8:99:a1:5d:6f:
93:6d:65:55:c2:22:29:99:d0:8d:c0:a2:53:67:64:2f:79:fe:
14:9d:56:fd:ba:02:46:75:60:25:a6:7f:dd:c4:17:a2:79:3d:
e3:2e:4d:cb:c5:2c:fd:5e:e1:a9:b1:1f:68:f4:92:d4:6c:cc:
fa:a7:a2:bf:b0:b5:34:08:5d:75:10:cf:69:d2:e6:c1:f1:4b:
28:4d:d1:b7:98:f1:a7:5c:22:d2:86:2f:00:30:55:55:cb:9c:
e6:cc:2b:f3:24:88:ba:20:ad:14:31:ed:6f:1a:05:bb:f4:09:
ba:54:e2:f8:98:6b:39:02:29:39:dc:e0:64:4d:42:6c:79:a5:
b7:8a:9d:23:ce:80:64:d1:02:6d:af:5e:86:53:fa:b2:a7:63:
1f:af:4b:d6:12:f4:77:ff:4b:8d:e2:a1:b4:7f:10:28:91:d2:
9c:48:4a:6c:81:ca:50:9e:b2:74:ac:9f:3c:9d:ad:65:c7:48:
ae:74:ec:5d:01:e5:cd:fb:2d:35:b3:ee:b6:13:74:74:96:f2:
7b:cb:b9:ca:94:07:af:72:ff:a8:1f:c5:6b:e7:49:7e:42:16:
5f:1f:08:2c:d0:42:e2:c3:0b:e3:ee:e2:39:8c:c7:7e:a9:8b:
f0:24:e3:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqt2TuNaEuz+JMuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MWNlMDllYTUtYjQ1OS00ZmIzLWJlMGMtZWFiMThkMjdkMTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM3ik3I36ZP94jW3cMbKYX7eQeqlC64EslA8
M+O5hx0RF7eT6qyxSuKdplf12uzoYAKpk239+D2Hqr0cl2stEicpAxGksJhBm8Zp
iUHVAlv5gYEjvYp+5O+xCRoyMFv2gtPK8buU6E8fdlM2En1OSHa01RefxjkU0aPL
4NfIppeY8t6BFLBwGKX3sBS9FSLOtSnN7xFOeCwTECazn+CfvYCV/jnMcxFQPD9n
U8ecM4Bt0cgG3U3owNJkn//PgTyuj+s8rsZ/ThGqBjfBOCaR3SgIKJkH6JQqUfly
1xae39FCYSN1vh5R9pSVy0ObBSIxHIqELS7Cl/x/647rEv+5GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOxU+0V/BeJtg2T3715Tg8urLRu7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWM3MzU0ZjEtMGJlYy0z
OTIzLWIyZDUtYjUzMjQ5ODhhYTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyb6QkJYg9uYEpetaLYmaFdb5NtZVXCIimZ0I3AolNnZC95/hSdVv26
AkZ1YCWmf93EF6J5PeMuTcvFLP1e4amxH2j0ktRszPqnor+wtTQIXXUQz2nS5sHx
SyhN0beY8adcItKGLwAwVVXLnObMK/MkiLogrRQx7W8aBbv0CbpU4viYazkCKTnc
4GRNQmx5pbeKnSPOgGTRAm2vXoZT+rKnYx+vS9YS9Hf/S43iobR/ECiR0pxISmyB
ylCesnSsnzydrWXHSK507F0B5c37LTWz7rYTdHSW8nvLucqUB69y/6gfxWvnSX5C
Fl8fCCzQQuLDC+Pu4jmMx36pi/Ak48M=
-----END CERTIFICATE-----
Generated at Sat May 10 22:03:49 2025 by rpki-client