Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ff840cc-206f-3692-9a85-9c41676336c8.roa
File: 5ff840cc-206f-3692-9a85-9c41676336c8.roa (raw, json)
Hash identifier: FBTeMItx0NBb5EArL/Zyok0ktcCJ8BA581hScssTF5w=
Subject key identifier: 4B:81:80:73:5C:9A:5B:3F:95:21:9D:4B:6B:54:3D:C1:AE:22:19:8E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A2174D849B5D61DC84B0F8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ff840cc-206f-3692-9a85-9c41676336c8.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.130.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a2:17:4d:84:9b:5d:61:dc:84:b0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c2ac1120-1acc-4bac-b143-450543bbc93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:f4:9a:de:0c:f4:c8:f4:ed:71:28:d5:6d:
9d:83:2d:5a:72:6e:df:35:47:5f:1c:fe:b7:41:39:
43:c2:0a:2d:69:bf:30:34:9a:a9:2a:31:ab:be:13:
73:92:30:fc:4f:35:cd:1a:d9:b3:25:e0:2d:fa:f0:
eb:f2:20:30:02:97:9d:44:ba:38:dd:73:d5:0c:29:
7c:2d:02:30:86:22:23:86:9d:4a:c9:35:ee:36:71:
97:d4:32:f9:80:eb:76:96:5b:6e:56:1c:70:7f:24:
a5:11:a7:ed:5d:ae:fd:3c:1f:f3:f9:ee:09:ac:2d:
92:c4:ca:74:c2:0e:22:aa:51:fc:6f:16:d3:4c:fd:
5c:c2:a4:2c:16:ee:95:b8:59:97:b7:50:ec:fa:10:
9a:41:1a:76:ec:d3:41:06:ff:91:6f:2f:83:d6:f4:
8e:a1:10:7d:8c:44:77:86:b0:57:6c:ee:25:1d:08:
62:ee:f2:78:0b:22:f8:7f:bf:fe:cf:58:c1:85:86:
f2:6e:63:21:29:b1:00:93:27:01:0a:4a:51:1a:e6:
49:fc:03:8a:b1:2e:16:a1:47:18:69:7b:b1:9c:e2:
84:fb:b0:31:dd:3f:09:24:bd:b1:40:a2:01:a3:aa:
92:73:13:12:95:a2:0a:3d:1b:a0:ca:dc:18:93:2b:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:81:80:73:5C:9A:5B:3F:95:21:9D:4B:6B:54:3D:C1:AE:22:19:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ff840cc-206f-3692-9a85-9c41676336c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.130.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:21:15:92:4a:82:9f:49:77:87:b9:61:28:24:d6:91:71:7b:
8e:28:4f:5f:62:45:d5:37:a1:12:46:ff:2b:f2:e0:4d:5c:27:
99:0e:7d:f1:a3:3a:fe:85:54:c1:14:2f:8b:68:c1:2e:87:1c:
31:cd:34:89:47:3f:71:40:aa:e4:3a:76:b3:f3:26:4a:a5:7f:
95:2e:03:fc:23:5f:5a:a7:bf:4d:2f:dc:f0:bf:e7:5a:3f:27:
51:d4:f3:57:7f:1b:3a:7a:54:02:c4:b5:2c:97:8f:0f:28:2c:
1d:d6:c7:fc:16:af:7c:c7:66:27:22:a7:91:4a:bc:5e:e8:c6:
20:b0:03:e1:07:6e:40:a3:31:0c:e6:0f:0b:b2:31:da:99:9c:
fb:58:53:98:30:05:d2:99:9f:eb:c2:29:ae:3b:de:0c:7a:7f:
59:1a:bb:c1:de:27:6a:1c:f3:23:a8:44:46:4c:b6:ed:d5:5e:
d4:8a:62:53:65:2a:f9:b0:e7:9e:03:d7:33:8b:be:1e:5b:85:
a1:26:5f:b1:f5:29:e0:ae:7b:52:f4:4c:e3:fd:df:f1:12:a0:
f4:97:d7:a9:c0:90:08:b2:75:7f:9f:91:92:bb:44:d1:85:b9:
4d:97:00:ba:d6:f1:0b:d7:ae:21:a3:5b:01:d7:ad:c6:9d:5b:
d4:ed:51:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnohdNhJtdYdyEsPgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YzJhYzExMjAtMWFjYy00YmFjLWIxNDMtNDUwNTQzYmJjOTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmL0mt4M9Mj07XEo1W2dgy1acm7fNUdfHP63
QTlDwgotab8wNJqpKjGrvhNzkjD8TzXNGtmzJeAt+vDr8iAwApedRLo43XPVDCl8
LQIwhiIjhp1KyTXuNnGX1DL5gOt2lltuVhxwfySlEaftXa79PB/z+e4JrC2SxMp0
wg4iqlH8bxbTTP1cwqQsFu6VuFmXt1Ds+hCaQRp27NNBBv+Rby+D1vSOoRB9jER3
hrBXbO4lHQhi7vJ4CyL4f7/+z1jBhYbybmMhKbEAkycBCkpRGuZJ/AOKsS4WoUcY
aXuxnOKE+7Ax3T8JJL2xQKIBo6qScxMSlaIKPRugytwYkysqnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuBgHNcmls/lSGdS2tUPcGuIhmOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWZmODQwY2MtMjA2Zi0z
NjkyLTlhODUtOWM0MTY3NjMzNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI8hFZJKgp9Jd4e5YSgk1pFxe44oT19iRdU3oRJG/yvy4E1cJ5kOffGj
Ov6FVMEUL4towS6HHDHNNIlHP3FAquQ6drPzJkqlf5UuA/wjX1qnv00v3PC/51o/
J1HU81d/Gzp6VALEtSyXjw8oLB3Wx/wWr3zHZicip5FKvF7oxiCwA+EHbkCjMQzm
DwuyMdqZnPtYU5gwBdKZn+vCKa473gx6f1kau8HeJ2oc8yOoREZMtu3VXtSKYlNl
Kvmw554D1zOLvh5bhaEmX7H1KeCue1L0TOP93/ESoPSX16nAkAiydX+fkZK7RNGF
uU2XALrW8QvXriGjWwHXrcadW9TtUbw=
-----END CERTIFICATE-----
Generated at Sun May 11 16:41:09 2025 by rpki-client