Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60cc1a5a-aaf0-3982-ac02-a7751d7ef6da.roa
File: 60cc1a5a-aaf0-3982-ac02-a7751d7ef6da.roa (raw, json)
Hash identifier: nwWgMBtpaVgSwBn60TyAh7HH+uILLItQXKBxIHycQQE=
Subject key identifier: 5B:19:C3:33:6A:7C:06:4C:CA:80:E1:6A:F6:1E:48:BA:E4:05:4A:6D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C5A9B6C7B76FC7467C2F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60cc1a5a-aaf0-3982-ac02-a7751d7ef6da.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 34.96.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c5:a9:b6:c7:b7:6f:c7:46:7c:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=6f7218fc-07bb-4ae7-9037-0c2e44895992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:60:2c:be:8f:44:98:e3:74:61:ee:a6:29:
48:b5:0c:7f:bd:bb:ed:0e:09:99:38:46:fb:30:81:
7f:a8:0c:28:41:ce:28:0f:00:5e:df:ec:e1:04:8b:
c1:fd:fc:d6:a7:a6:7f:6f:7d:2d:0f:04:01:1b:af:
17:75:a4:d7:d8:d8:43:43:ef:0f:1c:89:7c:2a:cb:
34:62:fa:a8:e2:36:e3:61:52:84:4a:35:42:ad:72:
cb:a7:6f:9f:04:e8:98:b8:61:19:bb:b0:5b:0e:05:
72:2d:e9:1e:de:b7:52:4a:4f:ba:fe:c0:74:1a:b1:
cc:1b:0d:f5:41:92:c0:12:e0:f5:f0:57:c7:13:5b:
d7:b7:0e:50:ab:fe:f0:36:21:5b:8b:e4:a0:d7:80:
bd:e0:f4:be:ae:7e:b1:50:f7:df:d7:ef:31:b7:9f:
17:0f:48:83:81:0f:0e:9d:a1:82:60:ec:e0:4f:7f:
dd:a9:20:17:8b:53:4e:3c:39:cf:d3:26:56:7b:1d:
cf:30:f6:0e:f1:21:d0:ab:3e:cd:90:3c:c3:61:5a:
89:cc:7d:1b:35:c3:2f:9d:f7:59:04:f4:94:04:99:
4c:cb:66:32:1b:f6:12:47:0f:a3:76:94:ab:aa:e5:
bf:6b:2c:0c:ff:c7:88:38:02:c3:b7:b8:b3:d6:80:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:19:C3:33:6A:7C:06:4C:CA:80:E1:6A:F6:1E:48:BA:E4:05:4A:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60cc1a5a-aaf0-3982-ac02-a7751d7ef6da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.96.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:25:a4:9c:2a:ac:12:3d:da:ff:af:91:2a:a8:73:e3:74:bc:
c7:6c:3c:9f:38:f0:2f:1c:58:7c:be:3e:60:ed:09:4e:58:b4:
47:30:8b:4f:a1:f2:22:cb:e7:75:d2:9c:59:65:ef:b9:17:cc:
c7:7d:bc:fc:4a:42:71:0f:e9:bb:74:11:f5:35:5c:39:e6:95:
ae:18:5e:4b:a3:1f:1b:f2:17:12:29:f3:1a:1d:55:65:bf:21:
a2:1c:79:b1:95:30:4d:74:a5:5d:36:e7:6a:13:02:ce:58:7b:
2b:4f:c2:2a:61:0c:f6:79:b5:60:cb:dd:3f:4c:c3:68:80:b9:
7f:48:c4:59:33:d1:0a:d0:53:8b:df:66:14:59:43:07:b4:e5:
a5:56:19:86:38:0d:61:8d:c4:49:0a:fb:27:b0:cf:be:1c:fb:
48:19:df:1c:87:00:27:f7:28:e8:9f:01:68:32:fa:1a:d7:2e:
28:e4:51:20:00:5f:85:9d:f3:6a:f4:f5:28:15:78:84:4b:02:
2c:7e:1d:fd:42:36:e9:52:d9:40:b9:87:84:97:88:b4:7f:0a:
f1:3a:48:d9:38:1b:dd:76:5c:e6:df:3c:ed:65:20:f6:02:4a:
26:7d:a6:0c:d0:ae:41:5a:63:06:4d:66:da:c0:3b:8e:45:ec:
c9:b9:10:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnxam2x7dvx0Z8L4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NmY3MjE4ZmMtMDdiYi00YWU3LTkwMzctMGMyZTQ0ODk1OTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGZgLL6PRJjjdGHupilItQx/vbvtDgmZOEb7
MIF/qAwoQc4oDwBe3+zhBIvB/fzWp6Z/b30tDwQBG68XdaTX2NhDQ+8PHIl8Kss0
Yvqo4jbjYVKESjVCrXLLp2+fBOiYuGEZu7BbDgVyLeke3rdSSk+6/sB0GrHMGw31
QZLAEuD18FfHE1vXtw5Qq/7wNiFbi+Sg14C94PS+rn6xUPff1+8xt58XD0iDgQ8O
naGCYOzgT3/dqSAXi1NOPDnP0yZWex3PMPYO8SHQqz7NkDzDYVqJzH0bNcMvnfdZ
BPSUBJlMy2YyG/YSRw+jdpSrquW/aywM/8eIOALDt7iz1oD7GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsZwzNqfAZMyoDhavYeSLrkBUptMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjBjYzFhNWEtYWFmMC0z
OTgyLWFjMDItYTc3NTFkN2VmNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHImCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0lpJwqrBI92v+vkSqoc+N0vMdsPJ848C8cWHy+PmDtCU5YtEcwi0+h
8iLL53XSnFll77kXzMd9vPxKQnEP6bt0EfU1XDnmla4YXkujHxvyFxIp8xodVWW/
IaIcebGVME10pV0252oTAs5YeytPwiphDPZ5tWDL3T9Mw2iAuX9IxFkz0QrQU4vf
ZhRZQwe05aVWGYY4DWGNxEkK+yewz74c+0gZ3xyHACf3KOifAWgy+hrXLijkUSAA
X4Wd82r09SgVeIRLAix+Hf1CNulS2UC5h4SXiLR/CvE6SNk4G912XObfPO1lIPYC
SiZ9pgzQrkFaYwZNZtrAO45F7Mm5EDw=
-----END CERTIFICATE-----
Generated at Sat May 10 14:43:39 2025 by rpki-client