Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64c9adb9-12f1-37b5-91ec-c8df184012c4.roa
File: 64c9adb9-12f1-37b5-91ec-c8df184012c4.roa (raw, json)
Hash identifier: hlmF1pLSWgr6L8WAD6iQfTJK42FZMWhY/tqFScZAvUs=
Subject key identifier: 98:48:4E:91:DD:33:70:E3:31:7E:7C:AE:16:5D:29:31:66:E4:E7:4B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583CAC3134C93114CCEB648F5CF0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64c9adb9-12f1-37b5-91ec-c8df184012c4.roa
Signing time: Fri 21 Jan 2022 05:00:00 +0000
ROA not before: Fri 21 Jan 2022 05:00:00 +0000
ROA not after: Wed 24 Apr 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.174.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ac:31:34:c9:31:14:cc:eb:64:8f:5c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 21 05:00:00 2022 GMT
Not After : Apr 24 04:00:00 2024 GMT
Subject: CN=9cf6a108-8314-4fc2-af9b-e7bb233653f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:5b:16:03:50:2d:20:54:e7:5f:c8:1d:2a:
b8:56:67:00:b9:36:b9:60:d4:b1:af:9a:f4:44:fe:
ee:66:4c:94:bf:1c:bf:20:ab:c7:d2:c8:8f:08:08:
fb:25:3d:00:ff:b9:72:19:7a:58:3f:6b:8d:8e:74:
60:68:f5:f9:9f:bc:f2:40:81:e2:8d:c2:2f:c2:2e:
a6:64:c6:9f:9d:72:f3:17:a3:47:d5:d8:9d:8c:73:
2f:83:d2:2b:f4:62:62:c5:7f:a5:61:6c:52:08:db:
ef:b5:4a:f8:26:61:ac:b4:70:00:be:9f:6b:33:f7:
31:cc:f1:8d:47:ff:08:67:ca:1c:f6:14:4e:2c:cf:
1a:1d:1b:da:38:35:5a:32:d1:1e:42:59:19:b0:cb:
d1:f9:9e:76:de:11:f4:eb:d6:56:76:79:fc:73:bf:
00:fa:4e:ff:86:81:bb:16:44:fe:8b:27:93:6a:8c:
3f:54:74:52:74:c2:c3:41:57:75:3c:34:2a:00:a2:
aa:d9:4a:95:14:d5:50:25:3c:98:94:90:17:22:60:
94:c5:ca:be:cd:b3:04:e2:7a:78:18:6c:16:5a:88:
36:3f:d0:02:c5:78:a0:4b:2c:02:cd:90:a7:09:19:
d2:29:98:6c:f7:d3:58:36:2a:0c:60:a0:a0:86:5f:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:48:4E:91:DD:33:70:E3:31:7E:7C:AE:16:5D:29:31:66:E4:E7:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64c9adb9-12f1-37b5-91ec-c8df184012c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:71:c3:ba:25:96:55:b2:78:2a:16:be:6a:ab:f7:67:8f:90:
10:32:ca:62:c2:cd:48:a1:db:2a:96:fe:27:5c:93:92:a8:a5:
06:00:f4:67:89:fe:1e:d9:99:58:fc:59:7c:42:19:48:ff:5c:
19:12:f7:86:e3:b2:94:b8:f7:b4:06:77:01:b6:1c:21:c5:74:
7f:98:7e:89:d3:05:dd:0d:cf:6a:0f:78:23:b4:eb:80:10:2f:
0c:46:af:cf:c4:fd:ab:ca:98:82:36:f8:09:40:e5:25:4f:62:
61:1f:ee:ae:1e:27:f5:83:83:1e:78:f9:42:42:70:aa:94:ca:
e4:32:c4:3f:6e:45:92:0f:77:21:0f:0b:2d:e6:13:8f:ba:2d:
1d:bd:ea:03:3e:f3:f0:00:3a:dd:ec:de:69:9f:23:3c:1b:60:
86:fe:64:47:cd:95:af:ba:86:da:d3:53:66:3c:e0:b2:ab:bc:
6e:8a:76:e0:84:db:94:a3:db:41:29:9f:29:a6:3a:3d:35:81:
f5:b6:28:97:40:00:2d:e4:85:a4:f5:7a:79:fd:47:05:27:a4:
ca:bc:86:f0:10:41:f2:69:de:e2:0e:49:dd:0e:35:62:92:82:
7b:f9:9f:9d:7f:f4:11:f1:24:06:7c:41:41:a5:33:08:73:2a:
71:b7:f3:60
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDysMTTJMRTM62SPXPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIyMDEyMTA1MDAwMFoXDTI0MDQyNDA0MDAwMFowLzEtMCsGA1UEAxMk
OWNmNmExMDgtODMxNC00ZmMyLWFmOWItZTdiYjIzMzY1M2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswxbFgNQLSBU51/IHSq4VmcAuTa5YNSxr5r0
RP7uZkyUvxy/IKvH0siPCAj7JT0A/7lyGXpYP2uNjnRgaPX5n7zyQIHijcIvwi6m
ZMafnXLzF6NH1didjHMvg9Ir9GJixX+lYWxSCNvvtUr4JmGstHAAvp9rM/cxzPGN
R/8IZ8oc9hROLM8aHRvaODVaMtEeQlkZsMvR+Z523hH069ZWdnn8c78A+k7/hoG7
FkT+iyeTaow/VHRSdMLDQVd1PDQqAKKq2UqVFNVQJTyYlJAXImCUxcq+zbME4np4
GGwWWog2P9ACxXigSywCzZCnCRnSKZhs99NYNioMYKCghl9A6wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJhITpHdM3DjMX58rhZdKTFm5OdLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjRjOWFkYjktMTJmMS0z
N2I1LTkxZWMtYzhkZjE4NDAxMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIq4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbXHDuiWWVbJ4Kha+aqv3Z4+QEDLKYsLNSKHbKpb+J1yTkqilBgD0Z4n+
HtmZWPxZfEIZSP9cGRL3huOylLj3tAZ3AbYcIcV0f5h+idMF3Q3Pag94I7TrgBAv
DEavz8T9q8qYgjb4CUDlJU9iYR/urh4n9YODHnj5QkJwqpTK5DLEP25Fkg93IQ8L
LeYTj7otHb3qAz7z8AA63ezeaZ8jPBtghv5kR82Vr7qG2tNTZjzgsqu8bop24ITb
lKPbQSmfKaY6PTWB9bYol0AALeSFpPV6ef1HBSekyryG8BBB8mne4g5J3Q41YpKC
e/mfnX/0EfEkBnxBQaUzCHMqcbfzYA==
-----END CERTIFICATE-----
Generated at Sat May 10 12:59:11 2025 by rpki-client