Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6872c5c3-f2cd-3984-9ee0-fe2813a0f953.roa
File: 6872c5c3-f2cd-3984-9ee0-fe2813a0f953.roa (raw, json)
Hash identifier: CzhoV/O16+DzUwiPuFYNmpljJoDwt1WixzVcDtxCGvU=
Subject key identifier: B4:31:26:6C:12:33:07:0E:82:76:4C:26:00:1F:73:8C:5A:FB:CA:EE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285844720AD6552E6CFF4F7C756E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6872c5c3-f2cd-3984-9ee0-fe2813a0f953.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 396982
IP address blocks: 34.170.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:d6:55:2e:6c:ff:4f:7c:75:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=d0f04306-d5c6-4447-b6d4-cb7dad380d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:b8:91:cd:2f:ac:3d:8a:de:42:73:bf:3d:
0d:2a:41:f3:69:90:ab:7b:b2:0e:f1:c2:e4:ed:a5:
21:d0:d3:05:39:72:3d:cd:3f:25:c8:23:4f:6f:0c:
fa:57:f3:65:52:75:6b:db:90:9d:80:60:de:98:7c:
00:85:2b:18:3b:bf:02:90:0c:ca:a9:1b:69:8d:4d:
0e:6c:28:ca:16:3e:02:30:16:84:65:bf:e4:3e:9a:
6a:53:a8:4b:2e:58:00:9b:ae:8b:f7:f7:5b:79:fb:
e6:20:77:e3:e5:8e:85:6c:2d:4e:52:6f:08:a5:6d:
31:b8:4a:ee:a8:e6:e9:e6:e7:11:ea:fe:cc:51:10:
21:1a:c0:3b:1c:5c:64:41:e9:cf:52:28:78:69:9b:
ce:8a:9a:e3:3b:b9:d1:53:41:ad:4b:13:de:90:33:
5f:56:20:25:79:98:6c:32:9e:a4:3c:b9:e2:58:9e:
53:16:d7:53:3c:3b:e1:14:3c:bd:88:3d:0d:d4:8e:
c9:3e:9d:dd:a4:1b:97:55:6f:ac:aa:01:f7:1b:f5:
dd:20:59:b3:f0:d7:18:d8:38:6b:5c:19:5b:7a:b1:
09:a5:70:e8:02:8e:fd:95:90:56:63:76:4d:f5:a1:
2d:d2:fd:82:5e:51:07:b7:f4:e1:a9:f7:cd:7f:7f:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:31:26:6C:12:33:07:0E:82:76:4C:26:00:1F:73:8C:5A:FB:CA:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6872c5c3-f2cd-3984-9ee0-fe2813a0f953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.170.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:2a:d5:5b:23:34:27:68:6d:64:47:5f:97:bf:93:dc:d7:5f:
00:1f:3c:7f:3c:c2:e2:82:6a:56:d3:b3:f6:e2:2e:30:5d:f8:
82:d0:78:84:d8:fe:0f:66:7a:24:42:ee:d8:64:dd:d1:03:56:
e5:c0:d0:36:c8:50:69:47:22:96:dd:a1:08:7c:03:48:ec:1d:
59:81:e4:52:4e:39:08:8b:9e:f0:89:c5:76:a0:04:9b:21:5a:
41:c9:04:77:9b:a6:f7:14:34:ef:45:98:2b:26:96:2b:ae:fc:
b7:26:c8:97:fb:a3:02:bd:83:15:55:de:fc:29:4a:a3:70:32:
d6:90:ab:9a:b4:28:76:69:43:fd:07:ee:84:7f:6a:5c:23:9d:
6d:7d:ed:15:c8:75:95:96:f1:94:a3:fe:ac:87:61:28:cb:8d:
28:a2:8b:7d:44:5d:27:84:41:47:7b:50:23:e1:82:5a:4e:c9:
11:c4:ae:6c:f6:ce:c2:3e:63:a7:7c:01:59:10:d2:6c:af:cf:
39:97:bb:38:dd:e5:3d:e6:1d:3a:35:c3:99:67:c1:f5:51:e2:
ef:c7:85:1f:09:c9:99:d7:cf:1b:25:9a:a2:13:d2:36:e4:cb:
c1:d1:7a:5e:de:73:3b:17:f5:2a:b5:fc:0c:b4:3d:c9:c6:bf:
8b:02:22:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERyCtZVLmz/T3x1bgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDEwMzEyMDAwMFoXDTI1MDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZDBmMDQzMDYtZDVjNi00NDQ3LWI2ZDQtY2I3ZGFkMzgwZDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R+4kc0vrD2K3kJzvz0NKkHzaZCre7IO8cLk
7aUh0NMFOXI9zT8lyCNPbwz6V/NlUnVr25CdgGDemHwAhSsYO78CkAzKqRtpjU0O
bCjKFj4CMBaEZb/kPppqU6hLLlgAm66L9/dbefvmIHfj5Y6FbC1OUm8IpW0xuEru
qObp5ucR6v7MURAhGsA7HFxkQenPUih4aZvOiprjO7nRU0GtSxPekDNfViAleZhs
Mp6kPLniWJ5TFtdTPDvhFDy9iD0N1I7JPp3dpBuXVW+sqgH3G/XdIFmz8NcY2Dhr
XBlberEJpXDoAo79lZBWY3ZN9aEt0v2CXlEHt/ThqffNf39ucwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQxJmwSMwcOgnZMJgAfc4xa+8ruMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjg3MmM1YzMtZjJjZC0z
OTg0LTllZTAtZmUyODEzYTBmOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYq1VsjNCdobWRHX5e/k9zXXwAfPH88wuKCalbTs/biLjBd+ILQeITY
/g9meiRC7thk3dEDVuXA0DbIUGlHIpbdoQh8A0jsHVmB5FJOOQiLnvCJxXagBJsh
WkHJBHebpvcUNO9FmCsmliuu/LcmyJf7owK9gxVV3vwpSqNwMtaQq5q0KHZpQ/0H
7oR/alwjnW197RXIdZWW8ZSj/qyHYSjLjSiii31EXSeEQUd7UCPhglpOyRHErmz2
zsI+Y6d8AVkQ0myvzzmXuzjd5T3mHTo1w5lnwfVR4u/HhR8JyZnXzxslmqIT0jbk
y8HRel7eczsX9Sq1/Ay0PcnGv4sCIjw=
-----END CERTIFICATE-----
Generated at Sat May 10 13:03:50 2025 by rpki-client