Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/689afd4b-3dce-3ccf-8af9-9b5f2cf90365.roa
File: 689afd4b-3dce-3ccf-8af9-9b5f2cf90365.roa (raw, json)
Hash identifier: H8LcAJKqDGV5qeRCi92Le21S/TTaNZCkbsRepczJ7lY=
Subject key identifier: 30:CD:3B:92:5E:E3:12:36:E5:BB:79:C0:5D:88:8D:B3:61:3F:8E:A8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A21F9B50CB950888CC3B7C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/689afd4b-3dce-3ccf-8af9-9b5f2cf90365.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.100.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:21:f9:b5:0c:b9:50:88:8c:c3:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f4b214ca-a9de-4c3d-93ab-c76907712eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:79:cc:8b:42:2c:7f:7d:32:18:5b:6c:fe:
66:60:30:da:55:04:e9:3c:0c:1c:78:0b:94:d6:5b:
76:c7:07:8e:e8:03:83:e6:91:59:3f:1f:66:61:59:
b6:87:78:a3:1b:e0:71:51:f6:93:1e:f7:b0:d2:3d:
ab:58:51:0a:a1:10:90:6d:83:56:0b:36:93:e2:71:
db:99:52:a2:be:5e:07:92:ad:1c:b9:ea:15:a1:f5:
ed:0b:e8:94:da:75:5b:ea:f0:ab:c6:83:c6:45:b6:
58:de:53:40:3e:48:0b:97:b5:28:c9:a0:3c:4f:8b:
55:93:f5:01:88:50:1b:5f:e4:a2:60:af:9f:87:aa:
71:ea:67:d4:19:bc:0e:4d:38:df:82:8c:99:2e:a2:
85:ea:3c:1c:b1:95:70:41:e2:c8:8e:50:37:2c:3f:
71:6d:db:28:ee:04:7d:3d:6a:91:7e:11:de:26:d6:
fd:06:4e:d8:cf:b7:a5:d1:73:4b:8e:8f:c6:81:da:
76:ed:83:11:01:aa:4d:21:3f:de:ad:03:d4:c1:fd:
45:65:95:47:76:8f:02:3f:8c:ea:88:b6:15:fa:36:
76:97:d8:17:d3:94:70:be:c3:1a:cf:23:09:55:2a:
61:4d:43:a2:63:95:25:af:a9:e3:c5:22:3a:ad:41:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CD:3B:92:5E:E3:12:36:E5:BB:79:C0:5D:88:8D:B3:61:3F:8E:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/689afd4b-3dce-3ccf-8af9-9b5f2cf90365.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.100.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:45:32:d6:04:1e:34:35:1c:34:ad:7e:2c:68:f4:45:04:86:
49:0d:be:0e:fe:31:12:06:f8:39:98:92:90:cf:73:3a:fd:00:
91:97:86:36:8f:9f:97:0f:5a:f9:22:1d:3b:9d:37:26:70:77:
1b:fb:9b:67:1c:d7:46:f6:5f:6f:e6:03:a0:8d:e9:03:9f:e2:
69:0f:ac:05:37:72:68:97:36:06:a0:60:60:8b:35:fc:6f:a5:
57:0b:ee:06:b8:33:8b:92:55:1c:ca:f8:06:99:54:dc:f8:d3:
a8:0e:ac:e5:59:00:0a:22:bf:f2:46:a8:56:fa:f9:93:fb:7b:
83:54:b9:ba:11:3f:73:e3:e5:a1:bf:9f:2a:09:38:ae:31:54:
1d:67:c5:ed:9c:d8:92:e1:e6:b0:64:68:c7:0d:60:a2:f1:c2:
6d:2d:a2:94:bb:0b:fe:65:d5:ab:9d:23:c2:1d:b3:7b:04:c7:
f2:24:72:88:43:da:3d:24:3a:2c:be:91:72:81:cd:a3:50:0a:
c6:96:33:0c:e4:76:d5:f3:9a:08:87:61:25:91:a6:a6:ca:d5:
46:a8:3f:21:fd:b8:b2:39:c6:9b:ed:7d:d1:cd:29:9e:db:f8:
72:b1:02:aa:a1:48:48:cb:13:26:30:98:5b:f4:17:91:4d:66:
85:2c:d5:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKIfm1DLlQiIzDt8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjRiMjE0Y2EtYTlkZS00YzNkLTkzYWItYzc2OTA3NzEyZWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8x5zItCLH99MhhbbP5mYDDaVQTpPAwceAuU
1lt2xweO6AOD5pFZPx9mYVm2h3ijG+BxUfaTHvew0j2rWFEKoRCQbYNWCzaT4nHb
mVKivl4Hkq0cueoVofXtC+iU2nVb6vCrxoPGRbZY3lNAPkgLl7UoyaA8T4tVk/UB
iFAbX+SiYK+fh6px6mfUGbwOTTjfgoyZLqKF6jwcsZVwQeLIjlA3LD9xbdso7gR9
PWqRfhHeJtb9Bk7Yz7el0XNLjo/Ggdp27YMRAapNIT/erQPUwf1FZZVHdo8CP4zq
iLYV+jZ2l9gX05RwvsMazyMJVSphTUOiY5Ulr6njxSI6rUGMMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDDNO5Je4xI25bt5wF2IjbNhP46oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjg5YWZkNGItM2RjZS0z
Y2NmLThhZjktOWI1ZjJjZjkwMzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImTwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVFMtYEHjQ1HDStfixo9EUEhkkNvg7+MRIG+DmYkpDPczr9AJGXhjaP
n5cPWvkiHTudNyZwdxv7m2cc10b2X2/mA6CN6QOf4mkPrAU3cmiXNgagYGCLNfxv
pVcL7ga4M4uSVRzK+AaZVNz406gOrOVZAAoiv/JGqFb6+ZP7e4NUuboRP3Pj5aG/
nyoJOK4xVB1nxe2c2JLh5rBkaMcNYKLxwm0topS7C/5l1audI8Ids3sEx/IkcohD
2j0kOiy+kXKBzaNQCsaWMwzkdtXzmgiHYSWRpqbK1UaoPyH9uLI5xpvtfdHNKZ7b
+HKxAqqhSEjLEyYwmFv0F5FNZoUs1U0=
-----END CERTIFICATE-----
Generated at Sat May 10 12:09:24 2025 by rpki-client