Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7700a36f-bd51-3bef-baf4-6515de5bbbfc.roa
File: 7700a36f-bd51-3bef-baf4-6515de5bbbfc.roa (raw, json)
Hash identifier: n/T4kWfRBzLxgcQwTSEkvxHe5bb8SMuSNkCYqBNqQeg=
Subject key identifier: 4D:36:E7:E3:A0:83:E5:43:04:99:C7:F6:E2:1B:0D:7E:CD:27:0C:5B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A548DF3CFE79CAC2C8300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7700a36f-bd51-3bef-baf4-6515de5bbbfc.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 34.84.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:54:8d:f3:cf:e7:9c:ac:2c:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=508fae74-5282-45a8-a055-dd0b11d13ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6a:13:db:8f:5e:7d:0b:e2:24:fd:d0:05:42:
62:65:4e:e9:0d:d0:b3:a3:53:ea:a4:15:df:5d:c3:
1d:3d:f3:1f:ed:90:97:be:d2:e8:08:aa:0c:69:84:
53:04:e9:55:a5:f3:f3:ef:e9:4f:0b:e6:6e:2a:a6:
6a:eb:6a:b6:e8:a2:83:e2:33:c8:33:ea:61:f2:f1:
47:64:08:be:9c:ef:ab:b8:b1:37:f3:a3:ce:58:cf:
00:cc:23:c3:28:86:cd:21:0b:ab:43:c2:cf:80:53:
f4:6d:0b:9f:09:d1:78:27:1b:a5:79:86:fe:da:5f:
6b:04:dd:75:ce:32:48:90:0b:ce:13:a0:9c:2a:42:
a1:dd:8e:2d:4a:05:53:ca:76:bf:61:a5:c7:ef:99:
47:d7:c7:17:85:ee:4c:b2:b3:49:05:cd:c1:5b:39:
dc:af:7b:1a:3c:55:ed:c0:79:4a:12:6e:90:d0:60:
95:49:bb:66:3f:1e:90:48:33:f0:ed:84:94:ff:67:
47:ad:84:ea:28:3a:ab:91:65:4f:fd:4c:5c:20:1c:
48:6d:06:9d:31:aa:8c:d1:0d:ee:ad:fa:9c:80:35:
72:28:c5:2d:e6:66:17:d7:d4:f5:97:bf:bc:cd:a0:
a3:1c:60:9d:17:0c:67:53:98:4e:c1:c7:dc:12:f5:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:36:E7:E3:A0:83:E5:43:04:99:C7:F6:E2:1B:0D:7E:CD:27:0C:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7700a36f-bd51-3bef-baf4-6515de5bbbfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.84.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:96:fa:91:af:ff:23:2f:d8:79:87:40:8a:58:4a:72:54:58:
1b:b5:c5:56:4f:fc:fa:dc:40:bf:f5:c3:87:ad:00:58:83:da:
76:ce:19:77:73:08:89:c0:58:31:8c:c8:ea:1e:38:38:4d:20:
1e:b9:f5:fe:ef:23:07:fa:4f:f0:71:5d:17:5c:5d:25:69:94:
0f:d1:9a:cc:79:4a:86:a8:4d:46:90:8c:25:ec:a6:b0:02:58:
ad:2d:db:8d:f4:ad:6d:fb:24:68:d3:eb:5d:d7:2d:3c:39:30:
85:51:ae:c5:ac:24:e4:de:43:43:61:9b:2b:53:5a:10:ba:52:
6d:61:8c:d7:e4:c5:8e:29:37:45:ff:54:48:3c:6a:bd:bb:c7:
c4:25:7a:b1:9b:b0:00:c9:62:d0:b3:35:1f:14:21:c9:e7:ff:
6e:5a:33:d3:02:b3:fb:ee:68:24:18:bd:0c:84:8f:bf:10:58:
bd:c2:f1:51:c2:b1:82:0a:5a:2b:39:1c:61:72:f6:ac:4f:16:
87:fb:92:fa:e3:53:7e:9b:cf:2a:de:fc:b6:f8:c8:87:1f:74:
3b:ee:0f:71:a1:1a:f1:9a:d3:10:cd:39:a2:0c:13:91:67:98:
51:d5:dc:dc:b1:f1:34:f3:e5:84:bb:4c:33:6e:4e:d6:3d:4d:
b0:45:e9:69
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEf/SlSN88/nnKwsgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
NTA4ZmFlNzQtNTI4Mi00NWE4LWEwNTUtZGQwYjExZDEzZWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWoT249efQviJP3QBUJiZU7pDdCzo1PqpBXf
XcMdPfMf7ZCXvtLoCKoMaYRTBOlVpfPz7+lPC+ZuKqZq62q26KKD4jPIM+ph8vFH
ZAi+nO+ruLE386POWM8AzCPDKIbNIQurQ8LPgFP0bQufCdF4JxuleYb+2l9rBN11
zjJIkAvOE6CcKkKh3Y4tSgVTyna/YaXH75lH18cXhe5MsrNJBc3BWzncr3saPFXt
wHlKEm6Q0GCVSbtmPx6QSDPw7YSU/2dHrYTqKDqrkWVP/UxcIBxIbQadMaqM0Q3u
rfqcgDVyKMUt5mYX19T1l7+8zaCjHGCdFwxnU5hOwcfcEvVRXwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE025+Ogg+VDBJnH9uIbDX7NJwxbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzcwMGEzNmYtYmQ1MS0z
YmVmLWJhZjQtNjUxNWRlNWJiYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCIlQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAg5b6ka//Iy/YeYdAilhKclRYG7XFVk/8+txAv/XDh60AWIPads4Zd3MI
icBYMYzI6h44OE0gHrn1/u8jB/pP8HFdF1xdJWmUD9GazHlKhqhNRpCMJeymsAJY
rS3bjfStbfskaNPrXdctPDkwhVGuxawk5N5DQ2GbK1NaELpSbWGM1+TFjik3Rf9U
SDxqvbvHxCV6sZuwAMli0LM1HxQhyef/bloz0wKz++5oJBi9DISPvxBYvcLxUcKx
ggpaKzkcYXL2rE8Wh/uS+uNTfpvPKt78tvjIhx90O+4PcaEa8ZrTEM05ogwTkWeY
UdXc3LHxNPPlhLtMM25O1j1NsEXpaQ==
-----END CERTIFICATE-----
Generated at Sun May 11 02:10:03 2025 by rpki-client