Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a0cd7ee-a860-3949-bcaf-80ebf4ec8205.roa
File: 7a0cd7ee-a860-3949-bcaf-80ebf4ec8205.roa (raw, json)
Hash identifier: GHqPLlzNa5KugbGPdNJCkZHkrnZQBAKdJRhhhoIxrLM=
Subject key identifier: CA:00:73:AF:3D:DA:B5:74:C8:6C:D6:18:FB:A9:90:04:B5:5D:D6:C0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A16B54F3F55A6E9E7EF880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a0cd7ee-a860-3949-bcaf-80ebf4ec8205.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.141.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a1:6b:54:f3:f5:5a:6e:9e:7e:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a2b46fbe-c906-4a4c-8fee-8d13e35420f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:1b:26:d3:16:8b:77:16:a0:8c:e4:9f:e8:
33:e0:3f:90:c7:43:5b:09:d9:05:54:9b:17:7d:0c:
82:f8:2a:c0:59:79:e4:95:5b:34:bd:6c:9b:1e:b9:
61:9d:36:5f:b0:8a:fd:fd:00:89:6a:aa:c0:40:a5:
5a:c8:11:2f:de:55:24:5b:2f:c3:80:00:5e:3c:77:
6c:9d:df:25:09:bc:4a:e9:fe:26:74:e5:dd:4d:d9:
f5:1c:57:9f:e0:60:4e:d7:73:57:38:41:37:54:54:
be:75:68:2d:66:1d:6b:cf:b8:3e:de:96:71:1a:ba:
c0:ad:fd:4b:a7:c6:78:b1:4c:e7:6b:23:bf:52:5f:
80:3b:a4:24:46:78:fc:f8:48:47:ae:9b:43:31:2f:
81:9e:b5:cf:4d:89:ba:f7:bf:e1:92:d9:ce:a2:1d:
78:a1:3d:bc:a2:f1:04:a0:c4:af:71:47:b9:06:e0:
c8:26:1f:05:e7:41:b8:c9:63:21:53:9c:cf:24:25:
20:9c:2f:82:1c:7e:5a:9e:4e:1b:95:70:5d:2b:48:
e6:a7:e7:fd:07:01:9e:bb:db:63:83:c1:c2:ad:a7:
db:06:3e:b7:a6:db:a9:40:85:37:2e:85:31:3d:6a:
38:c9:ae:2e:36:16:f0:7b:94:0e:46:1e:26:df:48:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:00:73:AF:3D:DA:B5:74:C8:6C:D6:18:FB:A9:90:04:B5:5D:D6:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a0cd7ee-a860-3949-bcaf-80ebf4ec8205.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.141.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:46:eb:11:25:2c:b3:d2:47:c2:06:71:bf:9e:42:25:e5:e9:
82:4e:22:32:a4:a6:09:2f:50:ac:0a:74:3c:eb:22:ca:56:49:
2c:98:25:0c:84:95:6c:c5:8e:2d:2d:28:a2:db:71:51:43:01:
d2:47:51:34:7e:33:57:01:d1:f8:68:10:0d:c9:67:ec:db:3c:
ca:1d:b5:d8:53:7e:5d:25:77:86:20:bb:09:a7:00:4c:08:db:
be:8e:5e:64:38:7f:ef:b0:77:63:ff:99:31:bd:40:4e:37:39:
58:91:ef:61:dd:ad:a0:0b:f2:24:20:3a:d4:0f:6d:b1:00:2f:
46:75:fe:1a:8d:41:1a:35:54:f7:db:99:e4:3e:0d:6e:55:e1:
7f:27:e8:35:3a:74:d6:1b:40:4a:29:db:84:65:c4:82:bb:f7:
2e:67:e2:f0:59:c2:11:c1:bc:d2:79:28:dc:0d:94:38:b5:ae:
0a:ea:3d:0a:ea:8f:11:1e:d1:4e:39:50:e8:ba:e2:57:29:44:
93:a4:6c:df:c9:b8:5a:fa:6e:f8:52:aa:05:b6:14:fe:0c:c3:
9c:ce:49:2e:43:0c:58:bc:f3:15:51:59:d8:f8:6f:1f:4c:cb:
a6:b0:e9:6f:6b:e2:a4:51:74:44:5f:f0:05:16:b6:2d:bd:d4:
be:f0:14:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnoWtU8/Vabp5++IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YTJiNDZmYmUtYzkwNi00YTRjLThmZWUtOGQxM2UzNTQyMGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1kbJtMWi3cWoIzkn+gz4D+Qx0NbCdkFVJsX
fQyC+CrAWXnklVs0vWybHrlhnTZfsIr9/QCJaqrAQKVayBEv3lUkWy/DgABePHds
nd8lCbxK6f4mdOXdTdn1HFef4GBO13NXOEE3VFS+dWgtZh1rz7g+3pZxGrrArf1L
p8Z4sUznayO/Ul+AO6QkRnj8+EhHrptDMS+BnrXPTYm697/hktnOoh14oT28ovEE
oMSvcUe5BuDIJh8F50G4yWMhU5zPJCUgnC+CHH5ank4blXBdK0jmp+f9BwGeu9tj
g8HCrafbBj63ptupQIU3LoUxPWo4ya4uNhbwe5QORh4m30iUSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMoAc6892rV0yGzWGPupkAS1XdbAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2EwY2Q3ZWUtYTg2MC0z
OTQ5LWJjYWYtODBlYmY0ZWM4MjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9G6xElLLPSR8IGcb+eQiXl6YJOIjKkpgkvUKwKdDzrIspWSSyYJQyE
lWzFji0tKKLbcVFDAdJHUTR+M1cB0fhoEA3JZ+zbPModtdhTfl0ld4YguwmnAEwI
276OXmQ4f++wd2P/mTG9QE43OViR72HdraAL8iQgOtQPbbEAL0Z1/hqNQRo1VPfb
meQ+DW5V4X8n6DU6dNYbQEop24RlxIK79y5n4vBZwhHBvNJ5KNwNlDi1rgrqPQrq
jxEe0U45UOi64lcpRJOkbN/JuFr6bvhSqgW2FP4Mw5zOSS5DDFi88xVRWdj4bx9M
y6aw6W9r4qRRdERf8AUWti291L7wFBo=
-----END CERTIFICATE-----
Generated at Sat May 10 22:08:33 2025 by rpki-client