Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7de29668-fb9d-3664-939a-8050f488584f.roa
File: 7de29668-fb9d-3664-939a-8050f488584f.roa (raw, json)
Hash identifier: kchta9b+38AeGLtlowWQDXytOLS0JWxUaa0YxRTZJ9k=
Subject key identifier: 30:94:C1:30:7D:BE:99:A1:CC:5E:4D:A2:A9:B4:E0:8F:D2:0B:B5:90
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A72D2C1546647FFB42F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7de29668-fb9d-3664-939a-8050f488584f.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 34.68.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:72:d2:c1:54:66:47:ff:b4:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=836f0b09-b553-4d7a-b9d9-a868bbcd8b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:b6:3a:b1:5c:ca:a6:6c:59:0f:6f:e6:6f:
ed:8e:0f:b5:1f:b7:45:40:71:98:2a:b1:8d:32:d1:
fc:04:8c:a0:25:9d:c7:0a:ae:d0:2a:02:16:de:0d:
9b:22:8e:f8:15:67:3e:4b:df:cf:d5:85:c7:89:11:
a0:52:53:c7:db:58:01:c7:43:14:ad:f3:c3:21:3e:
f5:8a:99:dd:c0:2e:a3:e2:3d:f8:b6:78:79:ca:42:
6b:75:25:d8:48:df:03:f3:53:90:c5:5b:67:f5:9c:
42:08:37:f3:ed:37:2a:b0:99:ec:a0:4b:fd:0a:fa:
47:e1:32:1f:39:ce:ec:7c:9e:90:75:44:8b:87:f5:
e1:8e:f7:09:16:62:e4:5d:c4:77:4e:a1:1f:ed:98:
10:58:3c:96:f0:90:e0:73:0d:ef:77:7b:06:66:d8:
70:34:62:54:85:39:a2:21:55:08:e7:fa:a4:36:7d:
56:f1:c9:36:e7:6e:73:c5:a3:26:d1:e5:e7:ea:47:
4a:69:b9:db:d9:9a:d9:35:99:d5:f5:d2:22:7f:50:
a5:31:6c:f0:7c:3e:17:b5:ee:42:bd:36:d3:ee:bf:
75:d4:b1:15:7f:b4:30:cd:45:f4:69:68:c7:92:c0:
b4:e4:e0:5d:60:2f:1b:a3:8a:5e:45:94:34:17:ea:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:94:C1:30:7D:BE:99:A1:CC:5E:4D:A2:A9:B4:E0:8F:D2:0B:B5:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7de29668-fb9d-3664-939a-8050f488584f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:b9:4f:e4:42:3e:07:b2:bf:46:21:28:10:f3:0e:b2:85:08:
62:a4:86:8e:98:97:6d:61:db:bf:4e:95:6c:36:35:b3:17:88:
be:27:2b:99:ff:13:f2:e0:6d:75:01:88:6b:41:b3:95:a4:4b:
13:e5:6f:3b:7b:b8:7d:92:8c:c9:49:f1:57:8b:a2:d9:f7:d1:
1a:95:db:5d:8d:e9:a2:37:7e:a2:94:43:a2:7d:f0:9a:67:32:
2e:62:00:27:01:19:8e:af:43:b8:9e:07:67:60:0b:b2:7c:b8:
83:03:f3:ed:71:d9:38:01:17:87:94:8f:11:3a:d9:9a:a9:85:
1e:43:28:6d:17:c2:72:d6:b3:da:91:37:96:ee:9d:b2:f3:34:
9b:2c:ef:6f:dc:41:70:91:52:6e:5d:f3:d1:6c:c9:bb:4d:ef:
f6:67:f9:ac:81:3b:dd:27:36:b8:0f:cf:eb:1c:3c:30:56:df:
6e:c3:74:1a:2c:00:ae:90:40:5a:0a:35:f0:b4:0b:30:0e:61:
4f:2d:e1:4d:53:c1:5a:9a:78:17:1a:69:e0:ac:eb:5d:83:f1:
a6:5a:d4:0e:dd:12:df:b7:d1:90:3c:81:4a:08:23:a7:f6:d5:
62:28:b4:02:c8:05:1e:27:d7:31:67:76:f6:0d:13:6f:d7:96:
50:f9:37:1c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEf/SnLSwVRmR/+0LwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
ODM2ZjBiMDktYjU1My00ZDdhLWI5ZDktYTg2OGJiY2Q4YjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nm2OrFcyqZsWQ9v5m/tjg+1H7dFQHGYKrGN
MtH8BIygJZ3HCq7QKgIW3g2bIo74FWc+S9/P1YXHiRGgUlPH21gBx0MUrfPDIT71
ipndwC6j4j34tnh5ykJrdSXYSN8D81OQxVtn9ZxCCDfz7TcqsJnsoEv9CvpH4TIf
Oc7sfJ6QdUSLh/XhjvcJFmLkXcR3TqEf7ZgQWDyW8JDgcw3vd3sGZthwNGJUhTmi
IVUI5/qkNn1W8ck2525zxaMm0eXn6kdKabnb2ZrZNZnV9dIif1ClMWzwfD4Xte5C
vTbT7r911LEVf7QwzUX0aWjHksC05OBdYC8bo4peRZQ0F+onKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDCUwTB9vpmhzF5Noqm04I/SC7WQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2RlMjk2NjgtZmI5ZC0z
NjY0LTkzOWEtODA1MGY0ODg1ODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCIkQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGrlP5EI+B7K/RiEoEPMOsoUIYqSGjpiXbWHbv06VbDY1sxeIvicrmf8T
8uBtdQGIa0GzlaRLE+VvO3u4fZKMyUnxV4ui2ffRGpXbXY3pojd+opRDon3wmmcy
LmIAJwEZjq9DuJ4HZ2ALsny4gwPz7XHZOAEXh5SPETrZmqmFHkMobRfCctaz2pE3
lu6dsvM0myzvb9xBcJFSbl3z0WzJu03v9mf5rIE73Sc2uA/P6xw8MFbfbsN0GiwA
rpBAWgo18LQLMA5hTy3hTVPBWpp4Fxpp4KzrXYPxplrUDt0S37fRkDyBSggjp/bV
Yii0AsgFHifXMWd29g0Tb9eWUPk3HA==
-----END CERTIFICATE-----
Generated at Sun May 11 22:09:24 2025 by rpki-client