Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7df40cb7-9de4-3547-a928-08034a9146f9.roa
File: 7df40cb7-9de4-3547-a928-08034a9146f9.roa (raw, json)
Hash identifier: WOIUjbagQZXZRzHJN/N3Zj245Majb+8JtHtUVBcfBek=
Subject key identifier: 8E:25:7D:2F:DA:23:D6:06:AB:AD:C3:CB:92:59:9E:4E:4B:80:1B:D5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0BD4AF5EB60B8338C42AFC
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7df40cb7-9de4-3547-a928-08034a9146f9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.76.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0b:d4:af:5e:b6:0b:83:38:c4:2a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=bced58d4-8bdb-4fb7-b494-4d157a4bb163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c0:d6:4c:55:09:db:a6:e0:38:66:57:68:65:
64:74:8a:5c:be:f3:6f:24:07:4b:f9:d5:99:06:6f:
46:33:32:14:c7:61:8a:7a:4c:74:71:cd:57:df:10:
90:67:38:bb:3e:0e:3a:2f:19:8a:ea:52:60:1f:0c:
73:b4:54:79:86:a4:05:b6:37:b5:55:83:06:63:90:
9d:56:a9:3c:60:6d:64:41:8c:e7:96:90:7e:0a:d4:
c2:fd:b9:49:f4:b1:46:92:6d:5d:13:01:a3:9f:c6:
7e:81:d5:b7:85:4a:b4:81:e0:d2:68:50:fc:2c:83:
29:b1:c9:df:15:7a:c9:10:35:2d:06:41:40:b4:7b:
a7:e8:33:b2:19:65:9d:51:25:29:f7:6e:2b:66:a4:
81:fc:3a:b7:ce:df:05:b7:41:9d:0a:3f:4e:5b:ae:
f7:eb:21:27:a2:b0:fc:ac:99:1f:f8:1a:0a:06:3e:
af:d7:ba:2d:e8:91:5d:3b:a0:96:1d:20:e3:e1:55:
c5:44:25:19:f1:2e:1c:0c:b2:b3:1b:d6:4a:23:c7:
57:7d:50:00:0f:ce:1a:6e:d7:f6:7a:15:6a:3c:1a:
e8:1e:3e:57:47:45:55:cf:ae:e7:82:59:ff:44:cc:
99:e1:d7:11:ae:14:95:a1:99:ab:99:ae:29:74:67:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:25:7D:2F:DA:23:D6:06:AB:AD:C3:CB:92:59:9E:4E:4B:80:1B:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7df40cb7-9de4-3547-a928-08034a9146f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.76.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:bd:08:84:30:40:c4:61:f4:54:0d:b1:23:48:64:78:d2:ba:
77:84:22:e3:2a:62:67:c1:0e:74:50:04:ba:92:e3:44:9a:01:
1f:8c:e5:26:50:27:55:5d:1b:0a:11:7e:fe:01:13:d8:5e:a0:
1e:63:74:f3:e1:57:4a:d3:6c:60:5b:08:5d:8c:18:6c:e7:23:
61:b8:ce:9d:d3:e2:00:0f:04:33:c2:bb:ec:77:88:df:e1:68:
2b:72:64:32:bc:a8:af:f6:b8:1c:87:16:97:0b:94:cd:21:1f:
3b:f7:0c:50:28:3c:49:c8:9a:b6:cd:a2:2e:dd:a6:2b:00:38:
46:6e:84:5b:bd:c8:5a:04:63:fe:c4:ed:d2:5e:3b:3f:f1:37:
9d:a1:8c:7c:9a:35:ec:74:f0:05:af:45:14:bc:46:ab:86:a9:
d3:a4:62:72:3d:54:69:1d:17:07:46:4a:84:a9:55:e9:38:a6:
10:db:1a:99:b2:e1:7d:3b:b2:08:88:69:8e:74:88:ae:6f:3d:
38:ec:77:49:2c:27:11:34:c4:cb:f2:fa:4e:84:a7:0e:ec:3d:
9d:b6:3c:b6:79:eb:42:03:61:4c:51:54:94:f2:cd:c2:7b:63:
69:ea:46:75:b7:97:7d:28:58:57:ed:20:39:ab:e8:79:7a:af:
03:0c:7a:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKC9SvXrYLgzjEKvwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YmNlZDU4ZDQtOGJkYi00ZmI3LWI0OTQtNGQxNTdhNGJiMTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8DWTFUJ26bgOGZXaGVkdIpcvvNvJAdL+dWZ
Bm9GMzIUx2GKekx0cc1X3xCQZzi7Pg46LxmK6lJgHwxztFR5hqQFtje1VYMGY5Cd
Vqk8YG1kQYznlpB+CtTC/blJ9LFGkm1dEwGjn8Z+gdW3hUq0geDSaFD8LIMpscnf
FXrJEDUtBkFAtHun6DOyGWWdUSUp924rZqSB/Dq3zt8Ft0GdCj9OW6736yEnorD8
rJkf+BoKBj6v17ot6JFdO6CWHSDj4VXFRCUZ8S4cDLKzG9ZKI8dXfVAAD84abtf2
ehVqPBroHj5XR0VVz67ngln/RMyZ4dcRrhSVoZmrma4pdGenTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4lfS/aI9YGq63Dy5JZnk5LgBvVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2RmNDBjYjctOWRlNC0z
NTQ3LWE5MjgtMDgwMzRhOTE0NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABe9CIQwQMRh9FQNsSNIZHjSuneEIuMqYmfBDnRQBLqS40SaAR+M5SZQ
J1VdGwoRfv4BE9heoB5jdPPhV0rTbGBbCF2MGGznI2G4zp3T4gAPBDPCu+x3iN/h
aCtyZDK8qK/2uByHFpcLlM0hHzv3DFAoPEnImrbNoi7dpisAOEZuhFu9yFoEY/7E
7dJeOz/xN52hjHyaNex08AWvRRS8RquGqdOkYnI9VGkdFwdGSoSpVek4phDbGpmy
4X07sgiIaY50iK5vPTjsd0ksJxE0xMvy+k6Epw7sPZ22PLZ560IDYUxRVJTyzcJ7
Y2nqRnW3l30oWFftIDmr6Hl6rwMMego=
-----END CERTIFICATE-----
Generated at Sat May 10 11:58:54 2025 by rpki-client