Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f63a686-7dc1-33bc-921b-eb9f99a02c40.roa
File: 7f63a686-7dc1-33bc-921b-eb9f99a02c40.roa (raw, json)
Hash identifier: RF22aJfRR+QGGDfWgJtLtc/g2/gRPODKPuHPIhA7omk=
Subject key identifier: 11:62:C7:C1:31:93:4F:F8:E7:47:75:60:8D:D9:86:CB:33:F8:03:B3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A075F40496F9D0AB9BE7680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f63a686-7dc1-33bc-921b-eb9f99a02c40.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.176.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:07:5f:40:49:6f:9d:0a:b9:be:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4a3898c9-a958-4251-9b50-a78c0187d6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:31:bf:8a:00:fb:a4:dd:77:f7:08:83:e2:
ec:fa:ff:4d:12:01:1d:f0:6f:d7:3d:69:89:f0:b0:
56:00:22:7e:2c:61:00:83:74:6f:c7:69:47:99:f7:
fa:3b:eb:a0:56:22:94:4a:79:7b:55:6f:cd:db:71:
05:04:0c:19:c6:61:f0:fd:44:04:04:3d:79:59:31:
18:f7:75:2e:0f:ed:ac:38:be:71:3c:0b:d8:5f:4a:
40:88:41:af:76:2b:dd:b1:c1:a0:08:29:fc:10:60:
05:71:26:b2:2a:29:ad:3d:86:b6:c1:a7:3e:26:74:
ed:28:71:65:ad:cf:b8:d8:fb:eb:32:a3:e1:10:0c:
9d:3a:0e:cd:fa:4c:39:af:51:04:ff:2b:d9:d5:b5:
e1:f6:7e:18:94:f1:61:7b:85:fa:fc:a0:44:54:15:
72:fc:cc:87:e7:a3:ee:26:3e:10:ae:46:14:cb:28:
8b:9e:80:88:84:09:94:83:6a:88:64:b7:3c:ad:28:
2e:b0:66:65:01:f7:dc:a0:6c:66:5d:67:64:cd:8f:
01:58:96:e3:a1:5e:71:c9:a1:80:0f:76:4d:94:83:
d9:86:75:7d:0a:f9:db:f5:8a:48:b5:fe:b5:58:01:
4e:9e:a7:fc:04:20:d1:d0:2c:fc:5d:17:88:6d:06:
3b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:62:C7:C1:31:93:4F:F8:E7:47:75:60:8D:D9:86:CB:33:F8:03:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f63a686-7dc1-33bc-921b-eb9f99a02c40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.176.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:d2:38:37:38:ee:87:96:c7:53:86:82:14:86:31:3b:3e:4d:
db:88:3f:86:10:68:46:23:87:88:07:16:60:b7:e7:e0:af:cc:
bb:86:4e:58:65:d5:d3:ae:b6:6c:4a:2f:f8:ed:9e:7c:a5:7d:
b5:7b:18:c0:38:ee:e6:e8:a3:36:95:99:74:d0:71:01:34:68:
cc:c0:89:aa:8a:e9:99:d9:26:19:78:dd:59:9a:90:1e:cc:1a:
22:a0:17:6e:61:5d:5c:32:82:4b:6e:32:da:cd:4f:f4:2a:1c:
cb:36:e0:32:fd:48:20:7b:0f:c0:67:31:3b:66:cf:0c:04:9e:
d4:c5:ae:75:dd:81:58:c8:34:5a:9c:99:c7:ed:1d:4a:00:48:
0d:1a:2b:5c:63:24:af:fe:63:f9:b2:8b:f6:b0:78:8f:fe:25:
54:b8:2b:cd:de:d7:de:9f:d4:44:b1:5e:c7:c5:39:53:b7:e8:
2e:08:fa:4f:4a:6d:01:3c:5a:a7:8f:b7:b1:b4:a9:51:20:f7:
51:be:59:09:6c:74:9e:dd:55:fd:e4:41:af:50:82:4d:4e:e9:
f6:07:56:09:80:72:6a:18:3f:16:d7:03:fd:d6:04:3c:3c:b5:
8e:bc:33:cc:96:39:8e:f1:a3:94:69:de:50:27:fe:fd:18:21:
27:fd:9f:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKB19ASW+dCrm+doAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NGEzODk4YzktYTk1OC00MjUxLTliNTAtYTc4YzAxODdkNmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7Qxv4oA+6Tdd/cIg+Ls+v9NEgEd8G/XPWmJ
8LBWACJ+LGEAg3Rvx2lHmff6O+ugViKUSnl7VW/N23EFBAwZxmHw/UQEBD15WTEY
93UuD+2sOL5xPAvYX0pAiEGvdivdscGgCCn8EGAFcSayKimtPYa2wac+JnTtKHFl
rc+42PvrMqPhEAydOg7N+kw5r1EE/yvZ1bXh9n4YlPFhe4X6/KBEVBVy/MyH56Pu
Jj4QrkYUyyiLnoCIhAmUg2qIZLc8rSgusGZlAffcoGxmXWdkzY8BWJbjoV5xyaGA
D3ZNlIPZhnV9Cvnb9YpItf61WAFOnqf8BCDR0Cz8XReIbQY7+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFix8Exk0/450d1YI3Zhssz+AOzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2Y2M2E2ODYtN2RjMS0z
M2JjLTkyMWItZWI5Zjk5YTAyYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrDgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfSODc47oeWx1OGghSGMTs+TduIP4YQaEYjh4gHFmC35+CvzLuGTlhl
1dOutmxKL/jtnnylfbV7GMA47uboozaVmXTQcQE0aMzAiaqK6ZnZJhl43VmakB7M
GiKgF25hXVwygktuMtrNT/QqHMs24DL9SCB7D8BnMTtmzwwEntTFrnXdgVjINFqc
mcftHUoASA0aK1xjJK/+Y/myi/aweI/+JVS4K83e196f1ESxXsfFOVO36C4I+k9K
bQE8WqePt7G0qVEg91G+WQlsdJ7dVf3kQa9Qgk1O6fYHVgmAcmoYPxbXA/3WBDw8
tY68M8yWOY7xo5Rp3lAn/v0YISf9nwU=
-----END CERTIFICATE-----
Generated at Sat May 10 13:02:40 2025 by rpki-client