Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/82bf5aa9-2edf-309a-922f-41770eaa91e1.roa
File: 82bf5aa9-2edf-309a-922f-41770eaa91e1.roa (raw, json)
Hash identifier: hTSK3IfIWpbmpksfBMdh9fe3dxPkFQd6ZoFyj0HUk4E=
Subject key identifier: 6D:30:6C:E1:CB:AF:9D:A2:5B:94:F7:72:3A:80:B3:5F:A7:F3:FF:AB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1EA228CF3D77AB4BE44D30
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/82bf5aa9-2edf-309a-922f-41770eaa91e1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.152.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1e:a2:28:cf:3d:77:ab:4b:e4:4d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2b8412a3-c7f1-4233-bc6e-65f738422545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:57:34:df:cb:96:cf:c6:ff:cf:8a:3a:c8:
68:be:8b:fa:d8:4b:67:27:90:70:e1:81:ed:40:c7:
eb:12:f2:a7:d6:89:6c:39:5e:04:70:83:91:c6:12:
a7:40:0f:65:1a:a0:7c:82:bb:d3:d4:45:5b:0c:22:
e9:ff:94:cd:98:2c:27:6c:a0:60:1f:04:dc:d2:b1:
a0:23:fb:0b:bb:d1:41:fb:8d:76:48:76:3b:c9:c3:
e9:d2:b3:d1:32:8d:7a:be:2c:a3:17:82:e6:37:eb:
55:75:c3:fa:15:e3:0a:d2:b9:51:6c:9c:98:bc:b3:
99:d6:e5:13:f2:be:8a:d9:e4:d0:a7:a5:99:37:c4:
f5:c2:04:04:63:a8:25:ec:c6:e1:aa:97:73:38:81:
d0:b8:7a:67:f0:fa:c8:b8:31:66:b6:d7:bc:9f:42:
1c:10:4d:81:e9:49:85:a1:e6:91:0f:0e:0e:3a:a7:
b1:ff:ba:d8:d6:3c:53:b5:d3:71:35:3e:2d:23:fb:
6f:9c:31:78:d8:1f:02:f1:8d:df:0f:8e:5e:01:ba:
90:98:8d:d5:98:05:94:f8:41:3a:f1:06:ad:3a:6d:
b5:2c:c7:64:31:b6:ca:5d:2b:b3:70:52:13:95:d6:
01:43:f2:ca:56:a0:65:90:bb:d4:3f:fd:69:13:2f:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:30:6C:E1:CB:AF:9D:A2:5B:94:F7:72:3A:80:B3:5F:A7:F3:FF:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/82bf5aa9-2edf-309a-922f-41770eaa91e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.152.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:fe:c8:7f:cb:5b:f5:ec:e7:30:15:b6:9a:27:40:53:d9:ff:
1d:09:4f:8b:e7:4a:d6:95:a3:50:ef:e8:95:eb:13:ed:e4:38:
19:1b:88:ef:6a:25:88:90:80:ca:10:6b:4f:fe:90:8b:7c:50:
fa:31:47:92:90:36:aa:f0:cd:f3:bf:0f:aa:c7:e3:fc:a6:23:
b7:59:84:0a:a0:ff:14:b9:0e:22:b7:e4:53:32:53:d6:47:57:
32:09:11:4e:80:a9:e7:4d:68:a3:9d:df:98:b4:62:7e:0f:82:
4b:c0:e3:32:cf:f1:3f:df:2d:a3:74:ff:be:4f:6e:3c:f1:df:
a5:3a:86:ac:e5:b7:57:d2:77:6d:7e:42:b6:5f:7e:99:99:7e:
f5:71:08:c7:fb:c6:55:84:99:bf:7e:c7:d2:5b:1a:2d:04:98:
c1:63:7b:52:67:88:de:40:d7:8b:61:16:81:32:fa:6b:2d:51:
d6:24:dd:3f:f4:60:34:0c:af:7e:b9:c9:a2:0d:a3:3d:fd:6a:
97:6d:a1:e1:5c:3d:55:86:38:ce:ff:43:a3:cb:49:58:fb:11:
77:ee:7e:a9:1f:4a:62:fa:0a:5f:ec:6a:40:6a:4d:fb:89:4c:
99:f9:05:a5:50:15:e7:ca:ad:14:66:f2:ce:81:1f:cf:ee:ad:
15:4c:e3:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKHqIozz13q0vkTTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MmI4NDEyYTMtYzdmMS00MjMzLWJjNmUtNjVmNzM4NDIyNTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuRXNN/Lls/G/8+KOshovov62EtnJ5Bw4YHt
QMfrEvKn1olsOV4EcIORxhKnQA9lGqB8grvT1EVbDCLp/5TNmCwnbKBgHwTc0rGg
I/sLu9FB+412SHY7ycPp0rPRMo16viyjF4LmN+tVdcP6FeMK0rlRbJyYvLOZ1uUT
8r6K2eTQp6WZN8T1wgQEY6gl7MbhqpdzOIHQuHpn8PrIuDFmtte8n0IcEE2B6UmF
oeaRDw4OOqex/7rY1jxTtdNxNT4tI/tvnDF42B8C8Y3fD45eAbqQmI3VmAWU+EE6
8QatOm21LMdkMbbKXSuzcFITldYBQ/LKVqBlkLvUP/1pEy9PhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG0wbOHLr52iW5T3cjqAs1+n8/+rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODJiZjVhYTktMmVkZi0z
MDlhLTkyMmYtNDE3NzBlYWE5MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpgwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC/+yH/LW/Xs5zAVtponQFPZ/x0JT4vnStaVo1Dv6JXrE+3kOBkbiO9q
JYiQgMoQa0/+kIt8UPoxR5KQNqrwzfO/D6rH4/ymI7dZhAqg/xS5DiK35FMyU9ZH
VzIJEU6AqedNaKOd35i0Yn4PgkvA4zLP8T/fLaN0/75Pbjzx36U6hqzlt1fSd21+
QrZffpmZfvVxCMf7xlWEmb9+x9JbGi0EmMFje1JniN5A14thFoEy+mstUdYk3T/0
YDQMr365yaINoz39apdtoeFcPVWGOM7/Q6PLSVj7EXfufqkfSmL6Cl/sakBqTfuJ
TJn5BaVQFefKrRRm8s6BH8/urRVM49k=
-----END CERTIFICATE-----
Generated at Sat May 10 12:35:07 2025 by rpki-client