Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/888004ef-fd46-3b7b-b7a6-3da6bc8d2d6d.roa
File: 888004ef-fd46-3b7b-b7a6-3da6bc8d2d6d.roa (raw, json)
Hash identifier: 1dp4Z3vIFYk0IKkOj2fOd3WE5Hwb1cgQPdZ127qFAzo=
Subject key identifier: 23:0F:26:CF:3E:79:C2:C0:1E:04:BE:05:16:93:6A:A6:51:74:81:99
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A16B7BB07661D3D8113FDC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/888004ef-fd46-3b7b-b7a6-3da6bc8d2d6d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.76.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:16:b7:bb:07:66:1d:3d:81:13:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2c574569-2c44-464c-be97-e30baf7cc696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:6d:20:81:56:ba:b0:bf:76:f4:c6:24:f3:
24:eb:7f:e5:ab:4a:e1:f9:25:c3:64:d0:ee:06:a2:
93:69:ae:91:b6:ab:ff:09:dd:0a:b4:db:b0:f4:8f:
9b:10:40:ed:2b:8d:60:98:25:53:cf:d7:fc:73:a9:
9a:d6:b4:f2:7e:ba:c9:0d:14:60:7b:db:c2:9c:f9:
2a:99:b2:b3:46:c2:6a:bc:36:78:e1:6b:27:6f:80:
78:07:92:06:14:51:e3:b0:37:f8:0c:8f:53:f2:46:
ed:b5:30:70:bb:6e:e9:04:2d:99:ff:a8:a2:da:df:
90:15:ce:35:ae:4e:fd:88:43:7c:b4:aa:d6:cc:e6:
54:47:d5:72:de:f0:8d:a6:5d:db:12:af:2d:10:2c:
5a:b1:f4:44:98:57:86:f9:b0:b1:28:20:2f:a1:db:
95:8e:15:59:b5:63:17:ce:e3:9b:b9:47:27:94:92:
65:42:21:2a:c6:ad:e0:d5:6f:8e:ac:d4:57:83:a2:
80:6c:54:9d:fa:50:e1:04:64:29:f8:47:08:f0:ec:
89:31:9e:9c:ea:31:02:a5:e6:b1:ea:a7:f8:55:d2:
ce:59:7a:80:da:33:16:7c:e7:47:9a:dc:ef:0b:71:
36:14:07:19:72:c3:d0:e1:d2:61:5b:05:e6:13:14:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0F:26:CF:3E:79:C2:C0:1E:04:BE:05:16:93:6A:A6:51:74:81:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/888004ef-fd46-3b7b-b7a6-3da6bc8d2d6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.76.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:cb:75:d4:51:a1:03:e8:40:b4:fa:5f:39:5d:f0:96:ca:d3:
ad:28:21:b8:c7:2c:62:a3:92:3b:53:2e:56:1e:ff:15:8c:65:
8a:8f:07:19:10:a2:4d:ba:a1:23:16:5f:14:fc:de:ad:33:ef:
78:38:c6:36:06:67:92:a4:97:a7:e2:05:5d:87:eb:bd:43:10:
af:a0:d8:74:5e:ff:a0:57:fb:24:f5:3d:8c:77:fc:69:0e:c3:
48:d1:84:77:08:6b:ce:5b:1a:6a:19:14:41:b1:0f:9d:1a:90:
43:5c:6b:b7:15:28:13:a5:a2:94:74:ab:b2:8c:3e:9b:e5:00:
9a:c4:ee:5a:d0:e8:64:8a:48:dc:6f:38:d9:79:52:dd:82:a0:
aa:84:44:f3:7b:7d:1f:fa:f9:ac:9c:38:f9:8d:4e:cb:95:a9:
20:ea:e5:f9:6f:df:c8:de:29:c6:92:7f:84:4e:24:4e:04:4f:
d6:0c:b5:39:5d:2a:cc:b9:f3:91:0c:ef:af:8a:a2:13:f1:9b:
9e:64:78:cd:0a:31:bb:9e:c5:98:31:46:16:34:7a:88:b1:72:
5d:d2:7e:61:ca:89:31:55:a9:35:7d:8c:fe:03:5e:87:3f:09:
7c:66:09:83:b5:9a:79:05:89:cc:24:e9:ec:77:c2:bb:12:3f:
93:2b:7a:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFre7B2YdPYET/cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MmM1NzQ1NjktMmM0NC00NjRjLWJlOTctZTMwYmFmN2NjNjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhttIIFWurC/dvTGJPMk63/lq0rh+SXDZNDu
BqKTaa6Rtqv/Cd0KtNuw9I+bEEDtK41gmCVTz9f8c6ma1rTyfrrJDRRge9vCnPkq
mbKzRsJqvDZ44Wsnb4B4B5IGFFHjsDf4DI9T8kbttTBwu27pBC2Z/6ii2t+QFc41
rk79iEN8tKrWzOZUR9Vy3vCNpl3bEq8tECxasfREmFeG+bCxKCAvoduVjhVZtWMX
zuObuUcnlJJlQiEqxq3g1W+OrNRXg6KAbFSd+lDhBGQp+EcI8OyJMZ6c6jECpeax
6qf4VdLOWXqA2jMWfOdHmtzvC3E2FAcZcsPQ4dJhWwXmExROYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMPJs8+ecLAHgS+BRaTaqZRdIGZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODg4MDA0ZWYtZmQ0Ni0z
YjdiLWI3YTYtM2RhNmJjOGQyZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHLddRRoQPoQLT6Xzld8JbK060oIbjHLGKjkjtTLlYe/xWMZYqPBxkQ
ok26oSMWXxT83q0z73g4xjYGZ5Kkl6fiBV2H671DEK+g2HRe/6BX+yT1PYx3/GkO
w0jRhHcIa85bGmoZFEGxD50akENca7cVKBOlopR0q7KMPpvlAJrE7lrQ6GSKSNxv
ONl5Ut2CoKqERPN7fR/6+aycOPmNTsuVqSDq5flv38jeKcaSf4ROJE4ET9YMtTld
Ksy585EM76+KohPxm55keM0KMbuexZgxRhY0eoixcl3SfmHKiTFVqTV9jP4DXoc/
CXxmCYO1mnkFicwk6ex3wrsSP5MreiQ=
-----END CERTIFICATE-----
Generated at Sat May 10 11:53:03 2025 by rpki-client