Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a72bf643-d6a9-39c9-9379-ea3167c1e13f.roa
File: a72bf643-d6a9-39c9-9379-ea3167c1e13f.roa (raw, json)
Hash identifier: WdHw8wnoY3axJLtyyOkdjRrs7jgZeTjzkAL2nrV+bts=
Subject key identifier: FB:A3:3E:A8:A9:2F:F6:97:F4:82:0C:45:AF:8E:60:CC:07:FE:9A:67
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1234B28B744F934EEAE000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a72bf643-d6a9-39c9-9379-ea3167c1e13f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.108.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:34:b2:8b:74:4f:93:4e:ea:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e08cb53d-4330-4515-a060-623b858d8898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:7e:20:9d:47:d8:ac:be:13:65:3d:ed:ff:
ba:98:9e:a7:0f:4b:47:e6:5e:18:c6:9b:17:05:7d:
1c:d7:9f:63:0b:c6:df:fd:a6:63:0d:d9:6b:bf:00:
cf:1d:af:46:23:87:1e:78:2d:2b:e7:20:5f:ac:4b:
2f:5e:cc:9b:d9:94:06:f3:d0:62:2c:48:4a:a3:49:
f0:9d:dc:b1:bb:e2:bc:a9:68:11:76:69:87:a0:d3:
ca:19:72:a1:91:45:46:bb:ff:81:50:cf:5f:6d:3d:
46:76:35:62:db:d8:fe:b4:b8:62:23:bd:ce:84:d7:
33:c4:76:62:0a:94:c6:25:df:29:48:22:15:99:f8:
1f:23:15:ec:f1:a9:1e:03:8d:9f:9b:2d:ee:23:66:
5a:20:d7:b4:26:62:22:63:07:6b:93:a2:c9:31:45:
38:21:74:dd:b9:a1:f7:76:3b:6f:93:53:6d:d3:5f:
22:d7:d9:88:b3:49:24:f7:3c:fd:82:b9:69:60:48:
ed:a4:c6:39:3e:8f:b8:ff:dc:fe:b8:f7:8c:57:09:
be:05:ac:d3:e3:c8:a5:13:56:24:97:bd:79:eb:0e:
10:b7:83:46:1f:3d:18:44:44:ab:60:0e:15:7b:65:
9e:82:b8:31:85:94:49:7b:79:8d:c5:6c:8c:f5:0d:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A3:3E:A8:A9:2F:F6:97:F4:82:0C:45:AF:8E:60:CC:07:FE:9A:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a72bf643-d6a9-39c9-9379-ea3167c1e13f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.108.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:c9:d0:9e:0c:fb:90:98:36:79:50:e3:36:0b:c9:9e:54:7f:
e1:22:dd:df:42:6a:43:53:55:98:7d:db:58:4c:b8:5e:03:8f:
25:43:1e:a8:bb:47:26:a6:c5:9d:df:81:e3:08:cc:31:49:f7:
6f:89:21:6b:7d:43:44:3f:9a:01:b4:0c:e9:10:a6:ca:ad:10:
5c:06:25:67:de:2a:39:f1:68:8a:69:32:31:25:1c:9f:de:26:
8e:34:dc:cd:ee:c8:cc:70:a0:67:ab:a7:9a:7d:7c:78:ee:e3:
40:ef:72:3e:18:f1:04:45:12:2c:bc:bf:f8:02:e8:6c:04:20:
50:b7:fe:7e:d8:8d:5a:69:b6:fb:23:65:6e:e0:6c:85:0e:19:
92:65:15:77:e5:df:07:f5:d7:92:94:de:ed:63:54:fe:9b:5d:
2c:1d:b8:bb:32:01:30:25:d4:cd:99:ad:c8:27:0a:c6:c1:a2:
fd:c4:9e:41:8c:ff:29:6c:97:c2:98:f1:36:40:43:14:5f:c6:
80:43:09:e2:cb:3a:87:6b:1f:ef:2f:10:7f:82:7c:54:f7:69:
82:84:ad:eb:06:af:65:cd:31:e0:e5:9f:c2:b4:c6:95:54:26:
92:fb:53:a5:f3:f2:4c:17:2c:6d:31:26:2c:6b:c3:b0:f1:6f:
7e:dd:f3:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKEjSyi3RPk07q4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTA4Y2I1M2QtNDMzMC00NTE1LWEwNjAtNjIzYjg1OGQ4ODk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCd+IJ1H2Ky+E2U97f+6mJ6nD0tH5l4YxpsX
BX0c159jC8bf/aZjDdlrvwDPHa9GI4ceeC0r5yBfrEsvXsyb2ZQG89BiLEhKo0nw
ndyxu+K8qWgRdmmHoNPKGXKhkUVGu/+BUM9fbT1GdjVi29j+tLhiI73OhNczxHZi
CpTGJd8pSCIVmfgfIxXs8akeA42fmy3uI2ZaINe0JmIiYwdrk6LJMUU4IXTduaH3
djtvk1Nt018i19mIs0kk9zz9grlpYEjtpMY5Po+4/9z+uPeMVwm+BazT48ilE1Yk
l7156w4Qt4NGHz0YRESrYA4Ve2WegrgxhZRJe3mNxWyM9Q1YWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPujPqipL/aX9IIMRa+OYMwH/ppnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTcyYmY2NDMtZDZhOS0z
OWM5LTkzNzktZWEzMTY3YzFlMTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImwgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvJ0J4M+5CYNnlQ4zYLyZ5Uf+Ei3d9CakNTVZh921hMuF4DjyVDHqi7
RyamxZ3fgeMIzDFJ92+JIWt9Q0Q/mgG0DOkQpsqtEFwGJWfeKjnxaIppMjElHJ/e
Jo403M3uyMxwoGerp5p9fHju40Dvcj4Y8QRFEiy8v/gC6GwEIFC3/n7YjVpptvsj
ZW7gbIUOGZJlFXfl3wf115KU3u1jVP6bXSwduLsyATAl1M2ZrcgnCsbBov3EnkGM
/ylsl8KY8TZAQxRfxoBDCeLLOodrH+8vEH+CfFT3aYKEresGr2XNMeDln8K0xpVU
JpL7U6Xz8kwXLG0xJixrw7Dxb37d878=
-----END CERTIFICATE-----
Generated at Sat May 10 14:52:33 2025 by rpki-client