Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a81d33dc-83db-367a-b959-2798b524b8b5.roa
File: a81d33dc-83db-367a-b959-2798b524b8b5.roa (raw, json)
Hash identifier: vC5LBBYeLAaDRGzOjmgkgLgYe9zVtnoGE/yn0qg1r9U=
Subject key identifier: 31:4D:E4:CB:26:4C:16:E1:06:22:4B:02:DB:5E:A1:48:63:E0:8D:12
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AC2EDBF2FF933F1878F940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a81d33dc-83db-367a-b959-2798b524b8b5.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.108.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ac:2e:db:f2:ff:93:3f:18:78:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=a2ceff10-6485-48af-8d47-fe3b199a86c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:f4:b7:2b:c5:27:b9:0f:18:cd:ab:d1:32:
5c:aa:06:06:c2:85:7a:e6:bd:d7:10:05:11:3b:7f:
97:b4:a5:3d:ec:15:c0:46:37:a9:57:f0:90:ad:4f:
24:21:ff:f2:d1:0d:2f:56:79:fd:ec:19:5e:7f:67:
12:c0:90:55:13:1f:42:02:e0:ae:0b:f9:f0:2e:df:
0b:48:f2:32:15:d0:3e:1f:70:e5:fd:8e:ec:fc:1d:
f7:66:85:6d:ba:36:df:28:d2:c5:6b:b8:ad:80:23:
73:18:14:48:ee:ce:f9:66:57:52:59:28:1b:53:58:
01:77:6a:34:6f:bb:11:11:fd:7f:cf:81:33:82:ba:
c2:c4:8a:7b:62:36:34:3b:26:45:ed:e4:b1:7a:49:
04:7e:58:31:f6:19:4f:84:11:e8:d2:c9:d8:f1:16:
65:fb:69:fe:f4:f9:55:fb:65:6c:64:06:d2:51:0b:
eb:62:d8:ee:79:20:b1:51:42:2e:1d:04:93:f5:0f:
a3:b9:7d:d9:09:ca:82:ee:6e:52:d4:62:34:b0:b8:
04:70:a6:18:a1:a7:38:f9:fa:01:2d:91:1b:f3:60:
37:cd:a9:f8:6d:a8:a7:9f:d8:82:2a:a4:30:0e:24:
da:1a:31:8c:75:cf:46:09:fe:49:ae:72:21:bc:f1:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4D:E4:CB:26:4C:16:E1:06:22:4B:02:DB:5E:A1:48:63:E0:8D:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a81d33dc-83db-367a-b959-2798b524b8b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.108.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:b7:75:af:e8:fb:1b:a1:68:97:ec:db:f5:7f:03:fc:09:58:
84:82:55:ea:9f:cb:ed:11:1f:f1:b0:81:9a:ff:e3:0b:7f:20:
7d:c3:7e:ed:d5:97:f1:da:41:76:74:d6:eb:8c:2d:5f:a9:3b:
4d:42:9b:4a:a1:49:61:83:3f:bc:d0:56:93:f7:c3:ef:f2:ee:
41:02:5a:db:bf:89:c0:a1:11:3a:65:2d:2b:6a:36:40:4b:b1:
b1:30:a2:49:7c:aa:04:da:85:c0:6a:e3:c3:fd:c4:2f:3e:9d:
c2:d0:af:bd:49:6b:08:7d:78:40:0f:2c:43:5a:76:63:e8:94:
c6:51:93:db:6e:51:e4:6e:49:7d:7c:01:0b:92:71:aa:03:45:
0b:db:37:7d:e5:0a:31:fa:0f:5d:2d:0a:a2:ab:e8:37:c1:3f:
22:ec:b8:7e:dd:8b:dd:49:77:4d:ed:38:18:02:93:8d:20:37:
c8:0e:25:fb:18:4c:c0:c6:d1:50:c1:02:1a:90:d6:14:19:a7:
f8:b4:5b:b6:3c:8b:3d:d8:74:4d:b9:d4:cc:2d:c8:52:bc:6d:
e0:70:5c:79:4a:8e:f6:49:38:bd:9b:9b:00:2f:a4:ed:52:ce:
67:7b:c3:76:56:4d:aa:df:de:a0:e6:1d:34:40:23:31:89:38:
be:3b:e4:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnrC7b8v+TPxh4+UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YTJjZWZmMTAtNjQ4NS00OGFmLThkNDctZmUzYjE5OWE4NmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtez0tyvFJ7kPGM2r0TJcqgYGwoV65r3XEAUR
O3+XtKU97BXARjepV/CQrU8kIf/y0Q0vVnn97Blef2cSwJBVEx9CAuCuC/nwLt8L
SPIyFdA+H3Dl/Y7s/B33ZoVtujbfKNLFa7itgCNzGBRI7s75ZldSWSgbU1gBd2o0
b7sREf1/z4EzgrrCxIp7YjY0OyZF7eSxekkEflgx9hlPhBHo0snY8RZl+2n+9PlV
+2VsZAbSUQvrYtjueSCxUUIuHQST9Q+juX3ZCcqC7m5S1GI0sLgEcKYYoac4+foB
LZEb82A3zan4bainn9iCKqQwDiTaGjGMdc9GCf5JrnIhvPGNZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDFN5MsmTBbhBiJLAtteoUhj4I0SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTgxZDMzZGMtODNkYi0z
NjdhLWI5NTktMjc5OGI1MjRiOGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI23da/o+xuhaJfs2/V/A/wJWISCVeqfy+0RH/GwgZr/4wt/IH3Dfu3V
l/HaQXZ01uuMLV+pO01Cm0qhSWGDP7zQVpP3w+/y7kECWtu/icChETplLStqNkBL
sbEwokl8qgTahcBq48P9xC8+ncLQr71Jawh9eEAPLENadmPolMZRk9tuUeRuSX18
AQuScaoDRQvbN33lCjH6D10tCqKr6DfBPyLsuH7di91Jd03tOBgCk40gN8gOJfsY
TMDG0VDBAhqQ1hQZp/i0W7Y8iz3YdE251MwtyFK8beBwXHlKjvZJOL2bmwAvpO1S
zmd7w3ZWTarf3qDmHTRAIzGJOL475L4=
-----END CERTIFICATE-----
Generated at Sat May 10 14:39:05 2025 by rpki-client