Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac936897-4de9-31cc-a303-8e09d5677660.roa
File: ac936897-4de9-31cc-a303-8e09d5677660.roa (raw, json)
Hash identifier: koc/s5XpXxtQhHc3nJFqUsIcMLCo66RUwJA0n8Uoqb4=
Subject key identifier: 35:35:17:45:10:CB:20:5D:78:4C:6D:CC:B1:51:6E:F7:D1:02:28:41
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285840C8ABF8A7D0CF80F77EEDE8A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac936897-4de9-31cc-a303-8e09d5677660.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Tue 06 May 2025 04:00:00 +0000
asID: 396982
IP address blocks: 34.31.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c8:ab:f8:a7:d0:cf:80:f7:7e:ed:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : May 6 04:00:00 2025 GMT
Subject: CN=d7bbe63d-b53b-4ef8-9ae3-58cf4c4c26cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:3c:e2:f0:dc:25:b3:b7:88:e2:ff:5b:c8:
48:4a:17:68:76:76:72:a8:7c:e9:3c:5f:11:16:10:
fd:48:64:4e:1e:2c:17:9f:38:9a:95:13:0f:f8:e7:
dd:10:6f:a7:b5:3d:7c:0b:17:9f:48:f0:b0:bf:d4:
3d:99:33:9b:db:4a:d4:f4:3a:9c:d0:9f:d3:c8:32:
ea:4e:d4:57:b6:dc:c3:58:65:97:49:95:b0:8e:23:
25:78:05:d0:20:9d:a9:1f:cd:ae:1d:34:19:59:cb:
31:f3:86:42:75:0a:16:a8:04:47:32:63:76:98:e8:
11:99:fb:20:ed:b1:81:ce:ad:23:b3:90:59:e2:c5:
24:45:16:77:d8:a2:5a:9f:49:a9:b1:0f:82:e9:c4:
81:38:aa:4e:4c:b8:0a:27:3f:a3:6f:f2:e9:e9:fa:
bf:cd:90:7f:27:cb:78:8e:78:94:94:ef:2c:c3:33:
0d:7d:d4:d8:00:45:62:e3:13:bc:a9:bf:4d:5d:3c:
3b:c5:d3:87:ec:df:6d:97:72:f4:5e:14:c4:54:71:
07:47:19:7b:8f:3a:e5:40:22:cd:c4:80:ce:c5:2b:
0d:63:bb:06:6a:b8:07:64:8e:a9:37:91:e1:82:79:
89:af:c0:37:f6:02:7c:f8:3a:17:ba:0f:59:b5:73:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:17:45:10:CB:20:5D:78:4C:6D:CC:B1:51:6E:F7:D1:02:28:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac936897-4de9-31cc-a303-8e09d5677660.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:26:d8:17:e6:26:e2:b5:40:85:96:5a:7c:c8:9d:cb:0b:a3:
1e:9e:25:54:9d:2e:83:2e:cf:71:fa:8c:d3:53:58:99:c6:24:
b3:d5:86:b7:07:b2:fd:94:1b:e3:6a:be:70:91:b1:57:15:1b:
7a:d1:f9:f3:1a:e0:46:c8:24:76:58:42:c2:77:2b:4a:da:3b:
26:2b:07:3f:f3:20:ff:9e:e8:14:a0:62:11:19:0e:c3:9a:6f:
3d:e0:2b:3b:5a:fb:6d:66:19:99:bb:cf:a0:be:6d:4f:fd:e8:
88:82:9f:63:8f:8d:aa:a3:06:1e:b2:5a:5e:5e:de:6f:2d:d5:
2b:7d:62:82:4b:37:a5:06:40:ae:04:01:7c:8f:5e:97:72:31:
f2:21:c0:a1:c1:27:99:b7:6f:94:58:83:9a:aa:bd:76:5d:24:
c3:a3:3d:ba:10:bc:ad:4a:93:46:72:e9:62:5a:dd:50:e8:39:
f6:fd:ef:cb:04:f6:fe:51:ff:f0:fb:00:51:65:29:56:8e:ef:
7c:b6:13:32:70:38:f2:4c:08:84:b0:80:ef:a2:2c:65:2e:b0:
00:55:2b:ca:2e:d8:46:eb:86:ef:54:c6:0d:19:8b:ec:4a:cb:
a9:54:4c:ce:99:2f:08:65:dc:2b:88:41:1f:2a:70:ad:16:0f:
b1:c1:12:b5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDIq/in0M+A937t6KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDIwMTEyMDAwMFoXDTI1MDUwNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDdiYmU2M2QtYjUzYi00ZWY4LTlhZTMtNThjZjRjNGMyNmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm884vDcJbO3iOL/W8hIShdodnZyqHzpPF8R
FhD9SGROHiwXnzialRMP+OfdEG+ntT18CxefSPCwv9Q9mTOb20rU9Dqc0J/TyDLq
TtRXttzDWGWXSZWwjiMleAXQIJ2pH82uHTQZWcsx84ZCdQoWqARHMmN2mOgRmfsg
7bGBzq0js5BZ4sUkRRZ32KJan0mpsQ+C6cSBOKpOTLgKJz+jb/Lp6fq/zZB/J8t4
jniUlO8swzMNfdTYAEVi4xO8qb9NXTw7xdOH7N9tl3L0XhTEVHEHRxl7jzrlQCLN
xIDOxSsNY7sGargHZI6pN5HhgnmJr8A39gJ8+DoXug9ZtXMJ3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDU1F0UQyyBdeExtzLFRbvfRAihBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWM5MzY4OTctNGRlOS0z
MWNjLWEzMDMtOGUwOWQ1Njc3NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIh8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeibYF+Ym4rVAhZZafMidywujHp4lVJ0ugy7PcfqM01NYmcYks9WGtwey
/ZQb42q+cJGxVxUbetH58xrgRsgkdlhCwncrSto7JisHP/Mg/57oFKBiERkOw5pv
PeArO1r7bWYZmbvPoL5tT/3oiIKfY4+NqqMGHrJaXl7eby3VK31igks3pQZArgQB
fI9el3Ix8iHAocEnmbdvlFiDmqq9dl0kw6M9uhC8rUqTRnLpYlrdUOg59v3vywT2
/lH/8PsAUWUpVo7vfLYTMnA48kwIhLCA76IsZS6wAFUryi7YRuuG71TGDRmL7ErL
qVRMzpkvCGXcK4hBHypwrRYPscEStQ==
-----END CERTIFICATE-----
Generated at Sat May 10 14:00:13 2025 by rpki-client