Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afb2bc32-1e85-34e2-bd53-952effc954b1.roa
File: afb2bc32-1e85-34e2-bd53-952effc954b1.roa (raw, json)
Hash identifier: fa0FptfJhzNs4ZwBaQ+J/C5VCDsPMQkToY54QkJ4/sA=
Subject key identifier: 38:E3:42:77:59:3D:75:85:DA:3A:C9:A1:1A:38:38:D3:D5:2B:7C:FD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858439AEB21C704D43CB78F996340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afb2bc32-1e85-34e2-bd53-952effc954b1.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Sat 01 Mar 2025 05:00:00 +0000
asID: 19527
IP address blocks: 34.1.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:eb:21:c7:04:d4:3c:b7:8f:99:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2025 GMT
Subject: CN=dbd592c0-fb40-4e3e-83d2-a0f28025a5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a4:d8:30:0e:34:2c:bd:df:d0:18:97:b4:40:
fd:7b:95:a2:01:80:2a:54:f2:ff:3b:93:bb:ef:cf:
6b:53:6d:78:93:44:8e:b7:c0:12:ab:19:a9:27:69:
79:c2:b0:76:20:72:9f:cc:9a:d2:5c:9d:33:05:b0:
a9:70:38:8e:ce:07:c7:3c:c2:a3:6d:2f:37:62:13:
3e:2a:0b:c5:50:85:0e:f4:36:79:d8:5a:98:04:61:
1e:42:48:c2:01:93:17:74:ab:f7:e4:fd:fd:af:41:
0c:82:c3:7d:d0:9b:1c:2b:bd:4c:b9:c1:1d:03:1b:
a8:8b:4e:22:6c:ab:43:02:83:5d:8f:9f:25:3e:bc:
ad:7b:2b:59:e5:81:89:cf:21:4c:d7:96:31:d8:2b:
00:a3:df:ef:c9:d0:d7:87:8c:1c:ec:2d:0f:f9:9b:
c7:0b:e2:c6:ed:73:07:7e:cc:ee:4b:8e:33:f3:5d:
74:58:cf:0c:a0:17:b2:30:f0:94:e0:2a:5e:a2:b0:
0c:f1:ab:0e:f5:8c:76:4f:75:d2:d1:e4:e4:44:b5:
20:5f:70:d7:80:34:dc:20:3e:0e:9f:eb:36:73:be:
ac:43:5b:01:9d:11:0d:c0:db:5b:29:2e:a1:f2:24:
e7:4f:c6:85:65:4a:80:eb:7d:5a:3b:57:80:32:c4:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E3:42:77:59:3D:75:85:DA:3A:C9:A1:1A:38:38:D3:D5:2B:7C:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afb2bc32-1e85-34e2-bd53-952effc954b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:67:fc:fa:e0:ff:55:fd:f4:99:29:62:b6:14:a6:10:0c:c4:
44:58:85:20:84:24:eb:bc:ec:17:fc:d7:ac:81:6b:9b:f6:cd:
fb:1b:7b:d5:80:3b:c3:28:fa:f2:22:43:6c:e2:6f:20:41:0a:
c2:aa:f5:20:57:da:92:d9:8a:be:87:84:0e:57:74:1e:f8:c2:
6c:0b:b8:46:bd:ba:a3:36:cd:84:6e:0d:da:b3:88:f1:bc:3b:
51:2a:a8:9f:4d:8b:f3:78:8f:53:8f:46:bc:ef:f8:9b:7a:47:
80:8c:85:91:cc:48:35:15:94:ec:74:75:55:79:fb:56:8d:21:
bf:df:70:ff:1b:24:58:6f:6a:f5:a8:09:56:ae:96:24:08:73:
35:de:29:46:e9:21:37:cf:3e:ff:00:bd:c7:6d:40:5a:58:ef:
1d:76:25:f6:28:02:b0:5b:e8:1b:64:c1:e2:21:38:91:16:e0:
d1:ad:03:4e:5f:ab:d5:26:bb:8c:ef:31:58:a3:17:e0:82:85:
2a:47:6e:4e:f8:0c:0a:6a:4a:9e:f4:2e:fb:da:f3:ff:1e:78:
a4:79:d3:f1:7b:42:75:f1:a2:9b:fc:f6:de:0b:a9:b2:75:a7:
84:cb:ee:c7:15:92:97:7c:c5:4b:39:bf:4b:62:15:e6:ca:1a:
cd:b4:2a:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa6yHHBNQ8t4+ZY0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMTAxODEyMDAwMFoXDTI1MDMwMTA1MDAwMFowLzEtMCsGA1UEAxMk
ZGJkNTkyYzAtZmI0MC00ZTNlLTgzZDItYTBmMjgwMjVhNWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaTYMA40LL3f0BiXtED9e5WiAYAqVPL/O5O7
789rU214k0SOt8ASqxmpJ2l5wrB2IHKfzJrSXJ0zBbCpcDiOzgfHPMKjbS83YhM+
KgvFUIUO9DZ52FqYBGEeQkjCAZMXdKv35P39r0EMgsN90JscK71MucEdAxuoi04i
bKtDAoNdj58lPryteytZ5YGJzyFM15Yx2CsAo9/vydDXh4wc7C0P+ZvHC+LG7XMH
fszuS44z8110WM8MoBeyMPCU4CpeorAM8asO9Yx2T3XS0eTkRLUgX3DXgDTcID4O
n+s2c76sQ1sBnRENwNtbKS6h8iTnT8aFZUqA631aO1eAMsQ8WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDjjQndZPXWF2jrJoRo4ONPVK3z9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZiMmJjMzItMWU4NS0z
NGUyLWJkNTMtOTUyZWZmYzk1NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1n/Prg/1X99JkpYrYUphAMxERYhSCEJOu87Bf816yBa5v2zfsbe9WA
O8Mo+vIiQ2zibyBBCsKq9SBX2pLZir6HhA5XdB74wmwLuEa9uqM2zYRuDdqziPG8
O1EqqJ9Ni/N4j1OPRrzv+Jt6R4CMhZHMSDUVlOx0dVV5+1aNIb/fcP8bJFhvavWo
CVauliQIczXeKUbpITfPPv8AvcdtQFpY7x12JfYoArBb6BtkweIhOJEW4NGtA05f
q9Umu4zvMVijF+CChSpHbk74DApqSp70Lvva8/8eeKR50/F7QnXxopv89t4LqbJ1
p4TL7scVkpd8xUs5v0tiFebKGs20KvE=
-----END CERTIFICATE-----
Generated at Sat May 10 11:26:17 2025 by rpki-client