Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1b4cfd6-a550-3d01-92b6-1a3f5021c112.roa
File: b1b4cfd6-a550-3d01-92b6-1a3f5021c112.roa (raw, json)
Hash identifier: 6SPVdS4u58H4p8YyktRlE4bPmhV42l81hGj4OW3UYVA=
Subject key identifier: B5:CF:A9:B9:D7:C6:A6:A6:9F:F6:EF:86:39:1B:F0:87:C5:9F:51:1B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B224242388937C47221780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1b4cfd6-a550-3d01-92b6-1a3f5021c112.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.116.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b2:24:24:23:88:93:7c:47:22:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c2cf9a20-954f-4bfc-909a-6d0d9c430acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:61:4d:10:c7:aa:2f:ee:f6:32:bc:2f:14:e2:
62:f4:ee:71:a9:e0:96:32:f8:92:bb:e9:6b:90:5d:
35:f3:cc:2f:fd:a3:c4:00:45:20:d9:05:1a:95:39:
a3:14:68:47:5c:50:af:1c:22:10:fd:b4:28:fe:75:
ab:d5:f7:42:19:0e:f6:c9:88:db:f2:ec:90:94:70:
2a:fa:7d:d4:f7:84:c4:46:a1:4e:23:32:2b:74:80:
6b:1f:1e:a5:bf:53:e9:6b:a1:de:f3:94:42:42:13:
48:2d:26:41:50:4f:f6:87:b5:06:d4:0d:78:de:a3:
d3:56:4d:74:53:98:4f:5a:98:bf:e5:8c:b8:fc:55:
b8:8a:8a:fb:b0:8f:34:e6:c6:3e:25:aa:48:1d:da:
eb:b7:5f:63:2d:9a:c7:86:04:33:7b:28:13:21:1b:
ef:e5:b4:a7:1a:ab:bd:e4:ae:4a:3b:e9:34:15:30:
87:ed:ca:83:6e:6b:18:d1:78:78:70:f4:92:36:14:
4a:93:82:4e:61:03:ef:e9:15:44:9d:ea:94:1a:6d:
bb:a2:ec:53:3b:52:0b:e1:45:3d:40:99:da:1d:27:
bb:a8:d3:f2:fa:7a:67:1c:91:b5:ad:d2:ae:1e:21:
33:32:00:e7:6d:59:82:62:e8:13:15:a3:ea:05:31:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CF:A9:B9:D7:C6:A6:A6:9F:F6:EF:86:39:1B:F0:87:C5:9F:51:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1b4cfd6-a550-3d01-92b6-1a3f5021c112.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.116.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:24:cf:ec:e0:f4:59:20:5d:9a:7f:2f:08:1f:77:7c:aa:aa:
8c:2a:e7:43:be:cb:91:c5:63:b0:13:bf:3e:74:88:a3:47:de:
4f:41:f4:38:29:28:80:99:97:47:df:4c:48:b4:3b:f8:df:52:
8d:34:d1:dd:57:1b:d5:58:7a:dc:d2:26:af:58:7d:da:f3:76:
19:75:2e:e3:48:51:24:80:bc:2c:fb:47:7f:f3:09:3a:02:c2:
0f:95:6d:99:5d:9a:98:33:e5:56:6e:4d:0c:19:87:67:3a:42:
d7:75:0a:d4:0b:9e:9e:92:4b:22:e4:f3:3f:6a:e7:93:52:08:
e9:f5:9d:00:df:e6:c2:2e:b8:a6:8f:0c:62:e7:cf:a4:9d:87:
2d:6f:c6:8c:d2:d3:c4:b2:43:09:09:f6:1c:38:ce:40:42:85:
f6:48:25:32:30:a0:6c:67:5d:58:fb:16:11:f2:9b:93:9e:94:
67:a1:e1:6d:50:f4:08:f5:dd:fa:a5:46:9c:db:36:6e:b9:72:
58:6f:c2:7b:1a:07:6a:e1:48:14:73:18:e1:de:a4:31:9c:c0:
e8:51:29:9b:39:ec:35:b3:e6:34:7d:ef:de:83:ce:5a:d5:4d:
92:75:0e:6e:ad:c3:19:a5:bf:83:ed:65:b9:2a:0a:06:e2:90:
fc:aa:7d:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnsiQkI4iTfEciF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YzJjZjlhMjAtOTU0Zi00YmZjLTkwOWEtNmQwZDljNDMwYWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWFNEMeqL+72MrwvFOJi9O5xqeCWMviSu+lr
kF0188wv/aPEAEUg2QUalTmjFGhHXFCvHCIQ/bQo/nWr1fdCGQ72yYjb8uyQlHAq
+n3U94TERqFOIzIrdIBrHx6lv1Ppa6He85RCQhNILSZBUE/2h7UG1A143qPTVk10
U5hPWpi/5Yy4/FW4ior7sI805sY+JapIHdrrt19jLZrHhgQzeygTIRvv5bSnGqu9
5K5KO+k0FTCH7cqDbmsY0Xh4cPSSNhRKk4JOYQPv6RVEneqUGm27ouxTO1IL4UU9
QJnaHSe7qNPy+npnHJG1rdKuHiEzMgDnbVmCYugTFaPqBTEZkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXPqbnXxqamn/bvhjkb8IfFn1EbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjFiNGNmZDYtYTU1MC0z
ZDAxLTkyYjYtMWEzZjUwMjFjMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInTgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACckz+zg9FkgXZp/Lwgfd3yqqowq50O+y5HFY7ATvz50iKNH3k9B9Dgp
KICZl0ffTEi0O/jfUo000d1XG9VYetzSJq9Yfdrzdhl1LuNIUSSAvCz7R3/zCToC
wg+VbZldmpgz5VZuTQwZh2c6Qtd1CtQLnp6SSyLk8z9q55NSCOn1nQDf5sIuuKaP
DGLnz6Sdhy1vxozS08SyQwkJ9hw4zkBChfZIJTIwoGxnXVj7FhHym5OelGeh4W1Q
9Aj13fqlRpzbNm65clhvwnsaB2rhSBRzGOHepDGcwOhRKZs57DWz5jR9796DzlrV
TZJ1Dm6twxmlv4PtZbkqCgbikPyqfbk=
-----END CERTIFICATE-----
Generated at Sat May 10 14:48:59 2025 by rpki-client