Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5bf3e10-5fb5-38cb-85bb-1384474c2623.roa
File: b5bf3e10-5fb5-38cb-85bb-1384474c2623.roa (raw, json)
Hash identifier: JR5PqISXAAhRlQPaivUIhGTgCNcFA1U9sHDpGiscUTs=
Subject key identifier: 2C:75:FA:1B:4A:F7:21:FC:37:92:F3:5A:1D:9F:2D:5C:45:6F:B3:61
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583FA36C2ABA5F6DE7EC4DD7FC80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5bf3e10-5fb5-38cb-85bb-1384474c2623.roa
Signing time: Wed 19 Oct 2022 12:00:00 +0000
ROA not before: Wed 19 Oct 2022 12:00:00 +0000
ROA not after: Tue 21 Jan 2025 05:00:00 +0000
asID: 15169
IP address blocks: 34.0.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a3:6c:2a:ba:5f:6d:e7:ec:4d:d7:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 19 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2025 GMT
Subject: CN=51a57fe9-6c1a-46f4-b869-bf0ee71b19ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:c3:d3:c4:26:5b:db:ee:a9:d0:44:95:85:
2d:18:05:77:34:4b:d8:f2:05:4a:f9:88:96:4f:69:
78:8b:18:54:be:76:65:27:a9:45:da:e4:4a:00:53:
4f:86:93:7c:23:16:84:13:9e:df:da:93:ce:d2:9f:
af:cc:af:c0:fe:7b:93:21:db:67:13:66:33:15:35:
a2:ff:97:b7:ed:56:31:86:e9:1b:c9:c9:ad:b2:2c:
80:d0:0d:17:78:35:0c:dd:c9:a8:a2:08:ed:57:5b:
93:71:0e:df:64:7e:8b:a8:4b:41:50:1e:bd:e0:3a:
09:ff:06:b0:ef:a7:d7:df:bb:4d:a7:fe:d0:51:c4:
75:ab:9d:c1:f7:2d:d8:67:d9:f1:21:91:86:61:49:
81:d4:f0:c4:32:1b:06:ac:58:56:bf:6e:1f:45:62:
49:39:12:a7:35:5a:e8:e8:5b:fa:83:0e:5f:5a:cd:
f1:7b:a4:fa:e2:c8:b6:2c:3f:5e:b4:ae:88:e7:37:
b7:6c:91:fb:b2:cb:83:72:94:f5:a7:8f:3b:93:94:
e8:23:85:1a:6d:73:f0:93:ad:ce:42:12:9b:5e:76:
b2:cd:51:f6:98:07:15:44:cb:37:33:eb:1d:96:a3:
9e:16:a8:cb:67:e0:ee:c7:a0:3e:5e:6b:e2:67:9e:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:75:FA:1B:4A:F7:21:FC:37:92:F3:5A:1D:9F:2D:5C:45:6F:B3:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5bf3e10-5fb5-38cb-85bb-1384474c2623.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.0.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:fe:5f:44:51:64:d5:e8:84:f8:b9:e0:47:6e:da:45:2a:2b:
ef:26:b1:c1:1d:f6:d1:b5:4f:42:36:38:b6:f0:2f:bd:46:bd:
b6:ea:f4:a3:28:ab:64:94:f3:a7:ee:0a:01:f4:29:6c:0d:05:
ee:c2:ae:bd:20:4a:29:35:b3:a3:22:a5:f7:7c:d0:19:a1:9e:
8e:bd:84:4f:79:31:2a:f8:47:98:e3:ed:95:87:89:70:09:69:
b4:fc:e2:f1:4d:16:1e:ea:a1:cf:7d:98:f1:32:33:b0:70:b2:
dc:6c:0a:e5:8e:c8:c4:62:b3:40:f2:30:9a:0d:93:dc:1c:41:
62:5a:93:a6:6d:0f:00:e7:c7:39:27:9b:52:54:94:3d:7d:37:
ea:ec:6f:1a:6a:6c:07:7d:75:4d:cf:05:9d:17:37:44:17:c4:
68:f0:2d:00:7f:9d:aa:ee:88:11:01:69:25:0f:c2:bb:bf:12:
21:e4:32:99:00:a0:61:55:53:d3:0e:44:b0:70:aa:ab:54:e2:
57:df:a7:bc:e3:19:45:c8:0d:07:b4:de:d5:99:e4:f3:c5:64:
ea:34:1c:18:dd:9e:18:83:97:93:78:7a:e2:5b:13:23:b4:bb:
37:ee:ce:b1:8a:33:dd:92:7b:36:88:7c:d7:15:23:4b:1c:b7:
f8:d0:e4:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+jbCq6X23n7E3X/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIyMTAxOTEyMDAwMFoXDTI1MDEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
NTFhNTdmZTktNmMxYS00NmY0LWI4NjktYmYwZWU3MWIxOWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxfD08QmW9vuqdBElYUtGAV3NEvY8gVK+YiW
T2l4ixhUvnZlJ6lF2uRKAFNPhpN8IxaEE57f2pPO0p+vzK/A/nuTIdtnE2YzFTWi
/5e37VYxhukbycmtsiyA0A0XeDUM3cmoogjtV1uTcQ7fZH6LqEtBUB694DoJ/waw
76fX37tNp/7QUcR1q53B9y3YZ9nxIZGGYUmB1PDEMhsGrFhWv24fRWJJORKnNVro
6Fv6gw5fWs3xe6T64si2LD9etK6I5ze3bJH7ssuDcpT1p487k5ToI4UabXPwk63O
QhKbXnayzVH2mAcVRMs3M+sdlqOeFqjLZ+Dux6A+XmviZ54HwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCx1+htK9yH8N5LzWh2fLVxFb7NhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjViZjNlMTAtNWZiNS0z
OGNiLTg1YmItMTM4NDQ3NGMyNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIgBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKP+X0RRZNXohPi54Edu2kUqK+8mscEd9tG1T0I2OLbwL71Gvbbq9KMo
q2SU86fuCgH0KWwNBe7Crr0gSik1s6Mipfd80Bmhno69hE95MSr4R5jj7ZWHiXAJ
abT84vFNFh7qoc99mPEyM7BwstxsCuWOyMRis0DyMJoNk9wcQWJak6ZtDwDnxzkn
m1JUlD19N+rsbxpqbAd9dU3PBZ0XN0QXxGjwLQB/naruiBEBaSUPwru/EiHkMpkA
oGFVU9MORLBwqqtU4lffp7zjGUXIDQe03tWZ5PPFZOo0HBjdnhiDl5N4euJbEyO0
uzfuzrGKM92SezaIfNcVI0sct/jQ5EI=
-----END CERTIFICATE-----
Generated at Sun May 11 18:41:18 2025 by rpki-client