Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b8a2a874-6099-3e13-bfaf-98095cb93ac0.roa
File: b8a2a874-6099-3e13-bfaf-98095cb93ac0.roa (raw, json)
Hash identifier: fbI91ShrtN/ZCttj9OKzm5hyKuBvzkhrfJFQgvbzYWQ=
Subject key identifier: EC:C4:90:6F:F0:00:F2:70:CC:A2:F0:4E:AE:DF:01:51:D8:B8:8C:BD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A069E0A6D9F01C52C228F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b8a2a874-6099-3e13-bfaf-98095cb93ac0.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.124.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:06:9e:0a:6d:9f:01:c5:2c:22:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e78aec73-43eb-40ba-b7dc-2c34b694b744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:c1:9a:ed:90:b8:47:fc:1b:b9:54:a6:d6:
df:d2:c4:86:c3:ab:c2:12:d1:69:3a:ae:4d:28:e5:
01:bd:8c:05:5d:0a:d3:35:33:a9:11:28:a1:b3:4d:
ee:4c:33:e9:e9:04:58:ff:f1:71:f0:e5:a4:43:88:
81:57:20:12:fd:ed:db:1d:af:c9:12:ab:09:d2:f6:
e4:99:6c:0d:87:cf:b2:40:0e:ac:2d:5f:22:23:13:
49:68:64:a5:66:6a:5c:c4:d0:76:36:af:56:f2:d1:
05:66:1b:a4:9f:1d:c6:97:70:87:8c:83:6c:31:c3:
65:a1:cf:26:7c:94:87:b3:22:36:a5:b5:9b:ae:36:
90:e4:31:a8:9e:41:b1:9c:78:43:67:47:c8:75:44:
cd:fe:dd:a1:1d:d8:d9:b4:65:8d:e1:ff:e9:6b:b3:
09:c1:f8:5d:04:ed:f9:51:44:e4:84:c7:d5:48:ec:
f0:f5:c2:8a:28:5d:3d:ee:82:45:a3:9b:8b:df:b2:
6f:eb:28:77:33:f5:7a:8f:90:4d:03:45:09:28:da:
1f:59:01:24:99:cc:9e:da:bd:71:38:0d:43:2d:cd:
7b:b9:23:e1:41:91:f1:9f:e1:d3:e5:99:38:4a:18:
ca:f5:2c:a6:87:43:01:5d:b1:50:00:82:9b:8e:62:
98:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:90:6F:F0:00:F2:70:CC:A2:F0:4E:AE:DF:01:51:D8:B8:8C:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b8a2a874-6099-3e13-bfaf-98095cb93ac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.124.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:96:0a:3c:ae:3d:53:14:e9:12:70:ed:1e:f1:a7:fc:bd:a6:
7a:86:03:a5:2f:0a:c9:69:09:44:7b:2e:bc:f8:9f:e5:70:cb:
78:2e:2c:b6:69:6d:16:1c:9a:ff:09:17:89:fd:7c:fb:5c:6c:
45:7c:61:ee:f7:97:52:5e:d2:00:74:f2:d4:12:09:32:84:d2:
b1:1e:c4:6d:39:32:b3:5c:5c:f5:79:f8:ae:f0:ec:5e:28:b9:
a1:c3:40:1c:01:18:1d:99:92:17:8b:73:9a:c1:ee:7a:e9:2a:
05:3d:ca:04:b7:ed:71:5f:30:0c:0b:06:be:19:96:18:b1:53:
ba:06:64:b4:8a:23:5f:21:d5:6e:8c:6f:77:d5:1f:36:b9:83:
ad:03:cd:8c:f9:ab:44:63:62:67:1e:cb:ae:47:61:5e:a0:f5:
45:d5:e0:e2:e8:ca:0a:10:d6:9d:5b:8b:7d:d5:09:c9:57:d9:
78:dc:50:f8:c5:8f:0c:a8:34:78:60:e9:c8:d1:81:a8:e6:d6:
54:a5:cb:10:fb:74:65:86:ef:11:c1:ab:35:1a:d9:16:90:3e:
6c:95:a3:ac:f0:c7:45:25:a0:74:38:25:ae:63:bc:63:02:cc:
81:14:d2:5f:f9:c0:74:c9:54:a3:93:38:9f:68:88:dc:b2:41:
8c:ca:5d:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKBp4KbZ8BxSwij4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTc4YWVjNzMtNDNlYi00MGJhLWI3ZGMtMmMzNGI2OTRiNzQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmzBmu2QuEf8G7lUptbf0sSGw6vCEtFpOq5N
KOUBvYwFXQrTNTOpESihs03uTDPp6QRY//Fx8OWkQ4iBVyAS/e3bHa/JEqsJ0vbk
mWwNh8+yQA6sLV8iIxNJaGSlZmpcxNB2Nq9W8tEFZhuknx3Gl3CHjINsMcNloc8m
fJSHsyI2pbWbrjaQ5DGonkGxnHhDZ0fIdUTN/t2hHdjZtGWN4f/pa7MJwfhdBO35
UUTkhMfVSOzw9cKKKF097oJFo5uL37Jv6yh3M/V6j5BNA0UJKNofWQEkmcye2r1x
OA1DLc17uSPhQZHxn+HT5Zk4ShjK9Symh0MBXbFQAIKbjmKYWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzEkG/wAPJwzKLwTq7fAVHYuIy9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjhhMmE4NzQtNjA5OS0z
ZTEzLWJmYWYtOTgwOTVjYjkzYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInzwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6WCjyuPVMU6RJw7R7xp/y9pnqGA6UvCslpCUR7Lrz4n+Vwy3guLLZp
bRYcmv8JF4n9fPtcbEV8Ye73l1Je0gB08tQSCTKE0rEexG05MrNcXPV5+K7w7F4o
uaHDQBwBGB2ZkheLc5rB7nrpKgU9ygS37XFfMAwLBr4ZlhixU7oGZLSKI18h1W6M
b3fVHza5g60DzYz5q0RjYmcey65HYV6g9UXV4OLoygoQ1p1bi33VCclX2XjcUPjF
jwyoNHhg6cjRgajm1lSlyxD7dGWG7xHBqzUa2RaQPmyVo6zwx0UloHQ4Ja5jvGMC
zIEU0l/5wHTJVKOTOJ9oiNyyQYzKXZE=
-----END CERTIFICATE-----
Generated at Sat May 10 12:38:20 2025 by rpki-client