Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc7779c3-848a-30af-9e66-fede452a8c6a.roa
File: bc7779c3-848a-30af-9e66-fede452a8c6a.roa (raw, json)
Hash identifier: ZagAHYTAoiBs2ca5yMSFjmZ2Qn4DZZqDyV0WeeD4ivE=
Subject key identifier: 68:B8:27:BD:FC:C9:3C:BA:35:D4:FE:51:4D:B1:B3:86:F1:7C:E8:F5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A182DE1CD7494779F7AD000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc7779c3-848a-30af-9e66-fede452a8c6a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.91.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:2d:e1:cd:74:94:77:9f:7a:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8f95a168-39c7-4bc6-a127-e4810c5d946c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:19:5c:f9:7d:fe:4d:84:a1:93:82:5a:90:
4b:3f:78:c0:2c:a2:2c:8c:72:f5:a4:48:8b:ee:f6:
f5:db:c0:f0:bb:27:77:a0:e6:95:40:54:5d:f4:e1:
5d:7b:84:b4:c1:06:9e:f5:6f:eb:4e:58:56:c9:e2:
e3:41:21:22:38:74:54:ea:79:0c:3a:57:6c:87:c2:
6a:d4:3b:d5:04:44:2e:f9:c2:b6:46:26:38:a8:45:
d9:91:98:30:22:88:a4:0c:12:bf:49:01:c6:6f:0c:
9e:17:e0:c1:98:69:27:5b:e8:5c:08:53:fe:22:f7:
f1:49:18:03:0a:92:5b:8d:65:ea:11:4e:af:3c:db:
61:58:e4:3c:52:35:8d:c8:55:81:3d:8f:f1:d2:84:
ec:32:7a:43:e7:b3:45:f6:f4:ad:e9:5b:bf:a1:5c:
77:89:6d:1c:8b:26:11:86:41:bf:f6:85:f1:e9:14:
3e:82:ae:81:3c:ef:9f:39:8b:28:29:1d:e6:0b:e6:
56:a1:6a:a0:1c:a8:2c:16:e1:79:02:f2:bd:62:64:
52:2e:54:e9:23:e0:c0:15:9f:54:5d:d9:33:c1:50:
26:f8:3e:68:3b:3e:0b:c6:a3:23:3e:f4:2b:be:e4:
ba:7b:2c:13:3d:e4:67:80:6e:31:d7:a7:f8:a0:56:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:27:BD:FC:C9:3C:BA:35:D4:FE:51:4D:B1:B3:86:F1:7C:E8:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc7779c3-848a-30af-9e66-fede452a8c6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.91.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:43:c4:6a:c0:cf:98:94:6e:ef:1a:79:d2:fc:0d:92:93:67:
dc:1f:7e:69:d9:dd:49:34:de:b9:07:3e:f3:0b:e9:bd:ee:61:
09:98:31:99:c0:7f:29:bc:1b:7f:65:1e:0f:a0:9b:78:8c:b2:
c6:39:cf:56:86:3b:cf:84:84:36:e4:22:ea:ea:fc:99:5b:7e:
3e:e9:fc:6d:0a:de:0e:da:97:de:45:e1:4e:24:88:b5:47:ec:
a3:c5:db:a7:d5:bd:1b:53:7a:84:7f:21:05:23:9e:c0:8d:d9:
d4:cf:93:4a:5b:d5:54:d4:42:39:73:59:0c:f5:06:66:5a:d8:
ba:f8:5f:d0:bb:5d:91:33:4d:69:0a:23:42:42:76:f1:4e:ba:
99:4c:fd:a5:34:bd:f4:bb:95:0c:f2:76:43:6e:c8:0c:5d:6a:
da:51:51:d3:80:ae:c6:57:c9:d9:35:37:2a:1d:0d:7f:13:d4:
e5:a4:ca:e0:a7:21:c0:70:fc:6d:6a:b7:f7:3c:5d:99:ad:e3:
39:7c:32:54:93:56:35:93:d6:3b:e1:de:57:77:d6:43:8d:cb:
78:80:cc:a1:b7:c5:12:62:ee:67:08:d1:5a:3b:df:e7:68:4c:
56:69:99:1b:57:98:19:6b:9c:87:78:f1:1b:d2:81:67:b2:4c:
a2:f2:d2:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGC3hzXSUd5960AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OGY5NWExNjgtMzljNy00YmM2LWExMjctZTQ4MTBjNWQ5NDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNoZXPl9/k2EoZOCWpBLP3jALKIsjHL1pEiL
7vb128Dwuyd3oOaVQFRd9OFde4S0wQae9W/rTlhWyeLjQSEiOHRU6nkMOldsh8Jq
1DvVBEQu+cK2RiY4qEXZkZgwIoikDBK/SQHGbwyeF+DBmGknW+hcCFP+IvfxSRgD
CpJbjWXqEU6vPNthWOQ8UjWNyFWBPY/x0oTsMnpD57NF9vSt6Vu/oVx3iW0ciyYR
hkG/9oXx6RQ+gq6BPO+fOYsoKR3mC+ZWoWqgHKgsFuF5AvK9YmRSLlTpI+DAFZ9U
XdkzwVAm+D5oOz4LxqMjPvQrvuS6eywTPeRngG4x16f4oFbgSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGi4J738yTy6NdT+UU2xs4bxfOj1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmM3Nzc5YzMtODQ4YS0z
MGFmLTllNjYtZmVkZTQ1MmE4YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAtDxGrAz5iUbu8aedL8DZKTZ9wffmnZ3Uk03rkHPvML6b3uYQmYMZnA
fym8G39lHg+gm3iMssY5z1aGO8+EhDbkIurq/Jlbfj7p/G0K3g7al95F4U4kiLVH
7KPF26fVvRtTeoR/IQUjnsCN2dTPk0pb1VTUQjlzWQz1BmZa2Lr4X9C7XZEzTWkK
I0JCdvFOuplM/aU0vfS7lQzydkNuyAxdatpRUdOArsZXydk1NyodDX8T1OWkyuCn
IcBw/G1qt/c8XZmt4zl8MlSTVjWT1jvh3ld31kONy3iAzKG3xRJi7mcI0Vo73+do
TFZpmRtXmBlrnId48RvSgWeyTKLy0tk=
-----END CERTIFICATE-----
Generated at Sat May 10 12:31:16 2025 by rpki-client