Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/becb0a17-5c8f-36be-a803-0eb16a3b32e7.roa
File: becb0a17-5c8f-36be-a803-0eb16a3b32e7.roa (raw, json)
Hash identifier: te2gV14aq04I8RpSdc9Tz4wWVtn2lPbmNK0TeJktIW4=
Subject key identifier: F8:56:A3:5C:96:5C:09:D8:B8:AC:DF:2C:32:08:22:58:C7:3A:0A:34
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A56C8CD521321F59CB780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/becb0a17-5c8f-36be-a803-0eb16a3b32e7.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.179.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:56:c8:cd:52:13:21:f5:9c:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=3cad781b-8e03-4395-9793-35bd3ad381f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:02:51:60:93:c7:d0:13:ac:06:a4:fb:41:
7f:67:56:cf:46:18:e6:bd:81:ad:c7:f3:22:21:31:
40:24:ca:e3:7c:ef:f1:05:e9:7d:50:39:44:42:ae:
2f:8f:14:f7:c1:b6:d0:55:2f:72:a6:67:f9:55:cb:
09:71:77:25:94:46:af:a0:06:6e:d7:76:21:05:cc:
37:ba:07:ee:5d:a2:b3:99:e4:da:37:06:38:b8:29:
f7:80:b0:31:b1:79:d4:11:e5:d5:c1:d3:ca:0c:d7:
1d:16:3e:92:7e:5c:75:eb:d3:ff:98:7a:65:96:cc:
8a:7a:d8:2c:17:0c:bd:c8:b8:c6:bd:cd:65:94:0c:
f4:5d:cd:6d:71:ba:38:e3:98:62:f9:89:67:c6:27:
7f:d7:e6:31:ec:3f:56:a8:ae:56:5f:3e:75:c7:6b:
3d:02:18:c1:27:82:92:5f:54:87:90:b1:bd:d6:eb:
b5:d5:2a:c1:42:d2:7b:f8:96:dd:a1:9d:ce:fd:07:
ce:24:04:cf:dc:05:e8:c1:d1:88:2b:8d:3a:70:b1:
94:88:cd:00:ef:16:4c:00:c4:95:d8:a0:4f:4c:46:
9c:55:6d:ba:52:34:09:6d:85:88:98:82:26:c1:83:
78:d4:d4:7c:10:66:64:7d:29:0f:4c:b8:28:42:b8:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:56:A3:5C:96:5C:09:D8:B8:AC:DF:2C:32:08:22:58:C7:3A:0A:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/becb0a17-5c8f-36be-a803-0eb16a3b32e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.179.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:9e:0f:33:a2:8c:2c:99:7c:a2:6b:40:09:de:a8:05:ae:17:
18:46:39:e7:97:0c:0b:8f:77:e4:c8:e2:22:ba:ee:32:35:c6:
f3:1c:46:81:ff:12:3a:6a:00:bd:4e:07:9c:55:37:c4:84:85:
45:f0:bd:a8:c6:a0:02:5a:f2:00:fb:bf:d5:80:20:27:69:33:
df:8e:bd:6f:a9:6b:da:c5:b3:b4:29:29:ad:85:f7:71:a4:c9:
c4:a5:e4:d9:56:5c:70:b2:74:10:5c:d5:8d:43:c4:84:fc:56:
3a:9a:4c:91:d5:af:f3:91:b1:6c:2e:0f:f3:d0:ae:f0:0d:d8:
03:00:64:9e:6e:2a:1a:dd:06:e1:7f:2e:d8:ed:36:bb:de:fd:
7d:0f:aa:05:6e:77:9b:47:60:01:e1:96:61:f4:f4:fa:24:dc:
86:0d:ba:75:60:2c:ba:b1:5f:b0:20:aa:8c:43:f5:cc:09:80:
8c:a2:80:c4:00:b3:19:d2:e6:15:9b:ce:7c:3c:26:91:48:a6:
15:5d:5a:a2:7c:99:09:98:b9:7a:cc:4c:b6:1c:f0:81:f8:e0:
a0:41:d0:4a:5b:00:8e:09:5c:eb:f6:9f:b7:f1:ae:7a:d3:13:
fc:d4:ad:9a:0a:5a:15:f0:a7:2a:19:7c:00:79:6f:da:22:d2:
55:42:4a:55
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEf/SlbIzVITIfWct4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
M2NhZDc4MWItOGUwMy00Mzk1LTk3OTMtMzViZDNhZDM4MWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO0CUWCTx9ATrAak+0F/Z1bPRhjmvYGtx/Mi
ITFAJMrjfO/xBel9UDlEQq4vjxT3wbbQVS9ypmf5VcsJcXcllEavoAZu13YhBcw3
ugfuXaKzmeTaNwY4uCn3gLAxsXnUEeXVwdPKDNcdFj6Sflx169P/mHpllsyKetgs
Fwy9yLjGvc1llAz0Xc1tcbo445hi+Ylnxid/1+Yx7D9WqK5WXz51x2s9AhjBJ4KS
X1SHkLG91uu11SrBQtJ7+JbdoZ3O/QfOJATP3AXowdGIK406cLGUiM0A7xZMAMSV
2KBPTEacVW26UjQJbYWImIImwYN41NR8EGZkfSkPTLgoQrjE1wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPhWo1yWXAnYuKzfLDIIIljHOgo0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmVjYjBhMTctNWM4Zi0z
NmJlLWE4MDMtMGViMTZhM2IzMmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIrMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAD54PM6KMLJl8omtACd6oBa4XGEY555cMC4935MjiIrruMjXG8xxGgf8S
OmoAvU4HnFU3xISFRfC9qMagAlryAPu/1YAgJ2kz3469b6lr2sWztCkprYX3caTJ
xKXk2VZccLJ0EFzVjUPEhPxWOppMkdWv85GxbC4P89Cu8A3YAwBknm4qGt0G4X8u
2O02u979fQ+qBW53m0dgAeGWYfT0+iTchg26dWAsurFfsCCqjEP1zAmAjKKAxACz
GdLmFZvOfDwmkUimFV1aonyZCZi5esxMthzwgfjgoEHQSlsAjglc6/aft/GuetMT
/NStmgpaFfCnKhl8AHlv2iLSVUJKVQ==
-----END CERTIFICATE-----
Generated at Sat May 10 14:44:53 2025 by rpki-client