Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c09d2f61-ac38-3c35-959e-356f83cb29f0.roa
File: c09d2f61-ac38-3c35-959e-356f83cb29f0.roa (raw, json)
Hash identifier: JcaU6QcgNFOgoKFjx0ikoS/QGlHkAf+QhNi18mZZCKs=
Subject key identifier: 61:CA:D5:1D:93:8A:38:A7:B1:18:6A:4E:67:2D:73:B7:DD:30:32:59
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1D5AC544728E6C959328E6
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c09d2f61-ac38-3c35-959e-356f83cb29f0.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.119.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:5a:c5:44:72:8e:6c:95:93:28:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7e27cb1b-fe20-442d-9193-218dcce61a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:24:c3:80:e2:35:96:64:70:7d:12:e4:5f:
79:f2:96:4e:df:ae:50:1e:75:c3:13:dc:42:df:3c:
ff:45:22:f9:69:62:12:cc:df:6e:38:82:61:27:d4:
61:57:c7:1a:65:6e:84:90:5e:2d:0b:d9:cd:18:69:
54:f3:ef:2a:86:fb:ec:64:78:5d:c9:6e:d3:da:0e:
3c:be:c0:d4:9f:0b:24:da:90:79:4a:cd:c1:6d:48:
cd:a9:cd:00:fc:dd:b3:97:16:0b:88:87:96:85:f6:
61:53:8e:d3:84:7a:d9:bf:f7:df:c5:44:8d:1a:7d:
3b:dd:c4:68:3d:6a:39:45:8a:18:92:aa:d4:ab:74:
a0:87:23:45:12:e1:73:30:cd:af:83:88:69:0e:5f:
f1:93:9d:3d:a7:79:b5:65:a7:ab:ea:12:49:b3:df:
af:a7:f2:02:e2:9e:3b:51:29:4b:a1:3b:8c:54:ff:
c4:90:3c:aa:3e:97:be:5f:2d:69:79:e2:90:5b:f8:
1d:a7:9f:04:88:d1:97:35:d4:34:24:22:84:5f:16:
b7:18:31:97:21:18:3d:7d:a7:66:af:cb:f0:f4:eb:
7d:de:db:d2:30:19:04:94:8a:08:43:f9:bc:54:cd:
0a:50:80:db:50:51:57:cc:9b:f6:57:ed:99:fb:5a:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:D5:1D:93:8A:38:A7:B1:18:6A:4E:67:2D:73:B7:DD:30:32:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c09d2f61-ac38-3c35-959e-356f83cb29f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.119.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:16:7d:f6:52:ba:66:ce:8b:8d:9d:5c:ea:a9:b6:ff:4e:20:
3e:22:59:31:eb:e6:6f:30:90:ea:fc:9b:b1:c8:91:26:8a:10:
9f:b6:20:b0:d7:c4:d1:c1:4e:6f:14:62:ed:a8:70:5a:17:9e:
3a:34:ed:88:d8:c6:5e:bb:03:da:36:63:13:df:2b:a1:6f:41:
6a:a8:2f:c6:8d:d9:6b:34:f9:98:f0:76:2e:c7:19:00:85:1a:
fe:33:53:a6:6c:d8:94:f3:34:2e:b3:79:45:55:a0:3d:6f:93:
78:af:e9:db:35:50:0f:cc:e5:a6:74:10:e4:11:32:01:82:0c:
4b:3e:ea:cd:61:fc:75:c5:79:cc:5d:bc:a0:64:bd:81:72:61:
50:90:f6:37:0d:41:0f:cc:39:94:cd:cf:2e:8b:f1:58:10:25:
6f:29:ee:9f:9b:84:dc:dd:a4:14:74:00:4e:f3:41:10:64:5b:
6a:f7:fb:c5:2e:a1:a0:22:7a:f1:5a:1f:e1:d1:65:fb:44:66:
75:0e:a0:d3:5e:0f:68:6d:f8:2b:fc:66:1a:55:95:a7:e0:be:
b8:d3:f9:82:ef:1b:b8:85:0f:4a:43:b8:5b:24:32:e9:73:b6:
0b:b0:5b:e3:ca:c9:d8:ab:f8:6a:2b:3c:13:ff:ce:c9:58:82:
48:45:32:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKHVrFRHKObJWTKOYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
N2UyN2NiMWItZmUyMC00NDJkLTkxOTMtMjE4ZGNjZTYxYTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslgkw4DiNZZkcH0S5F958pZO365QHnXDE9xC
3zz/RSL5aWISzN9uOIJhJ9RhV8caZW6EkF4tC9nNGGlU8+8qhvvsZHhdyW7T2g48
vsDUnwsk2pB5Ss3BbUjNqc0A/N2zlxYLiIeWhfZhU47ThHrZv/ffxUSNGn073cRo
PWo5RYoYkqrUq3SghyNFEuFzMM2vg4hpDl/xk509p3m1Zaer6hJJs9+vp/IC4p47
USlLoTuMVP/EkDyqPpe+Xy1peeKQW/gdp58EiNGXNdQ0JCKEXxa3GDGXIRg9fadm
r8vw9Ot93tvSMBkElIoIQ/m8VM0KUIDbUFFXzJv2V+2Z+1okJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHK1R2TijinsRhqTmctc7fdMDJZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzA5ZDJmNjEtYWMzOC0z
YzM1LTk1OWUtMzU2ZjgzY2IyOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIneAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEWffZSumbOi42dXOqptv9OID4iWTHr5m8wkOr8m7HIkSaKEJ+2ILDX
xNHBTm8UYu2ocFoXnjo07YjYxl67A9o2YxPfK6FvQWqoL8aN2Ws0+Zjwdi7HGQCF
Gv4zU6Zs2JTzNC6zeUVVoD1vk3iv6ds1UA/M5aZ0EOQRMgGCDEs+6s1h/HXFecxd
vKBkvYFyYVCQ9jcNQQ/MOZTNzy6L8VgQJW8p7p+bhNzdpBR0AE7zQRBkW2r3+8Uu
oaAievFaH+HRZftEZnUOoNNeD2ht+Cv8ZhpVlafgvrjT+YLvG7iFD0pDuFskMulz
tguwW+PKydir+GorPBP/zslYgkhFMlA=
-----END CERTIFICATE-----
Generated at Sat May 10 14:44:52 2025 by rpki-client