Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c97a7358-f8b3-3a4e-a45b-b2b484d925d3.roa
File: c97a7358-f8b3-3a4e-a45b-b2b484d925d3.roa (raw, json)
Hash identifier: KQROtTTCvBIfYxtmmllZ7+33KQkb7Aoj62oF+se0ud0=
Subject key identifier: 21:61:8F:1D:EC:79:7B:BA:48:AC:6B:9B:03:51:B3:C1:2C:A6:7C:67
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0930F3239ED911D0547A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c97a7358-f8b3-3a4e-a45b-b2b484d925d3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.124.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:09:30:f3:23:9e:d9:11:d0:54:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=cd399c1b-938d-4e57-958b-7cb7dba69238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d3:30:52:d7:8b:29:c2:ab:e1:ab:64:e0:d9:
1f:99:db:02:fa:41:4c:4c:e1:89:d5:4d:32:74:b2:
00:d7:8f:a9:a0:ff:36:4c:94:4f:3a:a6:ba:de:3a:
96:07:ff:5e:92:00:5b:f4:c0:f5:a5:bd:57:40:4c:
31:fe:65:2c:9a:ed:51:39:82:e9:7f:6a:ea:d5:96:
cf:f3:e9:ea:1c:c9:02:1a:1f:17:33:3d:65:83:28:
3a:d1:bb:15:18:d7:a5:1c:70:c5:d2:2a:b2:73:77:
ac:44:ca:40:80:33:e1:8e:fb:d1:5c:8f:99:0f:bd:
09:8d:d3:9d:fa:22:49:95:d8:4f:d4:f6:20:0c:0d:
64:d8:c1:db:b0:3b:61:d0:b6:7c:b0:14:ce:62:ad:
cd:90:22:84:90:f5:7b:35:82:e2:72:dd:09:95:4a:
18:9f:fb:6b:c0:be:98:3f:24:10:40:12:8d:e6:a1:
ce:a5:50:00:fe:96:0a:75:e2:08:b0:dc:50:59:a4:
5c:cc:aa:e8:2b:d3:a7:a7:dd:01:ac:c5:79:b3:be:
70:16:a2:1a:2b:f0:f4:f7:22:c0:78:c7:d0:02:7a:
d8:96:60:46:4f:31:6c:7e:81:e2:a4:87:d7:63:8f:
c1:0c:31:4a:2a:57:0f:80:35:d6:42:aa:89:67:2e:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:61:8F:1D:EC:79:7B:BA:48:AC:6B:9B:03:51:B3:C1:2C:A6:7C:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c97a7358-f8b3-3a4e-a45b-b2b484d925d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.124.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:df:37:85:f9:3d:ed:e1:82:0e:43:c1:ae:e2:62:77:b8:f6:
8f:42:8f:39:c4:0f:a3:5e:e8:68:4a:ff:ca:bb:22:60:e7:38:
ea:9c:be:04:a1:e4:d8:2d:fa:14:87:61:9e:07:70:83:82:c5:
33:f2:4c:f2:34:f4:48:f9:d9:4c:3a:21:b3:eb:c2:4a:58:9d:
ef:63:ff:82:38:08:35:fb:7a:1f:3c:a4:4b:7e:ee:76:05:07:
61:65:e0:97:a7:6b:eb:e0:e4:9b:23:4a:90:bd:ae:89:69:3f:
6e:2a:db:d7:43:1a:9d:35:ee:27:ab:a0:3f:9e:91:71:3c:69:
a1:fa:46:66:56:82:f1:01:85:4a:cc:6b:b6:3f:bf:d2:1d:6e:
2c:be:3f:db:3a:2b:b0:52:df:a8:76:60:3c:32:21:34:ad:10:
67:c4:ee:65:11:34:38:cb:ff:57:2d:11:08:ac:24:8c:81:9c:
e7:6d:1a:9e:2b:ac:77:47:4f:09:59:fb:b8:65:79:f0:e4:1f:
94:08:fa:3a:bd:63:e7:0f:77:d9:84:3d:9c:7a:84:81:94:65:
fb:48:44:6d:97:c8:aa:6c:e9:86:21:20:06:81:dd:62:96:44:
0a:fd:ef:ed:48:4a:b5:62:62:f2:2d:d1:ae:5b:8b:db:ac:92:
c3:d6:2e:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKCTDzI57ZEdBUeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2QzOTljMWItOTM4ZC00ZTU3LTk1OGItN2NiN2RiYTY5MjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNMwUteLKcKr4atk4NkfmdsC+kFMTOGJ1U0y
dLIA14+poP82TJRPOqa63jqWB/9ekgBb9MD1pb1XQEwx/mUsmu1ROYLpf2rq1ZbP
8+nqHMkCGh8XMz1lgyg60bsVGNelHHDF0iqyc3esRMpAgDPhjvvRXI+ZD70JjdOd
+iJJldhP1PYgDA1k2MHbsDth0LZ8sBTOYq3NkCKEkPV7NYLict0JlUoYn/trwL6Y
PyQQQBKN5qHOpVAA/pYKdeIIsNxQWaRczKroK9Onp90BrMV5s75wFqIaK/D09yLA
eMfQAnrYlmBGTzFsfoHipIfXY4/BDDFKKlcPgDXWQqqJZy4llwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCFhjx3seXu6SKxrmwNRs8EspnxnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzk3YTczNTgtZjhiMy0z
YTRlLWE0NWItYjJiNDg0ZDkyNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjfN4X5Pe3hgg5Dwa7iYne49o9CjznED6Ne6GhK/8q7ImDnOOqcvgSh
5Ngt+hSHYZ4HcIOCxTPyTPI09Ej52Uw6IbPrwkpYne9j/4I4CDX7eh88pEt+7nYF
B2Fl4Jena+vg5JsjSpC9rolpP24q29dDGp017ieroD+ekXE8aaH6RmZWgvEBhUrM
a7Y/v9Idbiy+P9s6K7BS36h2YDwyITStEGfE7mURNDjL/1ctEQisJIyBnOdtGp4r
rHdHTwlZ+7hlefDkH5QI+jq9Y+cPd9mEPZx6hIGUZftIRG2XyKps6YYhIAaB3WKW
RAr97+1ISrViYvIt0a5bi9usksPWLiM=
-----END CERTIFICATE-----
Generated at Sat May 10 14:46:20 2025 by rpki-client