Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccaa15bc-7ef2-3887-903b-46a95e348244.roa
File: ccaa15bc-7ef2-3887-903b-46a95e348244.roa (raw, json)
Hash identifier: 1xltlsXb/ckxpyYL8Bemz5bcsj3VnCukUhzfU60yJds=
Subject key identifier: 87:4F:81:76:6E:1C:78:EF:4A:56:19:3B:DD:A2:B9:BF:1E:BD:10:76
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A12307DEE2BF4EEF7BA7700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccaa15bc-7ef2-3887-903b-46a95e348244.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.125.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:30:7d:ee:2b:f4:ee:f7:ba:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=da1091a3-b524-4eba-871a-e524954a0ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:47:43:0c:e3:9a:bb:7d:12:b7:1c:2b:71:
a2:a2:e1:b7:8f:88:3e:f6:1b:bd:f4:85:8d:7c:13:
40:11:25:71:4d:3a:3c:56:e7:28:fb:b5:86:5b:bb:
0d:b8:4d:17:09:73:ad:dd:16:4d:25:94:65:2c:dd:
5d:cb:0f:c8:9e:c0:79:7c:7e:85:25:6f:47:85:de:
f4:c6:d6:f2:fa:6c:cf:13:da:de:e4:b1:ff:9a:80:
2b:94:1e:a4:1b:d2:ef:83:78:73:ad:54:b8:56:6a:
58:c1:8d:64:92:f2:f4:8a:f0:d7:86:1f:cc:6b:11:
31:6c:6e:50:f2:8d:ac:11:ce:a4:5e:7a:f3:76:88:
34:a8:41:3e:5a:90:d5:c8:c0:66:59:05:82:59:be:
31:94:cb:fa:48:84:25:fd:1b:6c:20:45:1f:72:b0:
e4:74:b5:8d:d3:32:fd:05:0d:f2:df:f7:1b:1d:98:
1b:1e:be:b4:89:78:c2:c6:b3:e2:43:2c:a4:6f:e3:
61:5d:0a:8c:09:82:b9:d7:43:5d:f2:78:7b:65:a0:
b6:fc:2c:5d:5a:88:19:f0:ec:ba:3d:79:fd:e6:84:
87:6b:1b:e0:06:e4:c7:37:b7:bf:03:0a:d8:d6:16:
89:af:9f:65:63:d9:b3:a4:99:d7:3b:b8:6c:9e:96:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4F:81:76:6E:1C:78:EF:4A:56:19:3B:DD:A2:B9:BF:1E:BD:10:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccaa15bc-7ef2-3887-903b-46a95e348244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.125.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:ef:be:36:e1:f5:0a:26:d8:40:1c:9e:ec:9c:e0:89:a9:93:
90:bb:08:e3:3b:d0:5e:0e:1d:43:b3:72:8a:f7:44:fa:35:78:
c0:33:16:22:aa:3d:d3:9a:65:b6:fb:e5:f3:ea:58:c5:e9:2e:
92:2e:5d:e8:96:93:8e:f8:6d:f4:28:78:3b:c7:52:f0:a1:bb:
b6:86:2b:9e:36:67:98:e2:bb:e0:61:4d:42:c3:32:17:1d:74:
c4:85:82:f4:35:59:f0:b2:7f:32:54:3e:ed:51:95:6c:21:e7:
28:d0:4b:09:ea:94:4b:4d:09:23:8e:c0:f6:9c:18:cd:34:d1:
12:49:6e:1c:38:b8:8d:f0:89:dd:9d:d4:1c:75:3c:d1:16:74:
67:bc:59:38:eb:d8:db:19:7e:a8:71:f7:cf:ee:b7:3c:4f:95:
cc:3d:54:9b:43:73:e1:cb:69:fb:3d:6f:e8:a6:05:fe:fd:9c:
85:fc:1d:0e:ca:f7:7d:0b:a9:66:d7:f7:89:df:79:72:24:bd:
ad:25:77:1a:35:d4:00:2c:9f:03:b6:ef:b0:fa:32:16:28:f5:
39:d7:ad:75:69:8a:49:cd:66:75:3c:e2:8b:6e:a7:c9:c7:d5:
8e:4b:e7:81:37:ef:ac:a2:60:ff:fe:0f:0d:10:aa:7c:fa:d1:
be:b1:0f:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKEjB97iv07ve6dwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGExMDkxYTMtYjUyNC00ZWJhLTg3MWEtZTUyNDk1NGEwZmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnRHQwzjmrt9ErccK3GiouG3j4g+9hu99IWN
fBNAESVxTTo8Vuco+7WGW7sNuE0XCXOt3RZNJZRlLN1dyw/InsB5fH6FJW9Hhd70
xtby+mzPE9re5LH/moArlB6kG9Lvg3hzrVS4VmpYwY1kkvL0ivDXhh/MaxExbG5Q
8o2sEc6kXnrzdog0qEE+WpDVyMBmWQWCWb4xlMv6SIQl/RtsIEUfcrDkdLWN0zL9
BQ3y3/cbHZgbHr60iXjCxrPiQyykb+NhXQqMCYK510Nd8nh7ZaC2/CxdWogZ8Oy6
PXn95oSHaxvgBuTHN7e/AwrY1haJr59lY9mzpJnXO7hsnpYopQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIdPgXZuHHjvSlYZO92iub8evRB2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2NhYTE1YmMtN2VmMi0z
ODg3LTkwM2ItNDZhOTVlMzQ4MjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn3wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDvvjbh9Qom2EAcnuyc4Impk5C7COM70F4OHUOzcor3RPo1eMAzFiKq
PdOaZbb75fPqWMXpLpIuXeiWk474bfQoeDvHUvChu7aGK542Z5jiu+BhTULDMhcd
dMSFgvQ1WfCyfzJUPu1RlWwh5yjQSwnqlEtNCSOOwPacGM000RJJbhw4uI3wid2d
1Bx1PNEWdGe8WTjr2NsZfqhx98/utzxPlcw9VJtDc+HLafs9b+imBf79nIX8HQ7K
930LqWbX94nfeXIkva0ldxo11AAsnwO277D6MhYo9TnXrXVpiknNZnU84otup8nH
1Y5L54E376yiYP/+Dw0Qqnz60b6xD8g=
-----END CERTIFICATE-----
Generated at Sun May 11 23:02:33 2025 by rpki-client