Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce9067f4-d808-3de6-9185-48c27a82fb8a.roa
File: ce9067f4-d808-3de6-9185-48c27a82fb8a.roa (raw, json)
Hash identifier: oNlpnzRl6ur50SeEj4yZZ4hAdc6uJgm893WS4RW17JI=
Subject key identifier: 7B:23:92:20:A9:0C:F3:74:79:6F:B3:F1:56:E7:79:BB:31:5D:F5:A5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EBDA1FDC12D6FB10F87B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce9067f4-d808-3de6-9185-48c27a82fb8a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.116.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:eb:da:1f:dc:12:d6:fb:10:f8:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6ed87f31-9de7-4d9b-ab65-531774724ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:e4:c5:3c:ce:38:f0:11:84:f5:af:3c:db:
c7:fa:9d:8f:16:da:78:59:ec:a2:f1:a2:74:69:5b:
12:68:b6:22:f8:44:25:c6:a1:02:de:15:dc:76:0d:
a5:bb:e6:8f:79:26:04:ee:ce:5f:78:2b:de:c8:e8:
22:54:af:b0:59:ce:a5:65:d9:97:3a:56:c2:58:5f:
9f:cb:bd:ab:ef:3e:6d:61:c9:3a:39:0e:d3:19:55:
f7:c5:41:13:29:b7:07:6e:a0:38:32:fd:45:37:5c:
e3:0e:40:a4:36:7d:f0:26:59:aa:40:b9:ba:d2:f5:
1e:ee:7d:05:c6:bc:32:76:f5:86:3f:05:e0:40:b4:
6b:83:c8:4c:35:aa:86:6b:48:ab:de:70:bf:93:d0:
e6:7a:62:ab:b5:2c:ff:9f:da:48:97:7e:f6:a8:10:
40:01:af:e9:8d:96:c7:6d:c8:e7:d2:a0:4c:bf:86:
fc:5c:49:3c:57:ff:39:0f:a2:ef:1c:1a:6a:2b:5d:
3a:0c:9b:4e:49:df:87:3d:54:7c:c4:fc:de:e7:3e:
95:fe:07:ce:22:4b:0a:78:59:38:6b:5f:db:fe:58:
1f:15:30:64:53:c5:1c:1a:87:63:5b:c1:b4:2c:bb:
ee:a7:86:19:1a:a2:71:e4:c7:fb:c9:c7:5a:30:24:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:23:92:20:A9:0C:F3:74:79:6F:B3:F1:56:E7:79:BB:31:5D:F5:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce9067f4-d808-3de6-9185-48c27a82fb8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.116.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:5a:48:44:5e:6b:a5:6b:65:53:42:98:90:5b:54:29:20:72:
5f:bd:cf:87:31:49:d6:95:e8:70:84:49:71:5a:a3:7d:a7:ac:
e1:de:26:fe:8d:e6:67:4c:98:7c:a7:bc:d0:89:16:11:9d:06:
5b:e1:4b:71:d9:3c:0d:98:22:2a:fd:f1:52:c9:b6:e4:c8:fb:
ec:01:98:7f:1b:ec:61:b8:45:53:2e:37:fa:d9:e8:8b:c1:bc:
01:eb:f1:a2:ed:0f:ea:44:c2:67:a4:a2:d4:5d:b4:b5:7c:5e:
c7:c4:34:35:df:69:7b:b3:8d:36:af:ae:e8:a7:3a:b7:30:0a:
67:80:83:d0:3b:f0:5b:c7:b0:6a:38:29:22:b0:fa:71:90:80:
99:f6:16:2b:e1:b3:4d:03:08:ba:06:01:98:f4:d9:9d:10:a5:
84:82:e3:32:7b:b1:7a:dd:fe:55:a1:79:10:02:f5:7e:d4:05:
23:4f:27:5b:02:28:4a:0f:39:c2:99:2d:4b:31:97:6f:ec:81:
c6:de:13:28:05:dc:a1:fc:cb:c1:bd:b1:ef:45:7e:1c:ec:fc:
86:80:3c:46:a7:ed:51:1d:de:71:ca:be:46:c9:28:96:6a:0f:
50:d4:ef:66:30:7f:aa:5f:4a:17:1d:9d:3a:63:21:de:42:9f:
64:1e:b8:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ69of3BLW+xD4e4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NmVkODdmMzEtOWRlNy00ZDliLWFiNjUtNTMxNzc0NzI0Y2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqELkxTzOOPARhPWvPNvH+p2PFtp4Weyi8aJ0
aVsSaLYi+EQlxqEC3hXcdg2lu+aPeSYE7s5feCveyOgiVK+wWc6lZdmXOlbCWF+f
y72r7z5tYck6OQ7TGVX3xUETKbcHbqA4Mv1FN1zjDkCkNn3wJlmqQLm60vUe7n0F
xrwydvWGPwXgQLRrg8hMNaqGa0ir3nC/k9DmemKrtSz/n9pIl372qBBAAa/pjZbH
bcjn0qBMv4b8XEk8V/85D6LvHBpqK106DJtOSd+HPVR8xPze5z6V/gfOIksKeFk4
a1/b/lgfFTBkU8UcGodjW8G0LLvup4YZGqJx5Mf7ycdaMCRcRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHsjkiCpDPN0eW+z8VbnebsxXfWlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2U5MDY3ZjQtZDgwOC0z
ZGU2LTkxODUtNDhjMjdhODJmYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInSwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAApaSERea6VrZVNCmJBbVCkgcl+9z4cxSdaV6HCESXFao32nrOHeJv6N
5mdMmHynvNCJFhGdBlvhS3HZPA2YIir98VLJtuTI++wBmH8b7GG4RVMuN/rZ6IvB
vAHr8aLtD+pEwmekotRdtLV8XsfENDXfaXuzjTavruinOrcwCmeAg9A78FvHsGo4
KSKw+nGQgJn2Fivhs00DCLoGAZj02Z0QpYSC4zJ7sXrd/lWheRAC9X7UBSNPJ1sC
KEoPOcKZLUsxl2/sgcbeEygF3KH8y8G9se9Ffhzs/IaAPEan7VEd3nHKvkbJKJZq
D1DU72Ywf6pfShcdnTpjId5Cn2QeuOs=
-----END CERTIFICATE-----
Generated at Sat May 10 12:38:25 2025 by rpki-client