Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a3c80d-bfc4-331f-96b9-08554ffc6202.roa
File: d2a3c80d-bfc4-331f-96b9-08554ffc6202.roa (raw, json)
Hash identifier: StsmwFbrGZ1SHCLGoz3LA02N8l9/KE/kQhUPAaHBHh0=
Subject key identifier: C6:F5:E5:AA:AF:90:35:7E:49:B0:9F:F6:78:52:A7:17:D1:AB:EB:35
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285842BE85D423E2DBF36E24DF0800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a3c80d-bfc4-331f-96b9-08554ffc6202.roa
Signing time: Mon 31 Jul 2023 12:00:00 +0000
ROA not before: Mon 31 Jul 2023 12:00:00 +0000
ROA not after: Sun 29 Sep 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.156.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:be:85:d4:23:e2:db:f3:6e:24:df:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 31 12:00:00 2023 GMT
Not After : Sep 29 04:00:00 2024 GMT
Subject: CN=2f0a2c64-1e09-4d35-86ec-a40d24b8cb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1c:9f:a8:75:e1:89:5d:86:22:84:46:0c:82:
ab:80:17:47:a5:84:b2:5a:ef:d5:64:cf:e8:e0:6e:
f8:ca:27:a9:df:bf:eb:dd:6f:86:0b:32:43:62:29:
62:02:ee:bf:68:6e:6d:1c:2d:f7:f0:27:4e:65:e8:
d3:fd:a2:bc:b3:6d:f9:39:26:7e:22:b6:39:a0:f3:
88:3e:94:32:30:e3:9b:c1:63:b1:97:c1:a9:2a:ab:
3b:e5:7e:43:3d:92:82:db:17:2a:78:d9:58:cf:1f:
be:0d:41:1f:5f:8e:d7:e9:6d:0a:0c:24:cb:d6:1d:
0f:46:37:44:21:f8:b3:f1:ad:06:48:1f:7d:e3:ca:
a6:fc:7f:02:d4:32:ed:45:3a:0b:5a:46:08:93:bf:
52:ff:2b:6c:33:dc:89:ed:38:15:04:5a:29:8d:23:
80:6b:b9:a7:4e:fc:48:8d:50:a5:67:2e:3a:c1:87:
99:b2:ef:c6:6c:83:42:db:bc:1f:eb:12:b2:a2:ef:
80:fb:42:0c:94:27:91:12:72:f0:e8:98:74:b2:25:
f0:01:3e:c2:6c:32:60:0d:4f:40:ec:5c:09:53:a1:
2d:18:c1:06:3f:66:96:80:31:07:aa:4a:cc:03:e2:
26:a4:42:f0:70:54:81:a3:f5:18:16:ca:fb:22:92:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:E5:AA:AF:90:35:7E:49:B0:9F:F6:78:52:A7:17:D1:AB:EB:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a3c80d-bfc4-331f-96b9-08554ffc6202.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.156.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:1d:e7:98:c2:30:84:a6:f3:79:bb:e6:7c:0d:ce:75:99:14:
46:e2:95:8f:8c:2a:05:c2:dc:1a:1f:ed:60:48:d3:22:23:36:
26:7f:25:96:ee:58:33:82:61:c1:d8:36:b8:a3:2f:cf:88:6a:
a0:5f:96:19:c6:b2:08:bb:4b:e1:73:6a:83:9d:7c:d9:ea:0c:
49:9a:0a:de:af:e8:d2:a0:38:f8:f0:e5:de:38:df:d9:2b:25:
28:15:38:38:67:aa:eb:32:d6:69:2a:98:f9:dc:91:d4:52:81:
07:d9:89:3b:cc:e5:e8:48:76:c4:b8:e0:4a:17:a8:11:da:29:
65:a5:05:e7:27:62:c6:40:c1:1f:9e:c4:bb:3c:3a:3b:9d:16:
d2:0c:e1:76:48:0e:f6:e5:50:e0:ed:52:bb:50:a8:67:8b:44:
60:ae:8e:dc:e3:62:d6:9c:96:54:ff:75:fc:cb:f3:2e:38:0f:
71:11:79:15:49:d2:5c:18:bb:7b:84:63:81:a8:ea:aa:ed:19:
c8:f2:59:95:66:e4:fb:f5:eb:76:5b:9a:50:38:b8:8d:0c:b2:
1c:9c:86:fd:97:3a:67:a2:dd:48:25:3c:c6:75:a3:0b:9a:ac:
84:03:c0:7f:42:a7:94:84:54:a7:7d:66:c3:0f:5c:4b:e2:a4:
66:82:ca:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEK+hdQj4tvzbiTfCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDczMTEyMDAwMFoXDTI0MDkyOTA0MDAwMFowLzEtMCsGA1UEAxMk
MmYwYTJjNjQtMWUwOS00ZDM1LTg2ZWMtYTQwZDI0YjhjYjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxyfqHXhiV2GIoRGDIKrgBdHpYSyWu/VZM/o
4G74yiep37/r3W+GCzJDYiliAu6/aG5tHC338CdOZejT/aK8s235OSZ+IrY5oPOI
PpQyMOObwWOxl8GpKqs75X5DPZKC2xcqeNlYzx++DUEfX47X6W0KDCTL1h0PRjdE
Ifiz8a0GSB9948qm/H8C1DLtRToLWkYIk79S/ytsM9yJ7TgVBFopjSOAa7mnTvxI
jVClZy46wYeZsu/GbINC27wf6xKyou+A+0IMlCeREnLw6Jh0siXwAT7CbDJgDU9A
7FwJU6EtGMEGP2aWgDEHqkrMA+ImpELwcFSBo/UYFsr7IpLKbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMb15aqvkDV+SbCf9nhSpxfRq+s1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJhM2M4MGQtYmZjNC0z
MzFmLTk2YjktMDg1NTRmZmM2MjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpzgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgd55jCMISm83m75nwNznWZFEbilY+MKgXC3Bof7WBI0yIjNiZ/JZbu
WDOCYcHYNrijL8+IaqBflhnGsgi7S+FzaoOdfNnqDEmaCt6v6NKgOPjw5d4439kr
JSgVODhnqusy1mkqmPnckdRSgQfZiTvM5ehIdsS44EoXqBHaKWWlBecnYsZAwR+e
xLs8OjudFtIM4XZIDvblUODtUrtQqGeLRGCujtzjYtacllT/dfzL8y44D3EReRVJ
0lwYu3uEY4Go6qrtGcjyWZVm5Pv163ZbmlA4uI0Mshychv2XOmei3UglPMZ1owua
rIQDwH9Cp5SEVKd9ZsMPXEvipGaCyk0=
-----END CERTIFICATE-----
Generated at Sat May 10 14:52:17 2025 by rpki-client