Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3841a4e-1ddd-3b4a-b3a5-dad8f2335511.roa
File: d3841a4e-1ddd-3b4a-b3a5-dad8f2335511.roa (raw, json)
Hash identifier: or9hJrwfwvmEtRN9eqbQ3vKaprJP2FovGMLkHL+I3l0=
Subject key identifier: 2B:67:3F:8E:F5:3E:69:81:86:3C:85:D6:BF:46:9A:89:E8:BC:8F:6F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EE6A1681A7D2C5B6112D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3841a4e-1ddd-3b4a-b3a5-dad8f2335511.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 34.98.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:6a:16:81:a7:d2:c5:b6:11:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b20d2710-8ec6-4a50-a6d0-e81f4482d3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:cb:01:7d:a2:49:d4:d9:a6:8e:e2:69:26:
e0:9f:ca:63:19:d3:33:48:28:30:98:d2:ad:66:c6:
d1:80:4a:95:14:42:57:fa:88:4e:62:22:45:71:e7:
12:81:9b:46:17:ec:07:3f:bf:0b:12:c2:58:68:d2:
73:0c:9b:91:7c:17:c8:e8:ce:b4:19:9d:a1:42:f4:
4d:6e:e1:35:2d:90:10:33:e1:d4:c7:7b:f7:af:86:
41:96:53:46:40:d6:a8:3a:80:0e:28:96:6c:1d:bf:
32:31:f8:d8:0f:68:f3:ee:75:6c:2a:ca:47:38:10:
56:4d:d8:4a:3e:ca:84:44:c5:74:aa:3d:c9:a6:6b:
cd:7f:b3:74:de:80:81:be:a5:5b:72:d6:c7:03:09:
75:db:09:7f:3b:ad:fe:6f:a4:52:1f:0c:a5:c8:96:
45:97:ea:63:87:b9:04:b1:bd:fe:1e:15:3c:c1:d1:
37:82:12:e0:10:2b:7d:5a:8c:d9:e9:20:95:bc:70:
00:b4:70:50:d5:82:cf:c0:ba:40:5a:97:9f:4c:2a:
d5:9b:66:c9:b9:ab:a6:c2:10:a7:d9:35:80:be:1f:
70:ae:32:6c:30:10:d0:6a:1e:31:4e:2f:9c:44:64:
1a:36:3d:54:8c:5e:e7:52:bf:0a:7c:28:95:8c:53:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:67:3F:8E:F5:3E:69:81:86:3C:85:D6:BF:46:9A:89:E8:BC:8F:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3841a4e-1ddd-3b4a-b3a5-dad8f2335511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.98.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:7d:18:9e:43:bf:d5:27:3b:b3:ab:d6:01:7e:de:75:aa:76:
03:db:d7:9c:7b:e7:88:5d:53:c2:3b:66:84:b1:da:90:84:56:
be:0e:81:64:f7:42:72:fc:a7:a3:0d:40:67:1e:3e:46:30:85:
76:6f:51:10:27:16:32:75:3d:9c:f9:18:84:6e:8c:85:b2:50:
ed:b2:fd:db:fb:3c:12:09:90:bf:ea:08:16:ed:84:d7:c8:04:
79:5a:32:57:b7:d8:20:2e:d5:86:bc:d0:ef:0a:6f:2e:8c:86:
29:a5:a0:82:d2:5a:e0:a3:67:4b:35:97:3b:5f:71:47:25:9a:
43:00:68:35:e8:02:98:a5:85:ae:a2:cc:2c:e4:db:f1:dc:dc:
38:7b:05:be:03:f3:79:1d:a9:a9:46:b6:83:b5:ff:ec:af:39:
ea:97:af:25:34:fd:ba:e3:e9:d9:ae:f5:e7:3a:af:aa:4d:94:
58:4b:5d:a5:12:62:6d:a4:42:4e:14:5d:6a:04:2c:44:05:3b:
3b:9e:44:6b:1a:68:dd:d4:8d:df:dc:7a:be:09:36:35:77:96:
e2:22:32:79:ad:91:47:be:7f:c3:51:59:a0:91:0d:48:6f:a9:
d2:d3:f1:fa:e1:95:9f:db:a2:c1:1d:1e:12:9c:40:20:9e:46:
3d:28:a5:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ7moWgafSxbYRLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YjIwZDI3MTAtOGVjNi00YTUwLWE2ZDAtZTgxZjQ0ODJkM2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslDLAX2iSdTZpo7iaSbgn8pjGdMzSCgwmNKt
ZsbRgEqVFEJX+ohOYiJFcecSgZtGF+wHP78LEsJYaNJzDJuRfBfI6M60GZ2hQvRN
buE1LZAQM+HUx3v3r4ZBllNGQNaoOoAOKJZsHb8yMfjYD2jz7nVsKspHOBBWTdhK
PsqERMV0qj3JpmvNf7N03oCBvqVbctbHAwl12wl/O63+b6RSHwylyJZFl+pjh7kE
sb3+HhU8wdE3ghLgECt9WozZ6SCVvHAAtHBQ1YLPwLpAWpefTCrVm2bJuaumwhCn
2TWAvh9wrjJsMBDQah4xTi+cRGQaNj1UjF7nUr8KfCiVjFPiMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCtnP471PmmBhjyF1r9GmonovI9vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDM4NDFhNGUtMWRkZC0z
YjRhLWIzYTUtZGFkOGYyMzM1NTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAImKWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZ9GJ5Dv9UnO7Or1gF+3nWqdgPb15x754hdU8I7ZoSx2pCEVr4OgWT3
QnL8p6MNQGcePkYwhXZvURAnFjJ1PZz5GIRujIWyUO2y/dv7PBIJkL/qCBbthNfI
BHlaMle32CAu1Ya80O8Kby6MhimloILSWuCjZ0s1lztfcUclmkMAaDXoApilha6i
zCzk2/Hc3Dh7Bb4D83kdqalGtoO1/+yvOeqXryU0/brj6dmu9ec6r6pNlFhLXaUS
Ym2kQk4UXWoELEQFOzueRGsaaN3Ujd/cer4JNjV3luIiMnmtkUe+f8NRWaCRDUhv
qdLT8frhlZ/bosEdHhKcQCCeRj0opRs=
-----END CERTIFICATE-----
Generated at Sat May 10 12:24:07 2025 by rpki-client