Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8cae958-b7a0-356b-af39-ff1f5866d763.roa
File: d8cae958-b7a0-356b-af39-ff1f5866d763.roa (raw, json)
Hash identifier: MUA00v3vRnhxZe3bYmsUY2+PrUGFFZDId2lStNafSz4=
Subject key identifier: DC:E2:A3:5F:4B:38:5A:D6:87:B7:7A:33:E2:67:27:81:58:FB:FE:6A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A0DFBF46973BD5732FFE60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8cae958-b7a0-356b-af39-ff1f5866d763.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.86.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a0:df:bf:46:97:3b:d5:73:2f:fe:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=4d6756ae-8067-4717-b0cb-a12fdce8d1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:6b:a3:07:ec:6c:70:8f:8b:43:b8:12:3c:
14:70:58:09:3e:73:d0:7d:8d:0c:7e:00:1f:d5:33:
45:d0:7b:3f:2f:f0:ea:4e:6e:ef:cc:ee:58:22:a5:
e2:66:47:4e:e5:3f:62:b9:e1:86:62:f0:6b:6a:b5:
fd:36:56:74:60:98:e6:84:e3:f1:4c:55:0f:11:80:
8e:d4:a9:fd:a8:c5:cd:e0:a8:08:a1:22:5e:e0:17:
79:07:37:ae:3c:f0:39:54:1a:e7:2c:d8:ac:19:1f:
d9:f0:35:88:5f:09:ec:a9:a4:89:b2:24:c5:1a:74:
40:93:50:9b:da:51:57:e6:e9:19:6c:04:28:9b:6d:
65:70:93:12:9a:9c:38:b7:7a:21:9e:56:5f:6b:22:
53:5d:68:0b:04:54:ee:5d:ce:4a:a1:f4:3c:1d:84:
ca:10:37:c4:a6:40:54:5e:0e:c2:47:f3:35:32:35:
43:34:63:1d:f3:d6:02:17:73:6f:f6:8a:b9:07:e7:
e8:e1:32:a5:8c:b8:47:9f:a0:23:77:a9:d0:23:9f:
54:25:df:af:60:6d:4e:07:eb:29:c5:bf:8a:56:72:
9f:df:40:f4:8d:46:ec:be:db:c2:47:b4:7d:28:89:
c8:b6:64:b1:e3:43:a9:9e:1e:55:68:85:86:73:7d:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:A3:5F:4B:38:5A:D6:87:B7:7A:33:E2:67:27:81:58:FB:FE:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8cae958-b7a0-356b-af39-ff1f5866d763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:bd:06:0d:c8:3b:74:a5:b4:75:1f:44:26:8e:d4:89:c3:76:
70:76:53:49:94:62:fb:25:bc:c8:4d:37:3e:82:9f:e8:23:d1:
c7:a5:c2:b3:31:a8:de:92:d5:00:f9:c1:55:96:38:fc:0f:a5:
c6:31:21:bf:7f:1a:0c:bc:e6:9b:11:6f:72:d4:1f:42:29:a6:
a9:76:e3:bc:12:a4:2b:d5:f5:3f:8f:4b:3f:c7:15:b1:6c:19:
03:57:e1:55:9f:23:78:ad:b2:7a:ab:55:fb:fa:2e:a7:3a:20:
25:db:66:0d:f5:92:79:a1:43:d4:db:aa:9a:46:52:65:76:73:
80:09:1f:50:b5:0e:5d:59:72:ba:9f:65:15:3c:7a:a4:21:a0:
88:d7:48:57:2f:1e:61:78:f7:c6:31:23:31:df:7e:56:33:31:
c9:3d:9d:96:0d:25:ef:34:b4:3b:7d:19:cc:20:0c:fa:17:7e:
b4:61:14:75:85:05:bd:b3:df:20:5c:b6:2f:fc:61:1a:00:35:
4f:dc:bc:62:da:49:9f:1c:77:8c:69:51:8b:91:40:a4:13:9b:
89:18:b5:25:4e:ca:2e:e5:f5:9f:6a:5a:e4:30:35:19:52:66:
f7:e9:ed:5f:5f:30:f5:46:0f:9b:70:73:86:68:a8:7c:aa:96:
b4:50:be:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnoN+/Rpc71XMv/mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NGQ2NzU2YWUtODA2Ny00NzE3LWIwY2ItYTEyZmRjZThkMWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJJrowfsbHCPi0O4EjwUcFgJPnPQfY0MfgAf
1TNF0Hs/L/DqTm7vzO5YIqXiZkdO5T9iueGGYvBrarX9NlZ0YJjmhOPxTFUPEYCO
1Kn9qMXN4KgIoSJe4Bd5BzeuPPA5VBrnLNisGR/Z8DWIXwnsqaSJsiTFGnRAk1Cb
2lFX5ukZbAQom21lcJMSmpw4t3ohnlZfayJTXWgLBFTuXc5KofQ8HYTKEDfEpkBU
Xg7CR/M1MjVDNGMd89YCF3Nv9oq5B+fo4TKljLhHn6Ajd6nQI59UJd+vYG1OB+sp
xb+KVnKf30D0jUbsvtvCR7R9KInItmSx40Opnh5VaIWGc31eSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzio19LOFrWh7d6M+JnJ4FY+/5qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDhjYWU5NTgtYjdhMC0z
NTZiLWFmMzktZmYxZjU4NjZkNzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlagMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKm9Bg3IO3SltHUfRCaO1InDdnB2U0mUYvslvMhNNz6Cn+gj0celwrMx
qN6S1QD5wVWWOPwPpcYxIb9/Ggy85psRb3LUH0Ippql247wSpCvV9T+PSz/HFbFs
GQNX4VWfI3itsnqrVfv6Lqc6ICXbZg31knmhQ9TbqppGUmV2c4AJH1C1Dl1Zcrqf
ZRU8eqQhoIjXSFcvHmF498YxIzHfflYzMck9nZYNJe80tDt9GcwgDPoXfrRhFHWF
Bb2z3yBcti/8YRoANU/cvGLaSZ8cd4xpUYuRQKQTm4kYtSVOyi7l9Z9qWuQwNRlS
Zvfp7V9fMPVGD5twc4ZoqHyqlrRQvkw=
-----END CERTIFICATE-----
Generated at Sat May 10 14:53:52 2025 by rpki-client