Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dbffbef8-326b-3a47-85e8-3c4641448804.roa
File: dbffbef8-326b-3a47-85e8-3c4641448804.roa (raw, json)
Hash identifier: /LdEtvGf7UP1sgP/rT6LxyllERqeXJ8ktP9bqF0bL0A=
Subject key identifier: 59:05:21:FA:7F:78:AA:44:9A:B1:57:94:B6:B2:FB:1F:18:D2:34:51
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A17A49A7B479C3BF486DB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dbffbef8-326b-3a47-85e8-3c4641448804.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.81.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:17:a4:9a:7b:47:9c:3b:f4:86:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=da390ae3-e06d-4ca2-915e-810789d0e137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:b4:52:40:ff:c8:df:7f:b2:08:dd:80:49:
b8:38:e1:e1:1d:12:a1:6f:d7:53:6c:f7:99:0e:d2:
36:3c:1e:e3:57:ac:c3:64:c3:f7:e3:32:16:66:f2:
e2:04:5b:26:97:0d:c0:e9:13:f9:92:c2:ab:47:40:
e2:0a:e4:7f:79:14:3b:bb:3a:0a:38:a8:b1:91:1e:
ba:63:0b:b7:28:38:8f:af:ad:a2:ce:20:55:75:c8:
af:57:ab:8f:57:0a:a3:07:ae:d5:c9:d0:ad:68:f1:
01:c8:29:6e:da:e5:c0:c4:fa:72:dc:84:cb:25:d9:
8b:8b:6a:4a:b4:d3:cb:46:f0:16:af:69:c8:4a:40:
89:ab:4d:cd:a4:4e:15:3e:73:a1:fd:45:36:7a:61:
fd:87:f2:43:b7:14:b0:0d:24:1a:23:f0:ab:2e:cb:
c1:d8:02:19:e9:50:6f:58:98:2e:8d:66:36:ba:2c:
29:82:70:f6:6a:6a:3c:1d:2b:2c:73:6e:76:b4:eb:
9c:03:41:a6:0c:85:08:69:76:3b:44:b6:8a:0e:e2:
e5:99:19:8c:4c:9e:f8:85:c4:26:ba:d3:7d:8f:5f:
15:07:6a:66:05:37:0b:1c:46:db:00:05:f5:18:bc:
12:ca:e7:87:81:01:73:bf:78:15:aa:f4:c4:f6:28:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:05:21:FA:7F:78:AA:44:9A:B1:57:94:B6:B2:FB:1F:18:D2:34:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dbffbef8-326b-3a47-85e8-3c4641448804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.81.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:99:bd:c7:99:11:66:0f:a4:7b:d6:79:0a:a4:e5:b5:92:37:
04:0c:26:77:92:6a:00:0f:f1:09:31:55:bb:04:12:4a:71:a5:
f9:7d:64:a7:9a:3e:75:66:fd:fe:a8:8d:8a:e5:9c:56:2e:f5:
47:ba:07:61:45:e7:a2:d8:cf:f6:ee:e2:e7:37:75:d2:11:ce:
5f:44:f9:c0:fc:da:ef:92:38:b0:2b:a9:2a:02:db:32:e9:ab:
69:2d:2d:49:1b:66:2e:0f:67:ac:4b:a0:42:92:1a:48:75:e2:
7a:db:d1:e3:ee:38:7e:72:ce:9f:8b:e5:9a:45:a0:78:62:cc:
94:04:bb:9f:20:80:6e:ca:ca:0c:c2:40:b3:80:a3:65:1d:aa:
fe:65:8a:aa:81:c3:99:a4:da:f6:ad:5c:63:6e:2d:c2:1d:92:
47:88:39:c7:73:7f:a2:83:30:18:74:48:1f:1a:10:30:e0:a5:
48:20:d6:56:50:82:59:e7:d8:83:59:1c:e6:c0:39:2b:4f:cf:
42:39:03:ef:ef:cc:bc:bc:09:cf:bc:6b:c7:4d:e4:1b:8e:24:
12:74:21:62:35:bd:f7:06:bf:b5:4e:86:df:fc:0b:e8:82:ef:
46:0a:0b:86:66:05:f1:d5:00:82:83:b2:1a:97:b7:a5:74:d4:
35:dc:91:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKF6Sae0ecO/SG24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGEzOTBhZTMtZTA2ZC00Y2EyLTkxNWUtODEwNzg5ZDBlMTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcy0UkD/yN9/sgjdgEm4OOHhHRKhb9dTbPeZ
DtI2PB7jV6zDZMP34zIWZvLiBFsmlw3A6RP5ksKrR0DiCuR/eRQ7uzoKOKixkR66
Ywu3KDiPr62iziBVdcivV6uPVwqjB67VydCtaPEByClu2uXAxPpy3ITLJdmLi2pK
tNPLRvAWr2nISkCJq03NpE4VPnOh/UU2emH9h/JDtxSwDSQaI/CrLsvB2AIZ6VBv
WJgujWY2uiwpgnD2amo8HSssc252tOucA0GmDIUIaXY7RLaKDuLlmRmMTJ74hcQm
utN9j18VB2pmBTcLHEbbAAX1GLwSyueHgQFzv3gVqvTE9ihndwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFkFIfp/eKpEmrFXlLay+x8Y0jRRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGJmZmJlZjgtMzI2Yi0z
YTQ3LTg1ZTgtM2M0NjQxNDQ4ODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyZvceZEWYPpHvWeQqk5bWSNwQMJneSagAP8QkxVbsEEkpxpfl9ZKea
PnVm/f6ojYrlnFYu9Ue6B2FF56LYz/bu4uc3ddIRzl9E+cD82u+SOLArqSoC2zLp
q2ktLUkbZi4PZ6xLoEKSGkh14nrb0ePuOH5yzp+L5ZpFoHhizJQEu58ggG7KygzC
QLOAo2Udqv5liqqBw5mk2vatXGNuLcIdkkeIOcdzf6KDMBh0SB8aEDDgpUgg1lZQ
glnn2INZHObAOStPz0I5A+/vzLy8Cc+8a8dN5BuOJBJ0IWI1vfcGv7VOht/8C+iC
70YKC4ZmBfHVAIKDshqXt6V01DXckRw=
-----END CERTIFICATE-----
Generated at Sat May 10 13:07:12 2025 by rpki-client