Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e30edb3f-c05f-39a7-a42e-db10a0e2552b.roa
File: e30edb3f-c05f-39a7-a42e-db10a0e2552b.roa (raw, json)
Hash identifier: wSDjBrq23GkRTjuPaduXb93mdWgI/NVQ5RLZbVRypho=
Subject key identifier: E8:87:ED:EB:E8:A8:C0:50:99:70:A8:EE:89:F9:E7:AE:B1:09:0B:B5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FBAD211D0F4329D13DAA40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e30edb3f-c05f-39a7-a42e-db10a0e2552b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.155.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:ad:21:1d:0f:43:29:d1:3d:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fc6e9772-072d-45b2-93e5-f1426777fbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:b4:30:59:91:e0:28:f7:75:77:49:0d:ca:
3d:0c:78:e3:ce:8d:5f:6f:18:ad:7b:29:67:c3:e5:
1f:75:80:8c:a6:bd:0b:19:2d:97:43:9e:6e:8b:c8:
fb:8a:40:a1:de:e5:89:c5:e4:c2:76:96:b1:b6:ff:
ac:f8:1c:d7:3a:de:1b:f3:c1:d1:0f:2d:54:99:fa:
1d:19:f7:8e:e7:56:19:2a:1c:ff:b5:cd:db:0f:5b:
35:3e:99:e2:be:ad:c0:d5:66:cd:c6:2f:de:61:06:
c1:93:14:0b:89:9b:d5:4a:f9:1d:e4:14:77:d7:3c:
db:2d:95:c5:6d:2b:40:a5:79:51:b8:3e:93:f2:21:
b4:f3:88:c5:80:9a:e6:44:88:f3:dd:c6:26:5e:ad:
ee:69:1f:c7:31:2c:c2:1c:b6:cf:35:89:99:10:5d:
eb:16:d2:73:56:e0:6a:b7:16:ff:3e:e6:56:48:1c:
37:8b:bd:df:1c:27:41:3c:1a:b2:d6:f2:cf:5b:f0:
19:f7:78:77:94:7e:4b:a4:94:45:25:c2:c6:e5:f0:
11:76:a8:d6:f7:aa:b4:c1:da:35:c4:ee:e0:10:73:
68:c8:77:5e:7a:c0:ac:5c:31:ae:29:21:60:f2:7f:
cb:13:c2:07:d5:22:a3:af:09:c7:95:e6:cd:bd:c6:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:87:ED:EB:E8:A8:C0:50:99:70:A8:EE:89:F9:E7:AE:B1:09:0B:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e30edb3f-c05f-39a7-a42e-db10a0e2552b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.155.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:ee:fe:2b:7e:b6:a3:cf:50:d9:36:a8:5b:60:57:dc:0b:c9:
e6:51:9c:05:4e:ff:93:a8:36:26:97:a2:85:10:5f:dc:04:9b:
96:7e:32:ec:bc:9d:86:67:7e:2f:89:80:1e:31:f7:d3:94:d6:
8f:fa:67:b8:3d:bb:f4:44:c5:0d:1c:7e:f2:cf:0a:56:18:bb:
95:f9:c2:0e:0e:38:3f:eb:2f:41:3c:cc:54:46:e5:16:fb:ca:
22:d9:cb:9a:54:ac:1c:f4:28:1e:94:d2:ef:24:ee:f8:f6:64:
83:43:70:63:07:0a:97:b2:80:ec:7b:ec:0a:cb:8b:3a:04:59:
f1:69:53:48:50:37:6b:b1:65:04:c3:9c:4e:b9:7d:aa:f5:f0:
27:c3:16:8c:7a:61:6d:87:be:79:cd:ec:e8:8c:4f:bd:c7:a1:
16:09:d9:af:76:48:27:33:46:f4:ba:8f:0a:0a:07:98:83:3b:
8b:be:3b:47:b7:a5:77:f1:38:db:92:db:25:20:46:b4:4a:24:
b2:b9:71:94:c9:29:1c:55:f2:b9:55:d0:79:37:23:3b:71:3b:
e3:93:0b:79:c5:56:70:ab:35:ad:2d:db:51:e7:ee:c1:9c:a8:
f3:e1:ac:c4:03:12:fe:22:9e:44:ba:b8:0b:c7:49:7c:fd:96:
e5:05:51:94
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEMJ+60hHQ9DKdE9qkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmM2ZTk3NzItMDcyZC00NWIyLTkzZTUtZjE0MjY3NzdmYmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIK0MFmR4Cj3dXdJDco9DHjjzo1fbxiteyln
w+UfdYCMpr0LGS2XQ55ui8j7ikCh3uWJxeTCdpaxtv+s+BzXOt4b88HRDy1Umfod
GfeO51YZKhz/tc3bD1s1Ppnivq3A1WbNxi/eYQbBkxQLiZvVSvkd5BR31zzbLZXF
bStApXlRuD6T8iG084jFgJrmRIjz3cYmXq3uaR/HMSzCHLbPNYmZEF3rFtJzVuBq
txb/PuZWSBw3i73fHCdBPBqy1vLPW/AZ93h3lH5LpJRFJcLG5fARdqjW96q0wdo1
xO7gEHNoyHdeesCsXDGuKSFg8n/LE8IH1SKjrwnHlebNvcYJDwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOiH7evoqMBQmXCo7on5566xCQu1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTMwZWRiM2YtYzA1Zi0z
OWE3LWE0MmUtZGIxMGEwZTI1NTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIpswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeu7+K362o89Q2TaoW2BX3AvJ5lGcBU7/k6g2JpeihRBf3ASbln4y7Lyd
hmd+L4mAHjH305TWj/pnuD279ETFDRx+8s8KVhi7lfnCDg44P+svQTzMVEblFvvK
ItnLmlSsHPQoHpTS7yTu+PZkg0NwYwcKl7KA7HvsCsuLOgRZ8WlTSFA3a7FlBMOc
Trl9qvXwJ8MWjHphbYe+ec3s6IxPvcehFgnZr3ZIJzNG9LqPCgoHmIM7i747R7el
d/E425LbJSBGtEoksrlxlMkpHFXyuVXQeTcjO3E745MLecVWcKs1rS3bUefuwZyo
8+GsxAMS/iKeRLq4C8dJfP2W5QVRlA==
-----END CERTIFICATE-----
Generated at Sat May 10 11:10:11 2025 by rpki-client