Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5ecf688-1654-3974-8494-f725920dbc1d.roa
File: e5ecf688-1654-3974-8494-f725920dbc1d.roa (raw, json)
Hash identifier: 8PAew/ou5SZwViv0ZAWkE+QogvLHyNur0iT6ODzRb5g=
Subject key identifier: A9:50:D4:B5:4A:10:5D:E6:C4:85:B2:70:79:5F:8E:D4:FF:C7:AA:0B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A7CEC0588A15065BB06DC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5ecf688-1654-3974-8494-f725920dbc1d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.131.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a7:ce:c0:58:8a:15:06:5b:b0:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=6890585d-7e2b-4701-b463-7f2bd606570b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c2:75:d9:fc:c0:68:9f:6b:14:2d:61:39:83:
3f:53:0f:fe:c9:01:11:87:11:36:85:8c:bd:23:5b:
cc:95:8d:37:cf:af:01:64:e7:b6:d7:f0:c8:6e:9b:
ce:ba:51:fd:e3:1f:ac:9b:45:85:89:86:63:95:86:
22:0a:92:ba:97:76:cf:e3:69:92:00:8a:e3:0f:c6:
57:e9:cb:0c:48:b4:3f:81:54:7d:9d:bb:07:89:09:
86:7e:9b:92:48:b9:88:d6:b3:c5:9c:4d:a6:59:9b:
3c:cc:4a:bc:ff:68:11:86:68:1e:0d:64:f1:8b:90:
db:cd:22:53:31:d9:99:32:0e:c9:1b:cf:f0:58:de:
ec:f7:1f:eb:e2:80:dd:49:e1:00:2d:c8:04:8e:73:
ae:6f:40:b6:bf:88:ed:ec:84:85:83:cc:36:e5:53:
62:a3:7d:47:80:ea:31:bb:e1:30:c3:b5:b5:a8:40:
59:e0:95:61:a6:b3:5d:13:ea:25:c2:a3:92:4d:d4:
8b:58:7f:4e:6b:4e:76:61:b7:7b:70:84:84:02:5d:
ed:15:87:30:e6:11:4d:f1:ce:16:63:99:a2:5e:04:
d0:78:79:71:54:04:9e:58:ec:5c:05:ff:38:6d:5f:
b9:ca:36:e5:a9:4f:b3:cf:db:a0:66:a7:a7:0f:44:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:50:D4:B5:4A:10:5D:E6:C4:85:B2:70:79:5F:8E:D4:FF:C7:AA:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5ecf688-1654-3974-8494-f725920dbc1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.131.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:7f:50:6d:e6:e9:01:72:ff:2f:22:b6:ca:d6:a6:5f:ef:12:
55:43:2b:71:a2:f5:75:da:31:16:86:ad:12:85:a9:10:6c:69:
9a:37:59:8a:e9:d9:07:36:0c:8b:19:5d:5b:04:a4:52:a3:2b:
91:af:fb:96:70:f7:0f:58:a1:60:d8:f8:59:f8:f6:0e:b6:fc:
23:d8:2a:00:7f:1c:60:88:b3:76:17:2f:ab:2d:91:c5:cc:2e:
2d:7c:52:fa:85:e7:93:da:e1:80:34:e5:dd:db:3a:87:9f:9d:
2c:b9:e7:8a:f5:23:5e:e1:6a:cd:e5:e4:41:ac:f9:c7:ee:5a:
ab:6f:cd:52:9b:b4:c2:b2:d8:af:08:bc:e2:03:44:1f:a5:22:
de:71:2e:dc:79:20:fd:a0:8c:da:0b:19:b1:58:fa:b7:c2:05:
f7:7c:9b:98:a6:ca:9c:b5:cc:b6:4c:11:c6:7b:09:82:17:d3:
d1:fa:bc:47:06:f7:e0:47:f4:25:e2:50:86:05:90:7d:80:92:
82:74:84:51:39:48:fd:b2:5a:70:4b:d3:9a:ca:01:b8:93:ab:
aa:9c:1f:fc:aa:f8:83:c5:e6:38:93:9a:b7:07:ef:05:0e:0d:
ee:ed:a2:c5:e5:c6:ba:97:bb:8a:12:91:5a:90:a6:e1:bd:fd:
27:27:65:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnp87AWIoVBluwbcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
Njg5MDU4NWQtN2UyYi00NzAxLWI0NjMtN2YyYmQ2MDY1NzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMJ12fzAaJ9rFC1hOYM/Uw/+yQERhxE2hYy9
I1vMlY03z68BZOe21/DIbpvOulH94x+sm0WFiYZjlYYiCpK6l3bP42mSAIrjD8ZX
6csMSLQ/gVR9nbsHiQmGfpuSSLmI1rPFnE2mWZs8zEq8/2gRhmgeDWTxi5DbzSJT
MdmZMg7JG8/wWN7s9x/r4oDdSeEALcgEjnOub0C2v4jt7ISFg8w25VNio31HgOox
u+Eww7W1qEBZ4JVhprNdE+olwqOSTdSLWH9Oa052Ybd7cISEAl3tFYcw5hFN8c4W
Y5miXgTQeHlxVASeWOxcBf84bV+5yjblqU+zz9ugZqenD0RkVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlQ1LVKEF3mxIWycHlfjtT/x6oLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTVlY2Y2ODgtMTY1NC0z
OTc0LTg0OTQtZjcyNTkyMGRiYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoPwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADN/UG3m6QFy/y8itsrWpl/vElVDK3Gi9XXaMRaGrRKFqRBsaZo3WYrp
2Qc2DIsZXVsEpFKjK5Gv+5Zw9w9YoWDY+Fn49g62/CPYKgB/HGCIs3YXL6stkcXM
Li18UvqF55Pa4YA05d3bOoefnSy554r1I17has3l5EGs+cfuWqtvzVKbtMKy2K8I
vOIDRB+lIt5xLtx5IP2gjNoLGbFY+rfCBfd8m5imypy1zLZMEcZ7CYIX09H6vEcG
9+BH9CXiUIYFkH2AkoJ0hFE5SP2yWnBL05rKAbiTq6qcH/yq+IPF5jiTmrcH7wUO
De7tosXlxrqXu4oSkVqQpuG9/ScnZYw=
-----END CERTIFICATE-----
Generated at Sun May 11 16:55:58 2025 by rpki-client