Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9d99d45-d32f-3429-baf8-f7127d8b8bf1.roa
File: e9d99d45-d32f-3429-baf8-f7127d8b8bf1.roa (raw, json)
Hash identifier: xGm3RJ+Hx77YzAPB44sbe++WwVte8pEPA//gNL2qtqU=
Subject key identifier: 8B:5B:E8:BA:68:62:7A:74:87:DD:86:46:69:91:E4:F7:19:7D:F1:63
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285844720AD208B2B46F917EBBCB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9d99d45-d32f-3429-baf8-f7127d8b8bf1.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 396982
IP address blocks: 34.169.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:d2:08:b2:b4:6f:91:7e:bb:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=88b62b00-714e-4608-924c-d5e15cf191db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:24:52:a2:a6:84:8f:7b:ab:5b:7d:5e:45:
f1:b1:65:9b:c0:2e:8c:cb:cf:c6:3d:d5:a2:bc:f0:
40:77:56:10:6f:8c:47:2b:79:c3:a0:35:f4:ee:70:
92:d8:ef:7f:10:d3:b3:26:01:6b:3d:c8:a4:81:c7:
04:9e:1e:da:7a:a0:8d:76:8b:4b:6e:c4:6e:ed:b4:
16:c8:4b:d5:fe:37:ea:8d:a0:8f:22:10:6e:2e:98:
a4:d7:4e:27:c2:3b:4b:9f:3c:ef:32:ed:09:10:92:
da:62:9f:bf:50:45:90:2a:2b:39:51:5e:e4:d7:ec:
d8:9a:67:f9:83:56:14:66:1d:4c:66:e9:6d:68:fc:
eb:0f:4d:71:23:1d:de:e5:a5:29:aa:a4:9f:84:f1:
c8:7e:13:01:9f:14:ed:95:b7:95:c2:89:1a:cc:59:
6c:db:65:26:29:65:d7:98:12:3e:9e:c7:58:ed:5e:
5e:cd:13:19:cd:2d:4c:23:92:88:99:93:8e:a2:8a:
61:17:bc:63:8a:e6:a3:95:a2:3f:9b:63:5e:ad:07:
df:27:c5:bb:11:6c:d3:87:1b:2e:b0:2c:82:c2:e6:
9c:fd:0d:b2:93:53:b0:c9:65:7c:79:fb:10:2a:22:
16:93:6c:1c:60:92:50:fb:5a:e2:bd:48:27:1e:d4:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5B:E8:BA:68:62:7A:74:87:DD:86:46:69:91:E4:F7:19:7D:F1:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9d99d45-d32f-3429-baf8-f7127d8b8bf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.169.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:c3:94:f1:82:98:38:d9:ef:63:a9:6c:17:07:24:07:d2:d7:
a7:4e:e5:e7:69:3b:f6:be:a9:d5:c5:f6:2c:44:81:43:95:88:
cf:76:90:16:16:4b:f4:96:3d:f5:88:9e:10:0b:61:39:87:5f:
d2:5d:d7:63:83:ff:f3:d5:f2:54:61:a7:f8:1e:8e:1d:5c:91:
e9:9a:cc:3c:f6:bd:80:fe:4d:ec:e7:2d:30:f2:d8:91:fe:b5:
40:1c:2f:02:ed:28:c3:f8:da:99:31:ea:42:74:8e:20:b4:a9:
11:a7:b2:9f:74:98:75:b7:c2:73:e1:0c:32:2f:ba:fc:7f:dc:
a2:34:48:f9:08:d3:97:76:1a:4a:3e:34:9b:9b:de:86:42:01:
26:59:ed:bd:3b:ed:70:11:18:e7:f5:75:ce:ea:4a:b7:cf:3a:
f6:64:06:db:87:c7:22:00:62:e6:71:c5:b1:20:fd:39:64:d0:
aa:c1:44:26:97:72:e5:23:85:7e:51:38:dc:f7:b0:0c:c1:e4:
ce:d0:43:96:dc:8b:b6:42:4d:b7:ea:5d:04:f5:19:90:41:76:
97:f4:39:6f:c2:82:6f:e2:15:1f:a3:35:d6:f0:85:e0:83:f4:
57:cf:25:ec:f6:dc:b9:d1:03:a9:8a:b8:d2:22:01:fc:8f:30:
86:b1:68:a9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWERyCtIIsrRvkX67y4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDEwMzEyMDAwMFoXDTI1MDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
ODhiNjJiMDAtNzE0ZS00NjA4LTkyNGMtZDVlMTVjZjE5MWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOUkUqKmhI97q1t9XkXxsWWbwC6My8/GPdWi
vPBAd1YQb4xHK3nDoDX07nCS2O9/ENOzJgFrPcikgccEnh7aeqCNdotLbsRu7bQW
yEvV/jfqjaCPIhBuLpik104nwjtLnzzvMu0JEJLaYp+/UEWQKis5UV7k1+zYmmf5
g1YUZh1MZultaPzrD01xIx3e5aUpqqSfhPHIfhMBnxTtlbeVwokazFls22UmKWXX
mBI+nsdY7V5ezRMZzS1MI5KImZOOoophF7xjiuajlaI/m2NerQffJ8W7EWzThxsu
sCyCwuac/Q2yk1OwyWV8efsQKiIWk2wcYJJQ+1rivUgnHtS4AQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFItb6LpoYnp0h92GRmmR5PcZffFjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTlkOTlkNDUtZDMyZi0z
NDI5LWJhZjgtZjcxMjdkOGI4YmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEcOU8YKYONnvY6lsFwckB9LXp07l52k79r6p1cX2LESBQ5WIz3aQFhZL
9JY99YieEAthOYdf0l3XY4P/89XyVGGn+B6OHVyR6ZrMPPa9gP5N7OctMPLYkf61
QBwvAu0ow/jamTHqQnSOILSpEaeyn3SYdbfCc+EMMi+6/H/cojRI+QjTl3YaSj40
m5vehkIBJlntvTvtcBEY5/V1zupKt8869mQG24fHIgBi5nHFsSD9OWTQqsFEJpdy
5SOFflE43PewDMHkztBDltyLtkJNt+pdBPUZkEF2l/Q5b8KCb+IVH6M11vCF4IP0
V88l7PbcudEDqYq40iIB/I8whrFoqQ==
-----END CERTIFICATE-----
Generated at Sat May 10 14:44:42 2025 by rpki-client