Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea5b35d5-1ea4-3b9f-906e-8021a4e3bd69.roa
File: ea5b35d5-1ea4-3b9f-906e-8021a4e3bd69.roa (raw, json)
Hash identifier: 52UcIcpsCJRlFGEhJyFL8z/rFXmApaJJZmGuzK5cZtU=
Subject key identifier: 8F:D8:31:0C:D2:EC:69:95:EC:C0:1C:E9:96:CE:F0:C2:A2:15:0B:3E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F901D5004D8BF003EE8C10
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea5b35d5-1ea4-3b9f-906e-8021a4e3bd69.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.133.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f9:01:d5:00:4d:8b:f0:03:ee:8c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c8beb4fa-eab0-46c5-9c57-0790b2b2d97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:f2:11:20:a6:78:8a:e0:01:b2:40:ca:43:
74:94:ff:0b:4a:32:3c:8e:3c:4a:60:f1:90:17:41:
c8:e8:7d:be:49:38:81:72:5b:34:f5:98:82:44:88:
28:04:bd:08:b1:fc:f4:01:e6:6a:d9:5d:36:68:f4:
6a:e4:a1:58:94:36:44:4f:0e:16:a0:e3:8a:d6:7f:
84:0f:a3:d5:74:f4:e6:88:f7:c0:ea:a7:76:a4:c9:
6a:11:07:7c:b2:a0:7d:81:ee:58:bd:ac:67:dd:b9:
6d:29:a5:31:aa:f3:f1:4c:48:e5:92:7a:3e:83:bc:
0b:89:54:fd:85:e7:37:dc:62:6a:47:fd:bc:57:bc:
93:d2:22:78:c2:7a:8b:67:3f:ec:4e:af:65:95:68:
e0:bb:a5:5e:68:6e:86:45:7d:f8:c4:2c:32:eb:ae:
04:6f:e9:68:0b:f9:b0:b3:36:d8:bc:41:e6:fa:68:
6c:fe:b5:5f:4e:5e:18:18:5b:de:a5:8a:ba:3f:50:
18:39:81:f2:2a:de:d3:7a:b5:14:09:d5:3d:e9:22:
6c:0b:ac:61:39:7e:3a:6e:c6:66:5b:86:46:3f:b7:
72:d3:bb:16:b1:c1:cb:08:9d:54:e4:84:58:4a:0e:
0f:70:22:57:a0:1b:d6:63:ea:eb:e8:f9:94:2e:0f:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D8:31:0C:D2:EC:69:95:EC:C0:1C:E9:96:CE:F0:C2:A2:15:0B:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea5b35d5-1ea4-3b9f-906e-8021a4e3bd69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.133.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:08:be:43:53:88:cd:6a:37:be:f0:c4:85:f0:2f:c3:e8:6b:
c1:92:38:7b:30:e6:5d:34:ab:81:20:9f:fe:70:9c:60:95:81:
dc:7a:e5:2d:1e:3a:79:06:27:2b:07:7c:04:dc:df:f5:b2:95:
a5:84:f2:0e:4a:f6:ad:7c:9a:73:e2:c1:da:76:39:d2:4b:2c:
a4:4b:f2:4b:06:f0:96:aa:79:c2:7c:47:e3:40:02:37:db:f0:
7f:b7:3f:73:e3:66:89:8f:b6:1f:51:3a:5f:98:40:6d:40:6c:
4f:5a:b0:26:46:d6:f0:9c:6e:43:35:7b:3a:0d:8e:ff:28:f5:
fd:20:d4:dd:9c:9c:f6:2e:ee:ee:85:b5:c2:97:38:0a:9b:0d:
ee:0f:a9:36:35:65:7d:f7:1e:1a:99:6d:42:76:cf:e7:98:a8:
f8:f1:54:1e:a0:0b:e7:5a:2c:95:90:c0:2d:18:2d:3a:e2:42:
a9:5c:fd:46:e0:c4:a7:07:4a:16:37:61:ab:9d:65:e3:59:83:
b0:68:57:11:fd:27:3f:51:82:a3:f5:57:ae:8c:05:c0:cb:43:
d3:5e:26:09:91:1e:81:ea:ac:b9:53:c1:76:d9:4f:ec:da:70:
bc:95:d5:1c:47:b1:71:6e:50:5e:36:79:c7:39:3f:73:7a:36:
4c:f5:5f:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ+QHVAE2L8APujBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzhiZWI0ZmEtZWFiMC00NmM1LTljNTctMDc5MGIyYjJkOTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMbyESCmeIrgAbJAykN0lP8LSjI8jjxKYPGQ
F0HI6H2+STiBcls09ZiCRIgoBL0Isfz0AeZq2V02aPRq5KFYlDZETw4WoOOK1n+E
D6PVdPTmiPfA6qd2pMlqEQd8sqB9ge5Yvaxn3bltKaUxqvPxTEjlkno+g7wLiVT9
hec33GJqR/28V7yT0iJ4wnqLZz/sTq9llWjgu6VeaG6GRX34xCwy664Eb+loC/mw
szbYvEHm+mhs/rVfTl4YGFvepYq6P1AYOYHyKt7TerUUCdU96SJsC6xhOX46bsZm
W4ZGP7dy07sWscHLCJ1U5IRYSg4PcCJXoBvWY+rr6PmULg8GGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/YMQzS7GmV7MAc6ZbO8MKiFQs+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWE1YjM1ZDUtMWVhNC0z
YjlmLTkwNmUtODAyMWE0ZTNiZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0IvkNTiM1qN77wxIXwL8Poa8GSOHsw5l00q4Egn/5wnGCVgdx65S0e
OnkGJysHfATc3/WylaWE8g5K9q18mnPiwdp2OdJLLKRL8ksG8JaqecJ8R+NAAjfb
8H+3P3PjZomPth9ROl+YQG1AbE9asCZG1vCcbkM1ezoNjv8o9f0g1N2cnPYu7u6F
tcKXOAqbDe4PqTY1ZX33HhqZbUJ2z+eYqPjxVB6gC+daLJWQwC0YLTriQqlc/Ubg
xKcHShY3YaudZeNZg7BoVxH9Jz9RgqP1V66MBcDLQ9NeJgmRHoHqrLlTwXbZT+za
cLyV1RxHsXFuUF42ecc5P3N6Nkz1X7U=
-----END CERTIFICATE-----
Generated at Sat May 10 11:44:29 2025 by rpki-client