Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eaab9703-89b1-36e5-838a-19364dfdb549.roa
File: eaab9703-89b1-36e5-838a-19364dfdb549.roa (raw, json)
Hash identifier: D9XwkPJdkV46wUmo0lszhLwAqgHxkM4JL4SIycpcERQ=
Subject key identifier: D7:85:3F:C2:5B:44:90:DC:9A:12:50:D0:CC:E3:57:08:E0:9B:68:E3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A244ACEE7C25A291D4B9880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eaab9703-89b1-36e5-838a-19364dfdb549.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.134.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:4a:ce:e7:c2:5a:29:1d:4b:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9e9f10a1-8fe5-4d77-b146-bd0f19dfe0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:ac:44:3c:65:f6:6c:0c:c8:94:fc:45:22:
30:d3:c3:ee:7f:d9:32:8c:a1:4c:4c:68:f4:e7:6e:
d1:16:1b:c6:8b:6e:a5:b6:e9:c6:20:f7:f4:12:4b:
26:35:27:2a:89:c4:42:97:77:f3:23:73:9b:28:04:
82:44:45:e1:e2:cc:7f:b9:bd:a8:8b:36:94:15:6d:
b7:0f:0c:10:e5:e8:de:98:a7:5d:14:a1:d2:e6:73:
b2:cd:24:55:79:28:3f:91:d3:88:8d:f9:82:99:3a:
6b:26:30:6d:99:31:d9:60:66:cb:08:16:05:2c:37:
22:76:60:6d:dc:04:30:f6:f0:99:64:78:3f:f5:a1:
61:04:49:9e:22:76:b9:d2:c5:a5:b1:8d:e5:c5:b5:
be:b7:03:bc:78:4a:e8:ab:2f:1c:19:ff:8d:85:bf:
01:3b:98:b8:c4:ed:cf:09:e6:72:30:77:62:31:8e:
0a:2c:9c:95:6c:c8:01:68:45:95:85:db:bb:d7:2a:
c9:64:dc:b4:5a:8d:3b:fc:7e:1f:c9:09:81:fb:26:
60:91:e2:31:a5:10:f5:ba:2d:33:d4:17:db:a2:f9:
53:d9:8d:32:85:24:cb:e5:29:26:4f:2c:08:78:f3:
60:44:4d:56:55:d8:f9:98:64:b8:74:ff:97:ae:92:
00:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:85:3F:C2:5B:44:90:DC:9A:12:50:D0:CC:E3:57:08:E0:9B:68:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eaab9703-89b1-36e5-838a-19364dfdb549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.134.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:12:2a:51:ce:59:32:a4:e5:75:97:86:39:ec:92:a5:55:d7:
98:f8:0a:7f:8d:22:82:39:4e:6d:20:3c:bb:e8:a7:12:86:2d:
5c:a4:da:81:93:6e:e7:41:1b:97:6b:91:cd:dd:02:98:64:3e:
1f:fe:d7:a1:ff:c3:d6:21:93:3c:9d:3c:71:e5:3b:6e:42:45:
be:ef:65:e1:b5:a7:04:e9:71:4b:d5:1a:8a:ff:36:f9:9e:46:
1c:bf:8d:dd:3e:81:a7:10:ff:11:a2:d8:92:dc:d6:16:04:ab:
0d:fd:cb:8b:9a:e2:1f:af:cd:26:0f:c6:8c:9f:55:67:ef:7c:
18:4a:6f:5a:bb:9d:05:48:49:d5:6d:df:02:6a:ce:e4:19:8b:
d3:c0:33:aa:f7:59:90:5b:b8:ef:df:22:80:15:27:40:53:35:
92:97:ca:dd:39:4f:52:8e:97:73:f1:69:d2:f3:50:08:d2:3a:
43:ac:bf:77:26:07:2a:e1:e7:6a:a3:28:cb:14:08:12:06:2b:
0f:7b:25:eb:e0:bd:06:40:c2:46:1a:ec:a1:ef:54:86:9a:f3:
3a:6e:e4:89:79:3c:ed:75:d9:60:c9:16:71:fd:9c:b9:65:d9:
2c:26:c6:c3:3e:b6:72:92:cc:2a:f7:dd:88:97:ce:b4:4c:b1:
36:d1:38:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJErO58JaKR1LmIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OWU5ZjEwYTEtOGZlNS00ZDc3LWIxNDYtYmQwZjE5ZGZlMGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmKsRDxl9mwMyJT8RSIw08Puf9kyjKFMTGj0
527RFhvGi26ltunGIPf0EksmNScqicRCl3fzI3ObKASCREXh4sx/ub2oizaUFW23
DwwQ5ejemKddFKHS5nOyzSRVeSg/kdOIjfmCmTprJjBtmTHZYGbLCBYFLDcidmBt
3AQw9vCZZHg/9aFhBEmeIna50sWlsY3lxbW+twO8eEroqy8cGf+Nhb8BO5i4xO3P
CeZyMHdiMY4KLJyVbMgBaEWVhdu71yrJZNy0Wo07/H4fyQmB+yZgkeIxpRD1ui0z
1BfbovlT2Y0yhSTL5SkmTywIePNgRE1WVdj5mGS4dP+XrpIArQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNeFP8JbRJDcmhJQ0MzjVwjgm2jjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWFhYjk3MDMtODliMS0z
NmU1LTgzOGEtMTkzNjRkZmRiNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJUSKlHOWTKk5XWXhjnskqVV15j4Cn+NIoI5Tm0gPLvopxKGLVyk2oGT
budBG5drkc3dAphkPh/+16H/w9YhkzydPHHlO25CRb7vZeG1pwTpcUvVGor/Nvme
Rhy/jd0+gacQ/xGi2JLc1hYEqw39y4ua4h+vzSYPxoyfVWfvfBhKb1q7nQVISdVt
3wJqzuQZi9PAM6r3WZBbuO/fIoAVJ0BTNZKXyt05T1KOl3PxadLzUAjSOkOsv3cm
Byrh52qjKMsUCBIGKw97JevgvQZAwkYa7KHvVIaa8zpu5Il5PO112WDJFnH9nLll
2SwmxsM+tnKSzCr33YiXzrRMsTbROKU=
-----END CERTIFICATE-----
Generated at Sat May 10 19:15:04 2025 by rpki-client