Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eaf1b7d0-04a1-3891-a337-db63b782f690.roa
File: eaf1b7d0-04a1-3891-a337-db63b782f690.roa (raw, json)
Hash identifier: OCf/+0Xxat0Cw3gKwoefrF3b8eZVPTXI3DB7S8cF+sU=
Subject key identifier: 4B:19:9C:7F:F5:94:34:76:D2:BF:61:DD:16:D3:6E:70:A1:8A:7F:58
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7ACF080689965B8FCA8B5C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eaf1b7d0-04a1-3891-a337-db63b782f690.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.139.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ac:f0:80:68:99:65:b8:fc:a8:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c5f93be0-ab6d-41ee-ad68-5bc0bb051031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:98:94:d0:e4:bd:4a:49:c2:02:1a:0a:ad:
48:7b:41:55:90:2e:56:6c:25:4f:e5:3d:e5:82:9f:
b5:ae:62:2c:7f:8e:2b:3f:a3:41:ff:cf:06:85:b5:
13:08:b9:7d:a4:8e:c6:1d:ce:63:17:44:81:88:44:
05:64:a9:9c:af:1f:d5:a9:95:12:7f:52:4b:af:57:
ad:e5:dd:d3:da:8e:c8:74:0a:fc:7d:ba:63:24:d6:
96:3c:b1:1b:f5:01:e2:c2:58:3d:7a:5d:7d:3d:94:
f4:6d:89:7d:d4:4f:61:5c:31:ef:03:83:6a:92:dc:
1a:e8:05:8e:3c:4f:34:0c:b4:84:3b:0d:a7:1e:5b:
12:db:3b:4a:b2:f8:45:8d:f8:17:14:e7:bb:41:a8:
70:01:3e:89:be:af:27:3b:ba:5e:53:f4:43:a6:bf:
55:60:a9:57:fb:4f:bb:39:bf:cb:7a:21:cb:da:c9:
74:cb:91:e3:52:b0:74:e8:e5:e7:17:da:95:4c:d8:
0f:3e:58:65:0c:eb:85:ae:68:b0:19:d7:5d:a3:50:
18:8f:21:5c:12:e3:0a:7d:7d:67:4f:fe:8f:83:7b:
3f:bd:24:02:a8:9e:2c:21:03:60:8a:ca:ba:56:4c:
bf:bc:a7:ce:bf:1a:6a:65:6d:f8:58:34:97:05:38:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:19:9C:7F:F5:94:34:76:D2:BF:61:DD:16:D3:6E:70:A1:8A:7F:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/eaf1b7d0-04a1-3891-a337-db63b782f690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.139.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:ee:d1:9f:e9:97:0e:3f:9a:a8:a7:d3:21:c6:d6:e7:63:8f:
1d:72:95:35:c3:ac:5a:a4:66:65:ac:a4:13:f0:76:67:65:63:
56:e2:43:8c:4a:0d:3f:48:6c:b7:a6:df:86:ef:10:80:54:97:
45:26:80:cc:41:6a:bc:3b:8c:39:22:2c:0c:90:b8:17:73:90:
37:3d:cd:d5:d0:2d:05:fd:fb:bc:57:51:96:55:a2:ad:de:7e:
fa:7f:f4:47:88:5b:bb:c9:7a:ba:fc:93:13:ed:6b:a7:41:a8:
fa:96:9e:3e:9e:9a:71:1a:a4:af:9a:0d:bc:a2:14:39:a2:30:
b1:98:b3:88:3e:f3:80:93:98:71:ae:1f:d5:96:fa:f0:66:5d:
3f:6e:1d:b6:6f:99:05:b8:1b:d3:f0:ba:6a:ab:b7:ac:e7:3b:
b8:86:6f:1d:2a:24:c4:cf:0e:d4:1a:48:05:a2:7f:95:2e:f6:
6a:a1:97:fc:01:cb:25:4e:07:f6:b7:60:75:61:cf:a1:82:ea:
cc:d3:0e:ad:ee:1a:3c:db:de:fc:8d:77:cf:84:de:3e:67:8d:
47:f7:aa:42:98:53:c8:19:9e:84:5e:f4:a9:db:6c:99:a0:5d:
cf:b9:7b:6e:4f:90:7c:54:0d:1f:b1:a6:73:98:27:f2:7b:e7:
a2:32:fa:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnrPCAaJlluPyotcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YzVmOTNiZTAtYWI2ZC00MWVlLWFkNjgtNWJjMGJiMDUxMDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNeYlNDkvUpJwgIaCq1Ie0FVkC5WbCVP5T3l
gp+1rmIsf44rP6NB/88GhbUTCLl9pI7GHc5jF0SBiEQFZKmcrx/VqZUSf1JLr1et
5d3T2o7IdAr8fbpjJNaWPLEb9QHiwlg9el19PZT0bYl91E9hXDHvA4Nqktwa6AWO
PE80DLSEOw2nHlsS2ztKsvhFjfgXFOe7QahwAT6Jvq8nO7peU/RDpr9VYKlX+0+7
Ob/LeiHL2sl0y5HjUrB06OXnF9qVTNgPPlhlDOuFrmiwGdddo1AYjyFcEuMKfX1n
T/6Pg3s/vSQCqJ4sIQNgisq6Vky/vKfOvxpqZW34WDSXBThIXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEsZnH/1lDR20r9h3RbTbnChin9YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWFmMWI3ZDAtMDRhMS0z
ODkxLWEzMzctZGI2M2I3ODJmNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIosAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAju0Z/plw4/mqin0yHG1udjjx1ylTXDrFqkZmWspBPwdmdlY1biQ4xK
DT9IbLem34bvEIBUl0UmgMxBarw7jDkiLAyQuBdzkDc9zdXQLQX9+7xXUZZVoq3e
fvp/9EeIW7vJerr8kxPta6dBqPqWnj6emnEapK+aDbyiFDmiMLGYs4g+84CTmHGu
H9WW+vBmXT9uHbZvmQW4G9Pwumqrt6znO7iGbx0qJMTPDtQaSAWif5Uu9mqhl/wB
yyVOB/a3YHVhz6GC6szTDq3uGjzb3vyNd8+E3j5njUf3qkKYU8gZnoRe9KnbbJmg
Xc+5e25PkHxUDR+xpnOYJ/J756Iy+og=
-----END CERTIFICATE-----
Generated at Sat May 10 14:35:52 2025 by rpki-client