Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0296793-29cb-3f54-a3d5-50c35c8ad701.roa
File: f0296793-29cb-3f54-a3d5-50c35c8ad701.roa (raw, json)
Hash identifier: aepgW2zBqW9b6MxldPvsL9HAZB0U6AGJ39s7kifWi9k=
Subject key identifier: A1:35:53:B2:9C:00:6F:6A:8D:E6:AD:D7:0E:E9:55:7A:7E:D8:D7:C8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0F5276B8BB040530E79380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0296793-29cb-3f54-a3d5-50c35c8ad701.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.103.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0f:52:76:b8:bb:04:05:30:e7:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fc1561a6-5a04-4393-a5e3-26d2ad5124a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:e5:c0:42:f0:cd:47:e6:25:d6:45:fe:92:
bf:13:9e:bd:bc:00:89:fc:12:99:0c:48:5f:15:01:
61:df:f6:d6:90:ef:d7:52:94:bd:b0:40:19:c6:64:
73:97:cc:e7:58:e3:12:79:e2:1a:55:a9:e3:69:0b:
5a:74:40:6c:db:cc:fc:95:38:07:e7:df:38:46:a5:
38:b4:f8:af:da:b3:7d:ba:fc:95:50:65:0a:27:3e:
dc:82:31:a4:eb:1c:c2:8d:93:8f:dd:5c:c7:a7:b3:
89:9f:71:20:70:88:d6:e9:a0:0a:d9:32:8c:30:04:
12:8d:bd:2a:14:7d:7f:fb:e9:55:76:f8:1b:af:0c:
80:a7:2b:b5:9c:72:47:ea:27:af:c1:63:72:d2:c5:
03:85:fe:94:95:27:f4:04:3a:19:f5:d3:01:c5:48:
13:96:db:94:89:43:70:c5:64:84:90:b5:dd:02:15:
a7:1d:bb:8e:8b:30:ef:f3:a4:98:d9:3f:ec:dc:60:
c8:23:2b:73:c2:af:70:9d:07:c6:26:e5:05:ae:56:
96:74:0c:b6:12:5e:67:3a:ed:3e:33:2c:91:61:01:
c4:2e:20:f0:b9:0e:a9:23:41:19:35:14:45:82:c5:
e8:59:0d:5a:35:f8:57:7d:7f:08:b2:70:e9:6b:ff:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:35:53:B2:9C:00:6F:6A:8D:E6:AD:D7:0E:E9:55:7A:7E:D8:D7:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0296793-29cb-3f54-a3d5-50c35c8ad701.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.103.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:aa:f9:eb:11:6a:fa:47:d8:a4:45:30:d5:dc:3b:01:06:e4:
50:40:51:51:ed:b9:43:d8:dd:3b:02:87:0c:9a:38:8f:98:1f:
4b:53:08:90:fc:af:fc:66:91:3a:92:ab:b0:5d:e5:1b:ab:f3:
8e:e9:9c:8f:0a:23:88:b4:74:c5:bf:32:8a:b3:fc:a0:a4:76:
2e:2c:a8:92:3d:55:0e:37:9b:b9:64:5c:1a:72:4c:a9:5b:fe:
fd:8b:71:97:11:59:3d:44:af:d4:3d:24:58:95:4e:3b:84:9a:
cf:57:a4:e5:c2:5e:fb:2d:f9:d2:d5:3f:73:8b:7a:59:55:68:
a5:66:cc:66:eb:07:f0:2c:c5:6f:fe:36:89:07:9c:15:38:27:
67:64:ab:ac:00:58:c6:2c:c8:22:be:bd:a2:d2:9b:63:0e:a0:
6b:02:f3:01:43:42:2c:42:49:93:0b:a1:ab:3e:ca:11:e8:7d:
53:5e:ed:fb:c4:6e:05:9b:e8:ea:ca:c2:f7:66:f5:55:5c:09:
e4:68:f3:4d:81:05:3b:e7:75:cc:c6:8c:90:4e:f5:84:9d:e1:
a2:b0:3c:b3:7c:56:58:f6:6d:5a:8e:de:f3:63:fa:f9:25:c9:
bb:63:96:97:83:20:03:0c:2b:d9:cc:cc:22:e5:b0:37:1b:e5:
3e:56:7c:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKD1J2uLsEBTDnk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmMxNTYxYTYtNWEwNC00MzkzLWE1ZTMtMjZkMmFkNTEyNGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLnlwELwzUfmJdZF/pK/E569vACJ/BKZDEhf
FQFh3/bWkO/XUpS9sEAZxmRzl8znWOMSeeIaVanjaQtadEBs28z8lTgH5984RqU4
tPiv2rN9uvyVUGUKJz7cgjGk6xzCjZOP3VzHp7OJn3EgcIjW6aAK2TKMMAQSjb0q
FH1/++lVdvgbrwyApyu1nHJH6ievwWNy0sUDhf6UlSf0BDoZ9dMBxUgTltuUiUNw
xWSEkLXdAhWnHbuOizDv86SY2T/s3GDIIytzwq9wnQfGJuUFrlaWdAy2El5nOu0+
MyyRYQHELiDwuQ6pI0EZNRRFgsXoWQ1aNfhXfX8IsnDpa//KHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKE1U7KcAG9qjeat1w7pVXp+2NfIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjAyOTY3OTMtMjljYi0z
ZjU0LWEzZDUtNTBjMzVjOGFkNzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImewMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6q+esRavpH2KRFMNXcOwEG5FBAUVHtuUPY3TsChwyaOI+YH0tTCJD8
r/xmkTqSq7Bd5Rur847pnI8KI4i0dMW/Moqz/KCkdi4sqJI9VQ43m7lkXBpyTKlb
/v2LcZcRWT1Er9Q9JFiVTjuEms9XpOXCXvst+dLVP3OLellVaKVmzGbrB/AsxW/+
NokHnBU4J2dkq6wAWMYsyCK+vaLSm2MOoGsC8wFDQixCSZMLoas+yhHofVNe7fvE
bgWb6OrKwvdm9VVcCeRo802BBTvndczGjJBO9YSd4aKwPLN8Vlj2bVqO3vNj+vkl
ybtjlpeDIAMMK9nMzCLlsDcb5T5WfBs=
-----END CERTIFICATE-----
Generated at Sun May 11 10:22:16 2025 by rpki-client