Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f053d929-f5f7-39cb-a366-888ae5441a7e.roa
File: f053d929-f5f7-39cb-a366-888ae5441a7e.roa (raw, json)
Hash identifier: ysRz0K8mLGfXdU3/gNmEaJYGbXWIkdYSkZUP4W3WQrc=
Subject key identifier: F0:DA:76:02:3A:35:C4:23:81:9C:D9:01:D0:25:AA:71:B9:C2:9B:B9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A14B7C08A7342C04BB2F780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f053d929-f5f7-39cb-a366-888ae5441a7e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.108.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:b7:c0:8a:73:42:c0:4b:b2:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3ed71378-1be9-4599-8d68-23a8792fadfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:13:8d:99:8a:a4:ba:4b:84:a5:1a:3e:6d:
8b:42:1b:4b:ec:09:9b:b0:ab:ce:d9:a7:ec:72:09:
42:63:ba:ac:7f:9e:fb:8c:52:70:0a:22:1f:33:03:
02:eb:45:d6:9c:ce:8b:2d:30:7e:a8:a2:fe:8a:1b:
bb:6c:5e:37:f5:29:00:be:29:fc:ca:02:39:a3:62:
40:6a:14:97:6c:8f:6d:50:4e:3b:3d:1b:c7:db:29:
24:08:b7:06:7f:6a:c5:e4:6d:e8:52:d2:e6:b2:59:
92:b1:c3:ae:c9:a5:6d:35:df:f1:d2:17:8e:99:77:
b3:f1:1a:cf:16:a3:4c:1f:ee:11:5a:51:bc:b0:62:
73:f2:36:45:b4:58:d7:15:7b:bd:ba:98:0d:10:99:
10:71:8a:d9:ea:72:8c:70:5f:42:4f:a5:14:48:67:
e9:64:41:87:3e:a8:42:c7:82:c7:ed:58:eb:97:ec:
95:11:75:c2:38:02:d7:af:e7:af:c1:ec:ac:fa:98:
42:73:c2:f1:61:4a:a6:4a:e6:2b:19:21:02:82:14:
1b:02:fc:ab:e5:bc:f1:4e:e2:48:d4:f7:47:c0:ad:
b6:87:e7:98:04:b5:14:2b:8c:93:df:fe:e7:ac:b2:
a2:a9:7c:ec:e6:39:43:a2:6c:81:cb:39:35:85:69:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DA:76:02:3A:35:C4:23:81:9C:D9:01:D0:25:AA:71:B9:C2:9B:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f053d929-f5f7-39cb-a366-888ae5441a7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.108.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:be:4b:94:7c:1a:55:f5:51:27:23:34:94:52:ad:5a:1b:c6:
ae:13:7f:5d:ee:ba:c2:a2:71:ab:47:f7:9c:75:7e:6c:8d:ed:
70:91:97:30:53:48:6e:5f:8e:a3:7e:e7:56:6a:0f:73:6a:f5:
19:07:d9:9e:3a:19:48:e1:69:bb:b7:42:01:d8:6e:f4:c4:4d:
be:bc:7f:8c:8a:f4:0c:c6:19:10:c9:ba:af:7e:c7:c2:eb:fc:
e2:69:76:c8:81:59:24:34:a1:bc:ed:4a:d4:5a:a7:2b:d1:7e:
3a:4f:98:51:98:f1:ff:44:66:d8:73:2b:72:e2:b0:13:56:c1:
e6:60:e0:d0:16:8d:18:2c:9a:53:f5:63:92:34:4b:04:5d:ae:
67:74:40:32:48:5e:ef:b2:4f:b3:e8:59:7b:f7:61:15:c4:26:
8f:97:4a:39:6e:f5:25:07:1a:27:8c:e7:f1:9b:58:e8:c4:16:
e7:0b:90:68:3f:0e:ef:cd:c6:f2:eb:97:b7:90:a3:69:27:56:
d2:3a:2b:47:fc:75:1f:b6:94:a2:01:6d:a5:8f:ad:d3:23:0c:
3f:d5:63:e6:ce:0a:05:22:80:db:31:27:8f:98:a0:ea:25:fe:
7e:28:c0:5d:7c:d9:be:be:16:7b:4b:86:93:a5:fe:4f:8e:43:
c9:55:6c:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFLfAinNCwEuy94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
M2VkNzEzNzgtMWJlOS00NTk5LThkNjgtMjNhODc5MmZhZGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAATjZmKpLpLhKUaPm2LQhtL7AmbsKvO2afs
cglCY7qsf577jFJwCiIfMwMC60XWnM6LLTB+qKL+ihu7bF439SkAvin8ygI5o2JA
ahSXbI9tUE47PRvH2ykkCLcGf2rF5G3oUtLmslmSscOuyaVtNd/x0heOmXez8RrP
FqNMH+4RWlG8sGJz8jZFtFjXFXu9upgNEJkQcYrZ6nKMcF9CT6UUSGfpZEGHPqhC
x4LH7Vjrl+yVEXXCOALXr+evweys+phCc8LxYUqmSuYrGSECghQbAvyr5bzxTuJI
1PdHwK22h+eYBLUUK4yT3/7nrLKiqXzs5jlDomyByzk1hWn/DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPDadgI6NcQjgZzZAdAlqnG5wpu5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjA1M2Q5MjktZjVmNy0z
OWNiLWEzNjYtODg4YWU1NDQxYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImxwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI2+S5R8GlX1UScjNJRSrVobxq4Tf13uusKicatH95x1fmyN7XCRlzBT
SG5fjqN+51ZqD3Nq9RkH2Z46GUjhabu3QgHYbvTETb68f4yK9AzGGRDJuq9+x8Lr
/OJpdsiBWSQ0obztStRapyvRfjpPmFGY8f9EZthzK3LisBNWweZg4NAWjRgsmlP1
Y5I0SwRdrmd0QDJIXu+yT7PoWXv3YRXEJo+XSjlu9SUHGieM5/GbWOjEFucLkGg/
Du/NxvLrl7eQo2knVtI6K0f8dR+2lKIBbaWPrdMjDD/VY+bOCgUigNsxJ4+YoOol
/n4owF182b6+FntLhpOl/k+OQ8lVbBc=
-----END CERTIFICATE-----
Generated at Sat May 10 19:05:16 2025 by rpki-client