Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3a836d0-a6f3-3aff-a0d8-8c742c5fbcac.roa
File: f3a836d0-a6f3-3aff-a0d8-8c742c5fbcac.roa (raw, json)
Hash identifier: 6a2qxLZ5i3V1lSa3fraTd5zgzk8rL5ZKikVexttD6xc=
Subject key identifier: 89:C3:51:04:44:98:9D:CD:17:AC:7E:6A:69:6F:EB:50:E8:05:CE:37
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A19516E45EA053CD09B0900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3a836d0-a6f3-3aff-a0d8-8c742c5fbcac.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.140.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:19:51:6e:45:ea:05:3c:d0:9b:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f096c71b-f4d5-44aa-b10e-c528264a459b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9f:b8:f4:5e:6f:ea:27:c6:d0:35:88:03:9d:
6b:7c:66:20:42:bd:97:c8:e8:c1:da:2c:c9:12:f6:
6d:3c:af:87:d9:bd:3a:5d:9e:df:1c:ac:97:eb:cd:
9e:ec:07:4e:55:ba:f2:e6:75:25:5c:17:30:dd:5b:
9f:7c:1b:ec:13:3a:c2:e8:6a:d9:a1:86:4b:d4:60:
75:8d:6c:2c:b2:11:8f:35:1a:51:4a:57:34:61:44:
2b:61:9b:8a:c0:9a:97:74:22:a8:b8:72:0e:c2:be:
ca:98:e9:c2:81:26:23:d6:a2:6c:d2:76:1a:ed:63:
5c:14:41:11:ad:5e:ca:8b:08:78:b8:a1:2d:76:75:
29:49:68:18:9d:c2:14:09:07:7d:6d:04:ef:07:c3:
99:88:85:be:12:0f:3e:44:37:59:ab:36:9d:fb:ff:
58:a8:58:2e:da:63:a1:95:3d:57:48:1a:bd:65:8d:
87:f0:ca:6f:0b:37:ce:c6:b9:29:a8:ba:d9:96:23:
33:55:16:41:e5:24:97:da:18:76:ef:72:89:82:56:
fa:f2:dd:93:3c:55:22:aa:f4:52:87:77:0a:da:97:
2c:6d:1a:55:91:06:0b:5e:5e:01:88:9b:a3:91:e0:
6a:25:d0:31:57:0c:88:9e:7c:76:42:77:c7:5e:df:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C3:51:04:44:98:9D:CD:17:AC:7E:6A:69:6F:EB:50:E8:05:CE:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3a836d0-a6f3-3aff-a0d8-8c742c5fbcac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.140.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:ff:d6:61:a6:df:3d:de:0e:d5:3d:63:9c:d9:b2:49:f8:ee:
63:09:5b:d3:fd:56:62:e6:cf:1e:37:99:c9:6b:79:f8:b0:dd:
ee:fb:75:67:0d:d6:7a:7a:d4:5f:c7:45:12:7b:c0:c5:29:61:
d8:64:3c:77:81:1e:34:cf:f6:a3:64:fa:b4:d0:d7:1b:29:1c:
38:26:c2:e2:f0:57:2d:a7:f4:df:9f:35:09:b2:0f:f0:0a:a4:
4c:bd:6d:59:30:ea:61:34:08:ac:57:69:96:31:1e:17:ad:54:
30:16:d2:49:97:f5:a9:01:79:1a:8e:e8:fb:ea:8f:cf:bc:3f:
31:07:81:2a:d2:6b:ad:ce:7f:ef:ca:b8:9c:4f:b2:89:9d:9a:
af:f1:1c:d0:e9:16:98:0c:4a:dd:8a:34:e9:f7:17:26:1a:ec:
6d:54:c6:43:43:cf:38:9c:40:d2:01:e1:1e:59:5d:cb:bd:70:
9c:76:50:a2:c3:f8:6a:b6:b2:dc:5d:17:ac:fc:d6:81:e2:5c:
33:fa:12:9f:8d:a0:29:85:af:bb:53:59:1a:89:34:be:9d:08:
e0:d7:9c:2b:8c:e5:9b:36:ca:e8:b3:7d:0d:6f:d2:7e:a7:78:
73:4e:a9:e3:ed:6a:38:72:33:67:16:86:85:2a:b0:af:e2:8a:
f7:e2:83:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGVFuReoFPNCbCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjA5NmM3MWItZjRkNS00NGFhLWIxMGUtYzUyODI2NGE0NTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ+49F5v6ifG0DWIA51rfGYgQr2XyOjB2izJ
EvZtPK+H2b06XZ7fHKyX682e7AdOVbry5nUlXBcw3VuffBvsEzrC6GrZoYZL1GB1
jWwsshGPNRpRSlc0YUQrYZuKwJqXdCKouHIOwr7KmOnCgSYj1qJs0nYa7WNcFEER
rV7Kiwh4uKEtdnUpSWgYncIUCQd9bQTvB8OZiIW+Eg8+RDdZqzad+/9YqFgu2mOh
lT1XSBq9ZY2H8MpvCzfOxrkpqLrZliMzVRZB5SSX2hh273KJglb68t2TPFUiqvRS
h3cK2pcsbRpVkQYLXl4BiJujkeBqJdAxVwyInnx2QnfHXt/BCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFInDUQREmJ3NF6x+amlv61DoBc43MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjNhODM2ZDAtYTZmMy0z
YWZmLWEwZDgtOGM3NDJjNWZiY2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIowwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAz/1mGm3z3eDtU9Y5zZskn47mMJW9P9VmLmzx43mclrefiw3e77dWcN
1np61F/HRRJ7wMUpYdhkPHeBHjTP9qNk+rTQ1xspHDgmwuLwVy2n9N+fNQmyD/AK
pEy9bVkw6mE0CKxXaZYxHhetVDAW0kmX9akBeRqO6Pvqj8+8PzEHgSrSa63Of+/K
uJxPsomdmq/xHNDpFpgMSt2KNOn3FyYa7G1UxkNDzzicQNIB4R5ZXcu9cJx2UKLD
+Gq2stxdF6z81oHiXDP6Ep+NoCmFr7tTWRqJNL6dCODXnCuM5Zs2yuizfQ1v0n6n
eHNOqePtajhyM2cWhoUqsK/iivfigyE=
-----END CERTIFICATE-----
Generated at Sat May 10 11:21:05 2025 by rpki-client