Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7fbe47b-48d2-3af9-94d3-489c17617a9c.roa
File: f7fbe47b-48d2-3af9-94d3-489c17617a9c.roa (raw, json)
Hash identifier: heKcmI6Sy7BcSctli5eAkNayZEsTBqacR2yE/cxyWes=
Subject key identifier: 65:13:6B:7E:56:46:69:2F:D9:19:74:4B:30:81:1B:99:1A:C9:88:EE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A9CBFAA513CF0C4AE5B0C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7fbe47b-48d2-3af9-94d3-489c17617a9c.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.124.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a9:cb:fa:a5:13:cf:0c:4a:e5:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=2d4777f1-ab46-4880-a6d4-e867784cce61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:0e:56:a3:72:c8:95:50:29:92:61:04:bf:
81:4f:31:e1:b3:14:94:4c:7d:1a:83:51:f3:ed:fa:
c0:00:04:07:61:15:81:e7:a3:68:d3:f7:38:95:c5:
e5:fd:60:a7:8d:4c:0f:08:cd:f5:75:ce:c3:d1:e1:
4c:93:06:03:b9:44:7a:dd:86:3a:72:92:5c:82:33:
e9:b3:1a:7a:e8:ff:8c:8a:9a:24:80:15:26:05:eb:
6b:f0:48:e7:f4:30:5d:ad:07:3e:18:68:93:fb:f1:
3f:72:4a:53:02:f1:20:ad:e4:b2:db:21:55:48:c5:
5a:5e:61:7a:35:c3:80:3e:57:76:cc:3e:64:da:14:
a5:46:d6:bd:49:df:6d:c1:81:10:b3:c8:48:d7:0f:
27:40:23:10:be:59:8c:e8:6a:43:e6:04:3a:b4:7d:
87:ec:13:03:6f:48:8d:cc:e0:d4:55:bd:bc:5c:c6:
02:3c:cc:77:22:87:95:30:73:a3:65:aa:b2:09:7b:
a2:dd:50:a6:81:5f:26:76:81:fa:17:25:a4:8b:3a:
22:76:41:fc:fa:b4:bd:36:2e:13:eb:eb:76:fd:26:
5b:17:aa:3d:5d:11:2d:1a:3b:83:69:f3:20:b6:5d:
24:ad:16:a2:cc:66:e3:86:21:4e:7a:4d:48:fe:f5:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:13:6B:7E:56:46:69:2F:D9:19:74:4B:30:81:1B:99:1A:C9:88:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7fbe47b-48d2-3af9-94d3-489c17617a9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.124.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:41:01:b5:44:ef:2f:44:e2:88:2e:07:f8:54:a7:94:0a:e3:
0d:5c:cf:c2:ad:d0:17:3f:32:b6:b7:17:cf:7a:07:7d:bd:62:
bf:40:34:ea:d0:3e:bb:d5:8b:8d:a2:38:44:1f:be:7d:b9:40:
5e:28:d4:e4:02:82:11:bf:6f:20:df:3b:22:ce:25:a7:98:09:
f6:df:a4:a3:cf:47:14:00:57:ba:94:12:5d:f1:42:64:93:79:
5c:72:45:c1:0c:ae:85:38:8b:90:4d:4d:c7:da:91:0c:7d:0e:
0f:7e:17:9e:b0:79:ff:89:61:3d:99:87:5a:7e:1b:65:a0:d5:
bd:89:cd:cd:7c:9a:a4:d0:71:60:01:83:08:77:ea:14:37:69:
b5:cb:91:69:14:2f:89:ed:1c:c7:f9:f4:24:c1:04:39:84:50:
ed:f9:b3:e2:f1:e0:58:a6:18:80:8f:5f:5f:8d:11:77:13:83:
88:ea:32:01:48:e9:9d:a1:e7:1a:cd:ff:aa:bc:17:6d:9e:fb:
fe:87:2e:30:1f:94:6e:1f:f6:32:8a:75:e0:ca:ff:ab:b9:02:
4f:03:c2:99:a9:7c:9e:c7:bf:39:14:4e:53:f7:37:1d:ff:86:
c8:8b:12:18:6b:06:85:2a:b6:42:51:73:d7:f1:70:f0:b3:ee:
32:20:b6:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqcv6pRPPDErlsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MmQ0Nzc3ZjEtYWI0Ni00ODgwLWE2ZDQtZTg2Nzc4NGNjZTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDMOVqNyyJVQKZJhBL+BTzHhsxSUTH0ag1Hz
7frAAAQHYRWB56No0/c4lcXl/WCnjUwPCM31dc7D0eFMkwYDuUR63YY6cpJcgjPp
sxp66P+MipokgBUmBetr8Ejn9DBdrQc+GGiT+/E/ckpTAvEgreSy2yFVSMVaXmF6
NcOAPld2zD5k2hSlRta9Sd9twYEQs8hI1w8nQCMQvlmM6GpD5gQ6tH2H7BMDb0iN
zODUVb28XMYCPMx3IoeVMHOjZaqyCXui3VCmgV8mdoH6FyWkizoidkH8+rS9Ni4T
6+t2/SZbF6o9XREtGjuDafMgtl0krRaizGbjhiFOek1I/vWzJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGUTa35WRmkv2Rl0SzCBG5kayYjuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjdmYmU0N2ItNDhkMi0z
YWY5LTk0ZDMtNDg5YzE3NjE3YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInxwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADdBAbVE7y9E4oguB/hUp5QK4w1cz8Kt0Bc/Mra3F896B329Yr9ANOrQ
PrvVi42iOEQfvn25QF4o1OQCghG/byDfOyLOJaeYCfbfpKPPRxQAV7qUEl3xQmST
eVxyRcEMroU4i5BNTcfakQx9Dg9+F56wef+JYT2Zh1p+G2Wg1b2Jzc18mqTQcWAB
gwh36hQ3abXLkWkUL4ntHMf59CTBBDmEUO35s+Lx4FimGICPX1+NEXcTg4jqMgFI
6Z2h5xrN/6q8F22e+/6HLjAflG4f9jKKdeDK/6u5Ak8DwpmpfJ7HvzkUTlP3Nx3/
hsiLEhhrBoUqtkJRc9fxcPCz7jIgto8=
-----END CERTIFICATE-----
Generated at Sat May 10 11:26:36 2025 by rpki-client