Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd667d1e-9077-3b2d-b58d-8744be955fde.roa
File: fd667d1e-9077-3b2d-b58d-8744be955fde.roa (raw, json)
Hash identifier: jx33CAQ0P2KCWoOume94vGmz+77YQ5kkCgN1Mh9oXXw=
Subject key identifier: 14:48:A0:19:B5:18:6C:51:06:CE:0D:4D:CC:46:D1:63:48:09:BB:4C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A185E9020B7A461DB3123D0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd667d1e-9077-3b2d-b58d-8744be955fde.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.122.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:5e:90:20:b7:a4:61:db:31:23:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=00c47cc2-84fb-4c72-9e1a-0443d459bb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:61:de:0b:7e:8b:08:ec:a8:3a:90:9d:d3:
7f:6b:f1:cc:c3:4a:b5:95:33:38:66:26:f0:5a:22:
b6:99:95:ab:9e:79:7a:10:04:18:c1:3b:8b:52:fc:
9c:35:39:23:28:9d:0e:56:fc:f5:53:dd:06:4a:55:
33:08:bf:0c:ef:ec:4b:dc:7f:94:04:54:e9:b4:b6:
7b:0f:7c:77:33:4f:aa:44:69:da:9d:e3:a0:3f:52:
ad:59:57:0b:80:90:5f:c0:cc:68:1a:84:59:1f:5a:
ce:7d:1a:74:83:78:6e:c7:30:86:76:4a:10:24:c8:
83:2d:d0:04:b4:e3:2f:fd:eb:0d:1a:65:a0:a5:3d:
47:6f:16:dd:63:21:35:2b:cf:fc:b1:1a:4f:eb:bb:
ca:e8:06:21:4f:8f:9c:11:5e:06:29:9b:3e:ed:54:
9a:cd:59:5f:70:48:7a:bc:8b:04:61:1c:ed:f8:c6:
43:11:07:89:d3:da:87:5f:3b:1e:55:44:07:7b:14:
d6:48:ca:e0:04:45:39:47:7b:81:c4:92:4f:85:d7:
27:c2:1e:69:e2:2f:25:af:18:fb:6b:de:b8:3d:2b:
ac:37:e0:1d:93:bf:08:80:89:7f:b2:19:4e:52:d8:
95:17:cd:98:79:61:55:e3:ed:ca:fa:f9:86:c1:52:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:48:A0:19:B5:18:6C:51:06:CE:0D:4D:CC:46:D1:63:48:09:BB:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd667d1e-9077-3b2d-b58d-8744be955fde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.122.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:4d:4f:c5:75:76:72:dc:39:cd:59:6f:f7:8f:bf:0b:80:59:
b8:e4:4d:20:51:10:bf:57:35:a1:42:3a:f0:22:70:cc:a9:2c:
b4:83:73:11:c1:b9:17:ca:5a:90:61:9a:3d:48:d2:35:a7:12:
b1:0b:99:d8:ab:8a:3e:c0:cf:a7:c1:54:90:6a:43:9e:74:e1:
ad:34:99:28:09:94:fb:b8:e8:40:b5:f1:b3:45:7e:5a:18:4e:
f0:c2:b1:76:82:a9:55:e5:05:70:f6:5f:1b:66:e2:e6:b7:ee:
b3:5c:5a:d9:d6:18:e9:7a:54:9c:7f:fb:49:b1:e4:30:cf:a1:
b5:0a:7d:73:aa:6d:8e:d5:31:64:85:e8:60:1a:5a:01:7c:83:
45:b8:af:63:c0:1d:05:d7:15:b3:dd:75:95:2a:66:81:ef:24:
20:14:e1:28:7c:d9:e3:fe:14:b0:01:6a:cb:4f:53:04:c8:fa:
8d:ef:f6:ff:62:cf:ed:69:57:bb:65:a8:e5:2a:45:24:31:0c:
8a:cf:90:3e:b6:ae:08:52:ba:1b:28:92:08:74:f5:44:ad:6d:
a5:ce:ce:2f:24:93:ba:35:80:c8:1d:e4:0e:f2:5e:34:52:17:
ab:e6:3a:f3:c5:66:e8:55:e9:db:f2:fb:d5:14:a4:39:f4:e7:
bd:9b:86:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGF6QILekYdsxI9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDBjNDdjYzItODRmYi00YzcyLTllMWEtMDQ0M2Q0NTliYjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG9h3gt+iwjsqDqQndN/a/HMw0q1lTM4Zibw
WiK2mZWrnnl6EAQYwTuLUvycNTkjKJ0OVvz1U90GSlUzCL8M7+xL3H+UBFTptLZ7
D3x3M0+qRGnaneOgP1KtWVcLgJBfwMxoGoRZH1rOfRp0g3huxzCGdkoQJMiDLdAE
tOMv/esNGmWgpT1HbxbdYyE1K8/8sRpP67vK6AYhT4+cEV4GKZs+7VSazVlfcEh6
vIsEYRzt+MZDEQeJ09qHXzseVUQHexTWSMrgBEU5R3uBxJJPhdcnwh5p4i8lrxj7
a964PSusN+Adk78IgIl/shlOUtiVF82YeWFV4+3K+vmGwVLbGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBRIoBm1GGxRBs4NTcxG0WNICbtMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmQ2NjdkMWUtOTA3Ny0z
YjJkLWI1OGQtODc0NGJlOTU1ZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInrgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdNT8V1dnLcOc1Zb/ePvwuAWbjkTSBREL9XNaFCOvAicMypLLSDcxHB
uRfKWpBhmj1I0jWnErELmdirij7Az6fBVJBqQ5504a00mSgJlPu46EC18bNFfloY
TvDCsXaCqVXlBXD2Xxtm4ua37rNcWtnWGOl6VJx/+0mx5DDPobUKfXOqbY7VMWSF
6GAaWgF8g0W4r2PAHQXXFbPddZUqZoHvJCAU4Sh82eP+FLABastPUwTI+o3v9v9i
z+1pV7tlqOUqRSQxDIrPkD62rghSuhsokgh09UStbaXOzi8kk7o1gMgd5A7yXjRS
F6vmOvPFZuhV6dvy+9UUpDn0572bhkY=
-----END CERTIFICATE-----
Generated at Sat May 10 14:44:45 2025 by rpki-client