Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1cefae5b-38d3-336a-b1c7-581d1342cbb4.roa
File: 1cefae5b-38d3-336a-b1c7-581d1342cbb4.roa (raw, json)
Hash identifier: S1gEW3OE5araAWXxCvoSJcWPbMnsxwit8kc9L/w7lbQ=
Subject key identifier: 97:3F:1D:C9:5D:6A:D4:10:4A:02:43:81:09:FD:9B:71:91:63:50:6B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583B815D3277A7B3C32C569AEF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1cefae5b-38d3-336a-b1c7-581d1342cbb4.roa
Signing time: Wed 06 Oct 2021 04:00:00 +0000
ROA not before: Wed 06 Oct 2021 04:00:00 +0000
ROA not after: Mon 08 Jan 2024 05:00:00 +0000
asID: 396982
IP address blocks: 34.164.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:81:5d:32:77:a7:b3:c3:2c:56:9a:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 6 04:00:00 2021 GMT
Not After : Jan 8 05:00:00 2024 GMT
Subject: CN=0b0eda3e-7ecd-4843-b360-6f9b5f21e839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4e:23:5a:ff:6e:e9:1c:42:e3:95:69:06:5f:
18:57:68:c8:9c:3d:81:fb:1f:01:19:01:89:d2:ae:
f8:c4:7d:88:25:0e:67:86:27:70:7b:07:4b:4a:ec:
4f:01:03:ef:d1:8a:13:79:ac:cc:3d:12:3d:60:08:
ce:eb:6f:99:81:5d:85:de:c8:30:40:f8:c5:88:75:
0d:00:0f:ed:fd:c0:44:80:fd:02:32:a7:10:40:78:
6f:49:f1:4f:10:9a:82:bb:7f:f1:dc:8f:6f:93:03:
2d:07:b2:ce:15:b3:56:e4:cb:73:42:08:cd:c9:3c:
43:ac:a3:cd:58:1f:59:fc:3b:2a:8b:06:5a:f1:00:
11:1b:97:a1:52:86:74:05:10:ee:df:e5:1c:ad:a1:
7d:69:b0:4f:2d:c9:46:45:e7:19:0f:ea:29:59:7d:
36:f4:c9:24:bc:f9:ad:ad:af:eb:4e:cc:70:27:23:
7b:2b:74:00:53:41:7f:ac:a0:e3:8e:ef:4c:80:ad:
5b:22:ba:d0:01:fd:6d:0b:27:24:78:96:f4:fb:70:
bc:8a:3d:98:5e:1d:ad:f8:3b:a2:5f:57:4d:d8:61:
aa:53:50:87:25:25:fc:81:43:3b:3f:c5:4b:3a:f3:
8a:00:09:e8:90:e7:eb:d1:22:fe:a1:8d:4d:52:24:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3F:1D:C9:5D:6A:D4:10:4A:02:43:81:09:FD:9B:71:91:63:50:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1cefae5b-38d3-336a-b1c7-581d1342cbb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.164.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:08:b6:3a:c4:c8:7d:29:88:f9:9c:5b:f3:0f:5c:38:11:1f:
0b:4f:95:2d:d8:35:de:45:43:6b:6e:7c:59:c6:ad:04:41:7d:
f6:50:c1:b6:d7:8b:74:38:ee:a9:ae:b5:b9:6e:54:73:29:96:
c1:10:2a:b1:6b:af:c8:55:a2:cb:d1:59:75:64:65:60:e8:2d:
9b:d8:f3:7b:5e:d3:25:2a:45:e7:cb:ee:b7:6e:62:91:64:03:
c9:36:01:60:7f:76:c3:d8:da:50:9b:a7:f9:fc:3b:ac:8b:13:
b8:b2:e7:95:17:ea:ee:75:1c:c4:48:12:ec:2c:c2:9d:c5:0d:
0f:f8:41:ce:86:13:c0:c5:b3:61:51:b3:1e:63:da:ca:75:bc:
8d:f5:72:47:7b:41:85:b2:be:2e:e9:46:1a:d8:b4:0d:e5:44:
76:31:4d:db:16:fc:c6:9d:32:81:5b:22:a0:4d:33:0d:27:d4:
a0:b1:35:e9:1e:61:3d:1b:c5:fd:a2:d3:84:df:1d:87:85:77:
cd:0a:48:78:37:cd:5e:cb:aa:09:8c:a6:8e:d3:3c:1a:d8:7f:
d8:49:92:e8:d0:4b:d9:ef:a5:b0:88:2e:53:ce:27:41:3d:ad:
5b:85:d8:a3:c4:73:5f:93:49:48:c6:c9:20:1d:8e:c6:2e:9c:
50:e7:bd:b3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDuBXTJ3p7PDLFaa74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMTAwNjA0MDAwMFoXDTI0MDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
MGIwZWRhM2UtN2VjZC00ODQzLWIzNjAtNmY5YjVmMjFlODM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk4jWv9u6RxC45VpBl8YV2jInD2B+x8BGQGJ
0q74xH2IJQ5nhidwewdLSuxPAQPv0YoTeazMPRI9YAjO62+ZgV2F3sgwQPjFiHUN
AA/t/cBEgP0CMqcQQHhvSfFPEJqCu3/x3I9vkwMtB7LOFbNW5MtzQgjNyTxDrKPN
WB9Z/DsqiwZa8QARG5ehUoZ0BRDu3+UcraF9abBPLclGRecZD+opWX029MkkvPmt
ra/rTsxwJyN7K3QAU0F/rKDjju9MgK1bIrrQAf1tCyckeJb0+3C8ij2YXh2t+Dui
X1dN2GGqU1CHJSX8gUM7P8VLOvOKAAnokOfr0SL+oY1NUiRRlwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJc/HcldatQQSgJDgQn9m3GRY1BrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWNlZmFlNWItMzhkMy0z
MzZhLWIxYzctNTgxZDEzNDJjYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcgi2OsTIfSmI+Zxb8w9cOBEfC0+VLdg13kVDa258WcatBEF99lDBtteL
dDjuqa61uW5UcymWwRAqsWuvyFWiy9FZdWRlYOgtm9jze17TJSpF58vut25ikWQD
yTYBYH92w9jaUJun+fw7rIsTuLLnlRfq7nUcxEgS7CzCncUND/hBzoYTwMWzYVGz
HmPaynW8jfVyR3tBhbK+LulGGti0DeVEdjFN2xb8xp0ygVsioE0zDSfUoLE16R5h
PRvF/aLThN8dh4V3zQpIeDfNXsuqCYymjtM8Gth/2EmS6NBL2e+lsIguU84nQT2t
W4XYo8RzX5NJSMbJIB2Oxi6cUOe9sw==
-----END CERTIFICATE-----
Generated at Mon Jan 8 05:55:11 2024 by rpki-client on console-fra.rpki-client.org