Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f5ffbd6-7c7d-3781-ac8b-d3325110ff84.roa
File: 8f5ffbd6-7c7d-3781-ac8b-d3325110ff84.roa (raw, json)
Hash identifier: JuDHjIdiBeXJ9e9IXtjqk8kY49expgGRMVaWB/XwnW8=
Subject key identifier: A6:FE:57:D3:55:BA:03:DC:CB:1E:EF:D0:91:50:D8:A2:D5:49:D5:F6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AF1767459044B7B4776400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f5ffbd6-7c7d-3781-ac8b-d3325110ff84.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.176.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:af:17:67:45:90:44:b7:b4:77:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=470d068e-7795-40de-bdb9-11dadad3399e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:1d:42:02:fc:18:d3:9f:d8:34:57:70:90:
00:92:79:a8:f1:c5:c9:44:58:84:58:66:cd:67:d0:
e2:6b:a9:17:40:27:83:36:bc:34:47:b7:dc:3e:e4:
2d:64:a8:db:3d:08:2e:2d:76:3c:f6:2d:09:fb:d2:
d6:76:b4:3d:e9:5b:47:f9:c1:3c:6b:2e:7c:e5:59:
1a:2f:31:03:c5:02:d2:54:6a:cd:ad:4c:4b:a7:b9:
e7:dc:18:e8:4f:3f:48:c9:b8:b2:59:7a:e6:dd:fe:
35:9e:95:99:33:22:5c:d7:46:6e:69:ee:80:4b:6e:
8d:db:ff:dd:e9:b7:d4:48:d5:cc:60:ec:50:be:ec:
fc:ee:b9:22:20:c3:9c:67:85:3f:78:f9:37:34:44:
6e:df:1a:45:e9:f0:b8:b3:d8:d9:5b:fc:c0:50:64:
4c:f7:0c:4c:8d:0c:d0:c2:77:50:ed:34:e4:4d:5f:
e3:87:39:59:3c:62:f3:02:d0:77:3b:75:24:e8:fc:
5e:d9:bf:23:27:a4:bc:cc:79:7f:08:d4:c4:0f:00:
f1:e8:25:f0:c3:e5:ef:de:2c:43:5e:01:40:2b:97:
64:ba:ce:ef:19:78:05:3a:86:eb:0b:cb:e5:e4:ad:
a8:7b:89:61:9e:38:46:e3:c7:25:a6:9c:f6:26:3a:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:57:D3:55:BA:03:DC:CB:1E:EF:D0:91:50:D8:A2:D5:49:D5:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f5ffbd6-7c7d-3781-ac8b-d3325110ff84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.176.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:28:52:ee:28:73:33:f6:8f:f4:f8:b7:21:f3:6f:58:37:d1:
26:3c:3d:03:31:b0:d6:0f:6c:b3:05:f7:4b:e3:fa:d7:20:c6:
2d:fc:61:f1:7a:7e:11:d3:ae:2b:79:69:56:e8:85:4c:d4:7f:
04:b7:0a:31:37:ee:ee:e1:db:71:c0:3d:8d:1c:cb:49:f9:22:
03:ef:8e:86:06:42:91:d5:c1:89:db:b0:3e:68:82:8e:6d:85:
85:18:29:fa:90:4e:47:ac:40:41:be:e6:f7:7c:0e:4f:67:70:
18:a4:34:71:67:f6:71:a9:58:b3:63:51:2d:11:b9:19:e9:63:
22:5f:b5:8a:ea:9a:64:30:3d:22:54:90:49:11:6e:f9:ca:4a:
52:99:9d:ef:68:03:80:c6:51:9f:f4:c9:bc:d9:6d:32:14:80:
f3:d5:bc:dc:61:e6:da:56:bc:c3:a8:c2:44:ab:37:f7:d2:fa:
fe:8f:af:c5:4a:ed:76:cb:ca:ec:9f:1e:22:cd:12:12:8a:6b:
5e:ed:b1:95:d6:52:11:5d:08:70:83:ac:59:75:bc:55:46:dd:
55:4b:d1:f6:6c:7f:18:3c:50:31:13:74:ba:b4:5a:76:36:2f:
54:0e:7d:99:41:66:46:ed:23:db:36:f6:0b:38:44:ae:d4:a3:
07:19:bd:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnrxdnRZBEt7R3ZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NDcwZDA2OGUtNzc5NS00MGRlLWJkYjktMTFkYWRhZDMzOTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDgdQgL8GNOf2DRXcJAAknmo8cXJRFiEWGbN
Z9Dia6kXQCeDNrw0R7fcPuQtZKjbPQguLXY89i0J+9LWdrQ96VtH+cE8ay585Vka
LzEDxQLSVGrNrUxLp7nn3BjoTz9IybiyWXrm3f41npWZMyJc10Zuae6AS26N2//d
6bfUSNXMYOxQvuz87rkiIMOcZ4U/ePk3NERu3xpF6fC4s9jZW/zAUGRM9wxMjQzQ
wndQ7TTkTV/jhzlZPGLzAtB3O3Uk6Pxe2b8jJ6S8zHl/CNTEDwDx6CXww+Xv3ixD
XgFAK5dkus7vGXgFOobrC8vl5K2oe4lhnjhG48clppz2JjoYKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKb+V9NVugPcyx7v0JFQ2KLVSdX2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGY1ZmZiZDYtN2M3ZC0z
NzgxLWFjOGItZDMzMjUxMTBmZjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkoUu4oczP2j/T4tyHzb1g30SY8PQMxsNYPbLMF90vj+tcgxi38YfF6
fhHTrit5aVbohUzUfwS3CjE37u7h23HAPY0cy0n5IgPvjoYGQpHVwYnbsD5ogo5t
hYUYKfqQTkesQEG+5vd8Dk9ncBikNHFn9nGpWLNjUS0RuRnpYyJftYrqmmQwPSJU
kEkRbvnKSlKZne9oA4DGUZ/0ybzZbTIUgPPVvNxh5tpWvMOowkSrN/fS+v6Pr8VK
7XbLyuyfHiLNEhKKa17tsZXWUhFdCHCDrFl1vFVG3VVL0fZsfxg8UDETdLq0WnY2
L1QOfZlBZkbtI9s29gs4RK7UowcZvfI=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:44 2023 by rpki-client on console-fra.rpki-client.org