Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9cd1ae48-b28e-3b16-bc42-24894fc6ad8b.roa
File: 9cd1ae48-b28e-3b16-bc42-24894fc6ad8b.roa (raw, json)
Hash identifier: Gof4DgS1jarfj3og0DWGJxAGsAwsm9JpdSfmf/j0EXI=
Subject key identifier: E8:B8:D1:62:7D:6B:98:61:DF:30:27:60:FF:6D:33:1A:EB:BE:7F:B3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583A6A22F824FD01B4560F68DB00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9cd1ae48-b28e-3b16-bc42-24894fc6ad8b.roa
Signing time: Mon 28 Jun 2021 04:00:00 +0000
ROA not before: Mon 28 Jun 2021 04:00:00 +0000
ROA not after: Sat 30 Sep 2023 04:00:00 +0000
asID: 396982
IP address blocks: 34.155.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:6a:22:f8:24:fd:01:b4:56:0f:68:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 28 04:00:00 2021 GMT
Not After : Sep 30 04:00:00 2023 GMT
Subject: CN=48d6c7f5-cb47-488b-b5eb-f87f5d5206bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:4a:a2:a1:4e:f9:8e:08:15:61:2c:09:6c:
47:72:e6:da:b1:d1:a4:71:39:2a:94:d8:e4:ca:13:
f0:49:0e:21:48:ab:a3:47:cc:fd:9f:4b:b2:27:2a:
ae:e0:2a:6d:fc:79:52:44:03:d3:f3:86:b4:d9:4b:
2d:b7:51:29:83:78:51:89:7d:d2:86:12:fd:44:40:
3c:b6:38:c8:c5:25:ea:ad:b6:d0:8a:b2:34:7d:a3:
dd:cc:e9:88:3a:c0:78:89:3c:46:9a:83:c0:aa:d1:
ce:d3:fe:62:b7:9a:65:06:e9:0b:6a:59:04:04:c0:
37:c7:3b:6d:2c:d4:e8:2f:f3:9c:03:bd:71:41:17:
74:16:6b:80:0a:c1:b5:27:a4:1c:20:aa:a1:e2:0f:
f7:f9:fa:e0:6f:ea:04:d7:38:8c:4a:50:c0:42:78:
ff:c8:d9:d8:ed:97:be:89:93:d5:6c:50:3a:87:bb:
90:a8:48:8b:e9:87:f6:89:e4:36:9f:e0:71:09:39:
ea:22:69:ae:7f:a1:21:ea:7a:71:c6:33:fa:c1:8f:
13:3a:8b:5c:6e:9b:f0:f3:e8:3e:b9:45:ad:45:44:
dc:bf:f7:00:6f:dd:b3:e7:13:06:7a:2f:5e:68:dd:
94:89:e9:2d:a4:26:01:8b:a7:2f:a6:c9:40:27:40:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B8:D1:62:7D:6B:98:61:DF:30:27:60:FF:6D:33:1A:EB:BE:7F:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9cd1ae48-b28e-3b16-bc42-24894fc6ad8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.155.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f6:0f:8e:4d:0b:e2:92:9a:b3:df:b1:f9:1a:1b:a8:a8:c1:
9a:08:63:be:07:e7:41:62:a3:01:31:d3:a8:5a:a8:bb:57:6a:
e0:02:ff:b9:d5:ba:20:fd:92:a3:b0:41:6f:ae:32:a1:02:c1:
1a:70:2a:db:5d:d5:34:65:1f:1b:91:f0:60:49:d2:54:a8:e6:
ae:60:5f:86:0b:dc:cd:8b:df:78:c3:01:8d:e8:d6:48:ed:0d:
1d:17:d0:d9:18:e8:cf:07:af:b5:6b:01:74:ec:eb:fa:36:85:
b0:a5:cf:3a:94:60:64:a1:e5:46:d0:c3:cc:a6:5a:5b:0a:bc:
4e:1d:0c:eb:7d:d4:61:78:06:86:ea:43:48:ab:e3:f7:21:26:
7f:b5:ba:b9:4d:92:5f:02:59:9d:d4:6a:76:43:5f:d4:7b:98:
02:71:f3:f6:a1:7c:83:64:94:14:9e:a9:5a:3b:66:96:8f:09:
58:6c:ad:aa:d6:d8:2b:29:40:c7:db:f3:44:6a:9d:90:40:b5:
fd:ae:7b:6b:cb:3a:53:c9:74:f4:4d:b9:fa:67:14:9a:48:b4:
49:9a:aa:2b:8c:fe:36:87:a6:fd:5c:ae:73:d7:02:c6:f6:42:
52:a5:52:21:b5:4c:74:1c:79:0f:98:6e:74:e8:3c:36:95:a2:
46:4f:18:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDpqIvgk/QG0Vg9o2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDYyODA0MDAwMFoXDTIzMDkzMDA0MDAwMFowLzEtMCsGA1UEAxMk
NDhkNmM3ZjUtY2I0Ny00ODhiLWI1ZWItZjg3ZjVkNTIwNmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZxKoqFO+Y4IFWEsCWxHcubasdGkcTkqlNjk
yhPwSQ4hSKujR8z9n0uyJyqu4Cpt/HlSRAPT84a02Ustt1Epg3hRiX3ShhL9REA8
tjjIxSXqrbbQirI0faPdzOmIOsB4iTxGmoPAqtHO0/5it5plBukLalkEBMA3xztt
LNToL/OcA71xQRd0FmuACsG1J6QcIKqh4g/3+frgb+oE1ziMSlDAQnj/yNnY7Ze+
iZPVbFA6h7uQqEiL6Yf2ieQ2n+BxCTnqImmuf6Eh6npxxjP6wY8TOotcbpvw8+g+
uUWtRUTcv/cAb92z5xMGei9eaN2UiektpCYBi6cvpslAJ0Cz4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOi40WJ9a5hh3zAnYP9tMxrrvn+zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWNkMWFlNDgtYjI4ZS0z
YjE2LWJjNDItMjQ4OTRmYzZhZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAr2D45NC+KSmrPfsfkaG6iowZoIY74H50FiowEx06haqLtXauAC/7nV
uiD9kqOwQW+uMqECwRpwKttd1TRlHxuR8GBJ0lSo5q5gX4YL3M2L33jDAY3o1kjt
DR0X0NkY6M8Hr7VrAXTs6/o2hbClzzqUYGSh5UbQw8ymWlsKvE4dDOt91GF4Bobq
Q0ir4/chJn+1urlNkl8CWZ3UanZDX9R7mAJx8/ahfINklBSeqVo7ZpaPCVhsrarW
2CspQMfb80RqnZBAtf2ue2vLOlPJdPRNufpnFJpItEmaqiuM/jaHpv1crnPXAsb2
QlKlUiG1THQceQ+YbnToPDaVokZPGFo=
-----END CERTIFICATE-----
Generated at Sat Sep 30 04:25:48 2023 by rpki-client on console-ams.rpki-client.org