Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14ce0c7f-1ca6-31da-abcf-35c39d79f156.roa
File: 14ce0c7f-1ca6-31da-abcf-35c39d79f156.roa (raw, json)
Hash identifier: OkXyYQGDXZVJ+re+4frg2t8vXLiL/IUINQGXJxTFgJ8=
Subject key identifier: FA:C2:88:49:1F:95:83:E9:9C:9C:68:95:10:47:FA:67:5F:6F:8F:ED
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B232C952B57E463C59F780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14ce0c7f-1ca6-31da-abcf-35c39d79f156.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b2:32:c9:52:b5:7e:46:3c:59:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d80a71d2-8118-4f4a-866c-44f589494016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:6a:f6:0e:96:84:11:92:ec:bb:f7:88:82:
30:41:c7:2e:01:c0:cd:02:1d:79:01:1b:1d:da:28:
ec:61:51:a8:40:4e:22:51:7a:d2:04:d8:55:39:5a:
04:96:8d:ff:60:97:74:e8:74:11:a6:e7:85:19:94:
ad:a9:50:45:e3:fa:ee:7a:fd:4e:e6:22:4f:f2:a5:
13:44:75:64:37:55:99:2b:ac:a0:44:91:33:d5:f4:
64:11:ec:34:50:2f:95:e0:e4:b6:e3:32:a7:75:11:
3f:a2:67:27:70:a1:fd:7f:78:da:16:4e:e1:2e:86:
02:af:43:78:f3:74:9b:af:82:40:06:45:db:89:f8:
82:97:f3:7d:03:d8:be:ec:e3:f4:bd:f5:9c:84:6d:
5b:f2:2b:fc:2f:2f:ac:44:89:1b:4c:65:8e:dd:1e:
cf:ee:a7:77:22:6d:9f:93:a2:77:9c:13:dc:d0:24:
34:29:77:f0:e4:d8:93:7c:20:1b:d5:82:8c:7e:1e:
64:2d:14:42:40:99:d3:89:8f:df:33:e6:e3:2b:41:
e0:2b:9a:23:63:99:be:55:17:18:8e:43:b8:e2:a8:
04:be:af:53:49:04:20:8e:4c:91:11:96:4b:62:08:
ce:d8:d0:27:3e:4e:17:31:1d:05:ff:32:47:cc:5e:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C2:88:49:1F:95:83:E9:9C:9C:68:95:10:47:FA:67:5F:6F:8F:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14ce0c7f-1ca6-31da-abcf-35c39d79f156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:40:9d:e3:c8:25:3a:e1:82:6c:9b:a4:29:b5:99:1a:0f:98:
c8:57:f7:a0:a0:0d:f4:7a:42:8a:c1:72:91:cc:c1:33:1d:ae:
c9:f6:7c:9c:db:31:30:7f:d4:c6:92:c9:bc:59:4d:61:b2:28:
6c:59:6e:25:3d:69:2a:73:b4:8a:b1:f3:69:ed:eb:e1:dd:af:
76:f2:95:3f:23:f1:6b:f9:6a:c9:7f:b2:41:53:6d:50:e8:88:
e8:88:35:fb:8a:a5:e4:87:80:7b:03:90:e7:52:50:ef:d0:9c:
09:92:0f:e4:99:76:99:8a:84:9c:c4:a0:3c:ec:18:b2:76:17:
4b:e1:7e:98:c9:97:58:9c:3d:85:24:db:f1:0a:26:af:7d:81:
0d:8e:c2:57:cd:4d:1c:3b:26:49:58:63:d7:27:0f:28:c6:07:
c7:d0:b3:74:14:87:cf:e2:dd:d3:3b:2d:6b:64:4d:e0:f7:1c:
ec:fb:bb:3b:ce:ae:c8:18:06:d3:65:2c:28:99:93:18:8b:ef:
5a:34:b1:f8:53:73:91:ff:b9:90:a7:02:0f:17:8d:34:80:60:
75:fa:e7:b2:94:c7:61:39:8b:1d:4f:33:7e:b4:d0:38:de:d6:
a9:d1:24:26:53:a6:31:33:d1:fc:22:58:ab:d2:8f:f0:b0:39:
4c:5a:08:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnsjLJUrV+RjxZ94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDgwYTcxZDItODExOC00ZjRhLTg2NmMtNDRmNTg5NDk0MDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKxq9g6WhBGS7Lv3iIIwQccuAcDNAh15ARsd
2ijsYVGoQE4iUXrSBNhVOVoElo3/YJd06HQRpueFGZStqVBF4/ruev1O5iJP8qUT
RHVkN1WZK6ygRJEz1fRkEew0UC+V4OS24zKndRE/omcncKH9f3jaFk7hLoYCr0N4
83Sbr4JABkXbifiCl/N9A9i+7OP0vfWchG1b8iv8Ly+sRIkbTGWO3R7P7qd3Im2f
k6J3nBPc0CQ0KXfw5NiTfCAb1YKMfh5kLRRCQJnTiY/fM+bjK0HgK5ojY5m+VRcY
jkO44qgEvq9TSQQgjkyREZZLYgjO2NAnPk4XMR0F/zJHzF7nXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrCiEkflYPpnJxolRBH+mdfb4/tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTRjZTBjN2YtMWNhNi0z
MWRhLWFiY2YtMzVjMzlkNzlmMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI97QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRAnePIJTrhgmybpCm1mRoPmMhX96CgDfR6QorBcpHMwTMdrsn2fJzb
MTB/1MaSybxZTWGyKGxZbiU9aSpztIqx82nt6+Hdr3bylT8j8Wv5asl/skFTbVDo
iOiINfuKpeSHgHsDkOdSUO/QnAmSD+SZdpmKhJzEoDzsGLJ2F0vhfpjJl1icPYUk
2/EKJq99gQ2OwlfNTRw7JklYY9cnDyjGB8fQs3QUh8/i3dM7LWtkTeD3HOz7uzvO
rsgYBtNlLCiZkxiL71o0sfhTc5H/uZCnAg8XjTSAYHX657KUx2E5ix1PM3600Dje
1qnRJCZTpjEz0fwiWKvSj/CwOUxaCBo=
-----END CERTIFICATE-----
Generated at Sat May 10 14:49:54 2025 by rpki-client