Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16f9f9db-025d-351d-88f5-87843377c7bf.roa
File: 16f9f9db-025d-351d-88f5-87843377c7bf.roa (raw, json)
Hash identifier: X7YvrGx8Xvvgv6wSNcv5K6EjaE0ovgVn1N4+j7rqr6I=
Subject key identifier: BE:E4:2B:62:99:1E:63:E5:4E:A9:E2:84:7C:63:B0:CE:53:63:C3:AA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA79EC188B3FFB4829F1FF480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16f9f9db-025d-351d-88f5-87843377c7bf.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 19527
IP address blocks: 35.212.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9e:c1:88:b3:ff:b4:82:9f:1f:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f9f3e706-36aa-4de6-8a65-bcb856dd63d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:fe:64:fd:c5:68:ad:70:7f:6b:7c:78:15:
cf:f3:a6:d3:fd:64:6c:e6:23:0a:b4:5e:11:ea:b2:
26:1d:e8:58:05:cc:fc:fd:20:21:ce:65:1b:64:03:
22:62:b5:00:00:6d:70:ba:ec:d1:64:39:35:3e:e9:
a0:de:16:f7:1c:a6:64:f7:86:c2:01:aa:ae:7f:c9:
24:a6:35:73:b0:7f:81:aa:1c:9b:31:76:5d:8a:5c:
b5:c9:62:1c:91:99:37:10:11:01:67:5b:a9:f6:15:
b4:dc:2f:9c:68:a8:d9:b9:3a:1e:df:56:69:3f:b7:
b7:45:61:6d:4a:01:13:57:d0:39:10:24:21:98:73:
ed:e1:90:4a:1a:59:55:99:0f:79:22:a8:0c:14:41:
83:61:02:db:39:2c:06:36:d7:45:48:9f:5f:2f:83:
f2:6e:84:9b:60:5b:1c:99:3d:ed:c0:3b:64:96:7a:
8a:ae:f8:53:8d:80:48:ce:5d:58:4a:33:80:15:66:
9d:51:d3:1f:47:c5:f5:08:7c:60:d4:a7:65:70:78:
cd:0e:50:73:83:b6:bc:16:53:d9:39:11:49:87:60:
c2:4e:51:db:ed:7e:ea:6b:07:1c:34:f6:40:f4:04:
e1:e5:f7:b9:77:b3:9b:e9:c0:30:5b:f6:de:0c:42:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:2B:62:99:1E:63:E5:4E:A9:E2:84:7C:63:B0:CE:53:63:C3:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16f9f9db-025d-351d-88f5-87843377c7bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.212.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:b3:c4:e5:a8:05:a2:4d:ce:9e:51:6d:ce:61:43:c4:ed:f9:
f8:db:c1:64:f2:db:9f:3a:af:65:5c:04:5d:17:87:33:57:de:
8a:f6:d3:b5:c3:71:c6:50:6a:66:04:70:a2:33:16:28:4b:7f:
31:1b:38:70:3b:64:f7:06:92:47:a6:7b:e5:2c:55:c7:73:4d:
76:3e:57:6a:ae:0c:13:7e:60:71:ce:3d:0f:78:62:2e:e6:75:
07:8a:a3:65:12:00:c8:b2:a2:25:21:de:29:da:4d:86:57:7e:
f3:a7:07:99:3b:02:f1:7a:df:03:26:7e:bc:eb:37:f6:cc:b8:
d3:ac:73:e1:e3:66:40:51:f2:95:a9:f3:a1:34:5e:9c:62:7e:
c0:41:d4:da:d4:05:23:e5:ea:85:f6:0b:c1:c7:cb:b2:61:71:
64:dc:a0:17:c8:c3:a5:8f:98:dc:96:4f:c3:1e:93:ee:67:0c:
37:9a:41:3f:5a:cd:a4:96:40:fe:5e:98:96:3a:03:27:73:bc:
4e:20:13:5e:6d:fc:aa:32:f2:3b:98:e9:7c:39:23:11:d8:8b:
f9:75:97:ac:c3:bc:49:b2:bc:fa:94:c7:b5:6d:97:ed:71:b0:
ce:7c:34:75:78:23:38:39:6f:d2:cf:33:78:22:e2:9f:ed:15:
82:4e:18:8e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDqnnsGIs/+0gp8f9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZjlmM2U3MDYtMzZhYS00ZGU2LThhNjUtYmNiODU2ZGQ2M2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrv+ZP3FaK1wf2t8eBXP86bT/WRs5iMKtF4R
6rImHehYBcz8/SAhzmUbZAMiYrUAAG1wuuzRZDk1Pumg3hb3HKZk94bCAaquf8kk
pjVzsH+BqhybMXZdily1yWIckZk3EBEBZ1up9hW03C+caKjZuToe31ZpP7e3RWFt
SgETV9A5ECQhmHPt4ZBKGllVmQ95IqgMFEGDYQLbOSwGNtdFSJ9fL4PyboSbYFsc
mT3twDtklnqKrvhTjYBIzl1YSjOAFWadUdMfR8X1CHxg1KdlcHjNDlBzg7a8FlPZ
ORFJh2DCTlHb7X7qawccNPZA9ATh5fe5d7Ob6cAwW/beDEKmZQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL7kK2KZHmPlTqnihHxjsM5TY8OqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTZmOWY5ZGItMDI1ZC0z
NTFkLTg4ZjUtODc4NDMzNzdjN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCI9QwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAobPE5agFok3OnlFtzmFDxO35+NvBZPLbnzqvZVwEXReHM1feivbTtcNx
xlBqZgRwojMWKEt/MRs4cDtk9waSR6Z75SxVx3NNdj5Xaq4ME35gcc49D3hiLuZ1
B4qjZRIAyLKiJSHeKdpNhld+86cHmTsC8XrfAyZ+vOs39sy406xz4eNmQFHylanz
oTRenGJ+wEHU2tQFI+XqhfYLwcfLsmFxZNygF8jDpY+Y3JZPwx6T7mcMN5pBP1rN
pJZA/l6YljoDJ3O8TiATXm38qjLyO5jpfDkjEdiL+XWXrMO8SbK8+pTHtW2X7XGw
znw0dXgjODlv0s8zeCLin+0Vgk4Yjg==
-----END CERTIFICATE-----
Generated at Sat May 10 11:10:15 2025 by rpki-client