Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28530d8b-c42a-3355-8f65-318974f5b719.roa
File: 28530d8b-c42a-3355-8f65-318974f5b719.roa (raw, json)
Hash identifier: 7NdnyRTSnO0tWORHXYN3ibdtPCQ7Fyo9t2K74RUb9po=
Subject key identifier: BA:29:32:F8:DE:5F:78:51:AA:06:9E:50:CC:9B:15:C6:80:F4:FA:05
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FFEF9CC1B7495EDAED4600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28530d8b-c42a-3355-8f65-318974f5b719.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.247.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ff:ef:9c:c1:b7:49:5e:da:ed:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c188eeb3-8700-4a19-ad43-ba0aebbf235a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:3f:9a:49:3f:b6:e6:74:65:43:a6:06:ca:
09:19:e6:be:87:51:e2:55:38:fe:3a:b4:1a:6c:dd:
48:33:40:95:0c:41:30:a9:1b:db:a4:2f:b6:b2:bb:
8e:51:a4:61:02:c6:13:43:c3:87:c5:48:30:91:b7:
14:69:6d:1e:1e:f0:06:79:53:32:ef:87:39:53:1e:
a3:23:68:a0:c6:69:55:cc:6c:3f:dd:7c:1a:0d:fe:
61:36:fb:99:0f:6f:25:3f:f5:d8:31:c6:b6:10:e9:
51:f4:14:8c:c2:75:0b:aa:4e:cd:95:c3:ae:48:74:
e8:b5:1e:73:90:68:4f:15:d1:da:ed:0b:26:ec:a9:
6f:cd:a1:94:fd:f9:d9:8a:9f:97:3b:9d:9a:2b:0d:
3c:6a:f7:1c:63:50:31:29:66:e1:a9:75:e6:65:cf:
26:ed:d0:04:3f:46:07:55:3c:0c:9a:49:cb:43:5c:
96:1d:3d:f4:07:56:51:c5:24:88:62:39:dd:3e:21:
3b:ff:1a:f1:4e:75:8b:e3:73:f4:1c:5b:8b:8b:84:
14:c4:2c:4e:27:52:cd:ae:d2:85:da:6c:26:2f:71:
6e:22:6a:2b:29:48:7d:0b:09:9e:60:1f:f1:64:25:
3e:13:41:68:c2:94:29:43:05:fb:bf:dd:0e:42:c5:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:29:32:F8:DE:5F:78:51:AA:06:9E:50:CC:9B:15:C6:80:F4:FA:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28530d8b-c42a-3355-8f65-318974f5b719.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.247.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:47:73:c9:b7:41:37:d3:2d:4a:7c:20:3a:2d:90:64:96:43:
a8:eb:67:bc:1f:f1:07:be:b1:5e:db:a7:68:7f:c1:fe:78:77:
eb:2e:c2:68:9e:8f:9a:8d:da:de:14:c2:42:46:5b:10:9c:0b:
b8:c3:01:b5:35:f2:91:32:5a:53:58:12:6c:e8:a6:ba:41:cd:
d3:d5:13:1f:dd:38:09:8e:53:26:f6:cd:5c:ab:58:3b:14:fd:
14:35:a8:cf:a4:21:30:0a:d9:3e:51:6c:ca:91:29:6d:42:ff:
62:ab:2e:9a:c9:5c:4c:64:d9:8a:31:6d:d8:f5:10:71:27:a6:
d2:79:4b:9f:e1:dc:b8:76:99:53:dd:71:a7:ae:ff:d3:f7:ff:
b4:0e:fc:83:48:48:9b:97:e7:30:bc:c8:76:ff:7b:fe:ba:a7:
34:0b:d5:4a:43:11:d1:d9:1c:0f:8f:a8:fc:d8:9b:66:b6:13:
88:88:43:d9:c6:5e:bb:92:07:07:03:c4:02:0b:62:ca:04:7b:
99:20:78:e8:98:2e:1d:56:bd:fb:32:b5:c9:af:35:26:6d:66:
d2:84:1b:c0:a7:9a:70:b0:ec:39:53:3f:4d:94:79:2e:87:2f:
c8:85:78:db:6a:6d:47:bf:2c:ff:b0:fd:cb:96:b9:b4:bd:46:
58:b4:18:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ/++cwbdJXtrtRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzE4OGVlYjMtODcwMC00YTE5LWFkNDMtYmEwYWViYmYyMzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvps/mkk/tuZ0ZUOmBsoJGea+h1HiVTj+OrQa
bN1IM0CVDEEwqRvbpC+2sruOUaRhAsYTQ8OHxUgwkbcUaW0eHvAGeVMy74c5Ux6j
I2igxmlVzGw/3XwaDf5hNvuZD28lP/XYMca2EOlR9BSMwnULqk7NlcOuSHTotR5z
kGhPFdHa7Qsm7KlvzaGU/fnZip+XO52aKw08avccY1AxKWbhqXXmZc8m7dAEP0YH
VTwMmknLQ1yWHT30B1ZRxSSIYjndPiE7/xrxTnWL43P0HFuLi4QUxCxOJ1LNrtKF
2mwmL3FuImorKUh9CwmeYB/xZCU+E0FowpQpQwX7v90OQsXU+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLopMvjeX3hRqgaeUMybFcaA9PoFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjg1MzBkOGItYzQyYS0z
MzU1LThmNjUtMzE4OTc0ZjViNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/cgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJHc8m3QTfTLUp8IDotkGSWQ6jrZ7wf8Qe+sV7bp2h/wf54d+suwmie
j5qN2t4UwkJGWxCcC7jDAbU18pEyWlNYEmzoprpBzdPVEx/dOAmOUyb2zVyrWDsU
/RQ1qM+kITAK2T5RbMqRKW1C/2KrLprJXExk2Yoxbdj1EHEnptJ5S5/h3Lh2mVPd
caeu/9P3/7QO/INISJuX5zC8yHb/e/66pzQL1UpDEdHZHA+PqPzYm2a2E4iIQ9nG
XruSBwcDxAILYsoEe5kgeOiYLh1WvfsytcmvNSZtZtKEG8CnmnCw7DlTP02UeS6H
L8iFeNtqbUe/LP+w/cuWubS9Rli0GNg=
-----END CERTIFICATE-----
Generated at Sun May 11 01:53:29 2025 by rpki-client