Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a48110c-33d6-3074-ac8b-79ca43839120.roa
File: 2a48110c-33d6-3074-ac8b-79ca43839120.roa (raw, json)
Hash identifier: bDPe9m6yT8kWF/hEKURqRLvrF/RUm6RRUOrBzP4cl+Q=
Subject key identifier: ED:97:CD:D9:23:9C:D7:0A:CB:01:2F:45:5D:E1:25:3A:9B:47:AB:01
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EC17A8C4DB539D81BEDA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a48110c-33d6-3074-ac8b-79ca43839120.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.221.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ec:17:a8:c4:db:53:9d:81:be:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e18bbba6-c6e4-47d8-a47c-86327c67a28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:ab:af:a9:b8:59:97:9e:a9:6d:e9:13:0f:
ef:cd:dd:01:09:e2:9c:76:16:89:93:b6:21:00:c1:
43:22:ab:a9:f3:3d:5f:ff:02:2c:fe:56:7f:f4:a8:
fd:77:1f:82:e6:0e:f7:12:89:5c:04:b1:75:44:9c:
0a:00:14:01:cd:cb:56:74:cb:5b:95:8e:91:47:90:
0d:d1:21:cd:ea:30:10:f4:03:7e:48:84:76:38:1a:
98:8b:19:2d:00:0b:74:55:f8:5d:3c:03:84:d6:d7:
e0:83:de:55:3a:40:20:8b:30:2f:13:ef:a4:04:a8:
3a:87:34:31:80:23:89:d6:c1:2b:2b:18:d0:5d:c7:
a0:11:b9:dd:b0:3e:e2:43:8b:57:9e:c9:14:b4:34:
74:a0:51:7d:ae:5e:65:4f:ec:c9:c4:80:00:37:e3:
65:c7:a5:96:69:eb:68:8f:76:fa:8f:d6:ce:8b:9e:
f3:20:15:4f:d2:41:d2:34:18:8e:99:ca:a0:39:ce:
ad:12:a6:55:05:51:92:71:b2:05:49:e5:32:56:71:
0b:47:38:b2:18:75:76:d7:80:33:3b:cd:7d:bc:d0:
b5:5f:90:48:46:3a:b1:dc:cb:8f:05:74:e6:ec:05:
49:84:3e:6a:17:9e:5f:0c:e8:9c:f4:f2:6d:56:b5:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:97:CD:D9:23:9C:D7:0A:CB:01:2F:45:5D:E1:25:3A:9B:47:AB:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a48110c-33d6-3074-ac8b-79ca43839120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.221.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:f2:fd:50:ce:5f:e0:47:e7:2a:89:39:aa:69:0d:7f:f0:dd:
a0:3e:df:e9:b6:45:95:fe:c2:23:ff:b1:47:7d:da:38:44:de:
2d:9b:68:06:5b:75:99:82:b6:44:ac:f6:f1:16:df:22:17:b8:
3a:19:6d:73:ff:e6:4c:2b:72:b1:40:30:bf:37:20:09:b7:f0:
22:26:58:86:58:a7:c2:ca:0a:a6:00:d0:64:07:4f:f9:97:8c:
df:28:2a:ca:b8:21:6a:2d:59:2f:15:72:ea:ce:8e:f2:65:c4:
34:04:a6:51:07:4f:8b:77:da:d5:b5:d9:b8:3d:a7:b1:b7:a9:
86:33:20:9d:44:d3:a5:1c:53:0b:fb:dc:ae:98:1d:83:ed:5f:
47:8f:f3:36:d8:bf:8b:12:a1:3c:79:25:40:c8:3e:28:fa:8e:
4f:a9:5e:d2:6c:0d:4e:5f:d1:70:a4:f4:63:5e:18:10:09:39:
f6:7d:8b:71:ec:2e:33:0e:92:b8:9d:66:99:4f:6a:51:93:ba:
0d:cb:2c:96:cb:b9:99:09:e8:39:de:7f:9d:ca:2a:4b:d9:2c:
3c:0b:90:e3:13:20:23:7c:21:df:f4:8a:63:c9:80:c7:59:70:
61:4b:b8:cd:a4:a6:4f:bd:d4:01:17:c6:c3:1c:60:be:79:15:
da:eb:b1:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ7BeoxNtTnYG+2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTE4YmJiYTYtYzZlNC00N2Q4LWE0N2MtODYzMjdjNjdhMjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXWrr6m4WZeeqW3pEw/vzd0BCeKcdhaJk7Yh
AMFDIqup8z1f/wIs/lZ/9Kj9dx+C5g73EolcBLF1RJwKABQBzctWdMtblY6RR5AN
0SHN6jAQ9AN+SIR2OBqYixktAAt0VfhdPAOE1tfgg95VOkAgizAvE++kBKg6hzQx
gCOJ1sErKxjQXcegEbndsD7iQ4tXnskUtDR0oFF9rl5lT+zJxIAAN+Nlx6WWaeto
j3b6j9bOi57zIBVP0kHSNBiOmcqgOc6tEqZVBVGScbIFSeUyVnELRziyGHV214Az
O819vNC1X5BIRjqx3MuPBXTm7AVJhD5qF55fDOic9PJtVrWilwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO2XzdkjnNcKywEvRV3hJTqbR6sBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmE0ODExMGMtMzNkNi0z
MDc0LWFjOGItNzljYTQzODM5MTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI92AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDy/VDOX+BH5yqJOappDX/w3aA+3+m2RZX+wiP/sUd92jhE3i2baAZb
dZmCtkSs9vEW3yIXuDoZbXP/5kwrcrFAML83IAm38CImWIZYp8LKCqYA0GQHT/mX
jN8oKsq4IWotWS8VcurOjvJlxDQEplEHT4t32tW12bg9p7G3qYYzIJ1E06UcUwv7
3K6YHYPtX0eP8zbYv4sSoTx5JUDIPij6jk+pXtJsDU5f0XCk9GNeGBAJOfZ9i3Hs
LjMOkridZplPalGTug3LLJbLuZkJ6Dnef53KKkvZLDwLkOMTICN8Id/0imPJgMdZ
cGFLuM2kpk+91AEXxsMcYL55FdrrsSU=
-----END CERTIFICATE-----
Generated at Sat May 10 22:26:52 2025 by rpki-client