Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d661f7f-72ba-3b4e-8760-946a0c76de9f.roa
File: 2d661f7f-72ba-3b4e-8760-946a0c76de9f.roa (raw, json)
Hash identifier: i/hVSgu5d365fLqnVeiwuIWhNiowesvqzDSEbgnEXQI=
Subject key identifier: 01:78:31:07:1C:EC:CA:75:E9:66:D1:DE:D3:9B:00:65:61:22:EE:BB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BD2F945EBCC2FA9BF01100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d661f7f-72ba-3b4e-8760-946a0c76de9f.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.188.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:2f:94:5e:bc:c2:fa:9b:f0:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=16bf310d-4ed3-46cb-b308-12cd0f7c6c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:2d:75:ba:ec:71:2e:ca:e3:5d:d2:ba:54:
63:c4:4e:5d:95:b9:70:02:c8:8d:d3:a2:9d:bc:a3:
56:5f:e9:c3:46:23:56:ba:74:68:79:58:03:4c:d3:
2b:bf:2f:3e:4a:1c:47:54:3a:ba:5d:72:69:71:ce:
22:3b:6f:c9:8b:9e:86:be:b1:58:c2:8f:6b:7e:36:
01:26:02:c2:ce:1e:9d:8b:77:e6:1c:90:7b:65:dc:
64:35:36:ca:d0:9d:a6:ca:05:1d:5a:aa:21:c0:4d:
fa:12:59:6c:05:22:4a:0e:94:84:6a:3d:09:d3:e6:
33:e4:20:4d:da:bb:d2:e5:7a:a9:05:88:cb:4f:28:
30:a2:21:86:b0:dd:84:ee:08:7f:e0:0e:73:60:16:
dd:46:86:5f:41:ca:ed:8a:74:a1:96:11:cb:f0:37:
02:d0:6e:e4:f6:7e:ab:e2:bd:2d:61:97:65:ad:97:
74:06:c9:b7:30:76:d9:cf:9c:e6:ca:12:73:7a:c9:
cc:8f:c7:f6:03:10:81:73:91:59:68:8a:98:4b:3f:
a4:83:6a:d9:d5:7a:46:b7:de:25:99:5a:31:72:d8:
fb:d2:df:e4:e3:a6:5f:08:65:bf:0e:6b:9d:1c:4e:
c2:b2:a1:20:13:5e:1b:d4:66:35:ee:cc:cf:6a:53:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:78:31:07:1C:EC:CA:75:E9:66:D1:DE:D3:9B:00:65:61:22:EE:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d661f7f-72ba-3b4e-8760-946a0c76de9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:74:de:27:37:9b:65:68:00:27:b7:eb:b2:7f:e3:99:0f:d2:
20:da:23:26:31:0a:19:2a:a8:2b:a6:b7:0b:ce:4a:c9:0b:a5:
22:e1:81:5f:ce:3a:2e:88:64:40:f4:3a:9a:31:1e:a0:45:dc:
7d:d2:92:9c:5d:8f:84:eb:90:da:03:90:fe:88:6d:e4:61:c0:
09:22:e8:29:dc:80:31:da:a4:f6:92:f0:80:4b:33:21:e1:b2:
63:3a:4e:98:b0:17:68:85:93:a6:2a:1c:c0:e3:1a:44:89:d1:
94:58:a6:09:8d:bc:00:d6:9e:34:82:8f:f8:40:8c:00:95:be:
53:46:c5:04:42:43:96:99:32:fd:f0:e0:e2:fd:8e:8e:7b:43:
a5:8f:29:6e:f8:e9:e5:2c:40:2e:59:b6:fe:04:82:fd:79:14:
6d:82:a9:38:76:c0:dd:b3:fa:4d:2c:ab:75:aa:6a:7c:94:4c:
e3:68:a2:39:33:2f:85:c1:69:ed:9a:fb:74:eb:52:0c:dd:5d:
93:73:e4:f8:89:b7:ac:da:cb:6b:11:5e:d8:3f:78:23:5c:b0:
08:fc:2f:a1:85:d0:06:14:d7:11:4a:d0:be:a1:6c:80:07:33:
b2:9d:29:58:c3:f7:4d:c0:23:db:30:0e:a6:93:76:6c:e8:27:
e5:bf:aa:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnvS+UXrzC+pvwEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MTZiZjMxMGQtNGVkMy00NmNiLWIzMDgtMTJjZDBmN2M2YzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVEtdbrscS7K413SulRjxE5dlblwAsiN06Kd
vKNWX+nDRiNWunRoeVgDTNMrvy8+ShxHVDq6XXJpcc4iO2/Ji56GvrFYwo9rfjYB
JgLCzh6di3fmHJB7ZdxkNTbK0J2mygUdWqohwE36EllsBSJKDpSEaj0J0+Yz5CBN
2rvS5XqpBYjLTygwoiGGsN2E7gh/4A5zYBbdRoZfQcrtinShlhHL8DcC0G7k9n6r
4r0tYZdlrZd0Bsm3MHbZz5zmyhJzesnMj8f2AxCBc5FZaIqYSz+kg2rZ1XpGt94l
mVoxctj70t/k46ZfCGW/DmudHE7CsqEgE14b1GY17szPalMDOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAF4MQcc7Mp16WbR3tObAGVhIu67MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmQ2NjFmN2YtNzJiYS0z
YjRlLTg3NjAtOTQ2YTBjNzZkZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7wAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAF03ic3m2VoACe367J/45kP0iDaIyYxChkqqCumtwvOSskLpSLhgV/O
Oi6IZED0OpoxHqBF3H3Skpxdj4TrkNoDkP6IbeRhwAki6CncgDHapPaS8IBLMyHh
smM6TpiwF2iFk6YqHMDjGkSJ0ZRYpgmNvADWnjSCj/hAjACVvlNGxQRCQ5aZMv3w
4OL9jo57Q6WPKW746eUsQC5Ztv4Egv15FG2CqTh2wN2z+k0sq3WqanyUTONoojkz
L4XBae2a+3TrUgzdXZNz5PiJt6zay2sRXtg/eCNcsAj8L6GF0AYU1xFK0L6hbIAH
M7KdKVjD903AI9swDqaTdmzoJ+W/qi0=
-----END CERTIFICATE-----
Generated at Sat May 10 14:51:11 2025 by rpki-client