Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3234e43d-1cae-3608-9b5c-4b31796421ab.roa
File: 3234e43d-1cae-3608-9b5c-4b31796421ab.roa (raw, json)
Hash identifier: d3ewROOL2T8SqStFsPThsftEGSE8Q0sTQyxXsHS3FCo=
Subject key identifier: 10:79:31:9D:D1:4E:1F:DC:CA:CB:61:59:86:AE:80:3B:26:10:0D:3C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EFACB761EF275E461BBEA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3234e43d-1cae-3608-9b5c-4b31796421ab.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 35.214.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:ac:b7:61:ef:27:5e:46:1b:be:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d0331f82-fbcf-4598-ba4c-7f898cc2c93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:19:b9:81:63:e9:4e:61:48:f0:af:e1:83:ae:
e7:7f:c2:43:67:a5:2e:b1:eb:ca:91:cb:cd:e0:97:
9a:72:66:d8:a2:22:59:ba:80:cf:8c:56:62:7b:48:
17:88:26:96:f8:7e:60:ed:30:67:ab:1f:f1:3b:45:
60:62:c6:a4:fa:47:b7:f4:54:2c:12:2f:c6:f9:7d:
b8:fe:a1:33:ee:61:91:5f:65:dd:f5:ce:ef:f5:5f:
a3:9f:45:87:de:db:94:f2:64:08:da:ee:8f:9f:bd:
55:59:4a:8e:5a:a6:a5:b3:3b:b8:a3:9b:81:aa:cd:
bf:3f:1e:44:45:7c:47:04:59:83:02:90:22:35:1a:
b5:b6:57:0b:1f:a4:ab:06:8b:c5:0e:db:3c:a5:76:
12:0e:63:7a:56:69:3e:98:17:f0:b7:be:98:04:9e:
9b:97:7d:10:e2:c8:b9:48:5f:fc:f5:f4:6e:46:a3:
03:2f:6a:a6:76:d8:78:11:26:86:5f:1c:c5:39:c1:
83:80:33:7b:fb:51:23:bf:31:54:c7:aa:7e:31:19:
4b:4b:c0:f0:e8:52:fe:15:c0:d0:cd:79:1d:eb:fe:
fb:41:92:85:92:07:20:c1:16:af:7d:b6:10:94:c2:
45:34:d7:38:27:51:a0:1e:44:06:f0:49:63:2f:fb:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:79:31:9D:D1:4E:1F:DC:CA:CB:61:59:86:AE:80:3B:26:10:0D:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3234e43d-1cae-3608-9b5c-4b31796421ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.214.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:da:33:7f:87:a8:83:01:0d:18:ff:db:96:46:60:90:9e:a4:
7c:50:bf:7b:cc:79:83:4e:37:b5:ba:4f:0c:7e:49:40:3d:d7:
24:a9:4b:34:b4:47:f2:bf:4b:16:54:d0:dc:67:97:ce:d5:ec:
27:c2:b7:e6:78:90:de:68:a2:49:7c:bd:b8:50:fa:83:9a:9a:
21:ce:87:85:43:31:f9:0e:07:6f:d3:68:e9:c0:58:6b:07:04:
d4:59:4a:99:53:a0:df:7f:31:43:db:71:2e:02:3e:86:e4:06:
03:6f:24:94:4a:14:9c:88:88:04:f8:f3:a6:97:50:62:3e:5c:
ef:d1:79:50:1d:46:9f:78:12:c7:11:0c:34:77:95:db:40:0b:
cf:65:a1:0e:e5:33:92:18:2d:5a:18:dd:3e:6d:fa:92:5a:08:
dd:65:bd:1d:d3:b0:aa:f5:ba:c7:4d:8e:9a:2b:a1:b9:16:d2:
a0:71:83:fc:e6:db:47:30:38:86:16:bb:9e:19:0f:33:a5:3a:
c8:5f:11:81:b0:53:22:9a:b0:6b:f0:31:82:68:7d:fa:35:1b:
5e:d7:d0:cf:21:e2:a5:54:1c:f1:a7:5c:ff:fe:eb:2e:88:b4:
15:6a:30:38:5a:12:57:8e:7e:d9:f8:c4:be:bc:c1:7f:2a:7e:
cf:83:22:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ76y3Ye8nXkYbvqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDAzMzFmODItZmJjZi00NTk4LWJhNGMtN2Y4OThjYzJjOTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixm5gWPpTmFI8K/hg67nf8JDZ6UusevKkcvN
4JeacmbYoiJZuoDPjFZie0gXiCaW+H5g7TBnqx/xO0VgYsak+ke39FQsEi/G+X24
/qEz7mGRX2Xd9c7v9V+jn0WH3tuU8mQI2u6Pn71VWUqOWqalszu4o5uBqs2/Px5E
RXxHBFmDApAiNRq1tlcLH6SrBovFDts8pXYSDmN6Vmk+mBfwt76YBJ6bl30Q4si5
SF/89fRuRqMDL2qmdth4ESaGXxzFOcGDgDN7+1EjvzFUx6p+MRlLS8Dw6FL+FcDQ
zXkd6/77QZKFkgcgwRavfbYQlMJFNNc4J1GgHkQG8EljL/uw8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBB5MZ3RTh/cysthWYaugDsmEA08MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzIzNGU0M2QtMWNhZS0z
NjA4LTliNWMtNGIzMTc5NjQyMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9aAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGraM3+HqIMBDRj/25ZGYJCepHxQv3vMeYNON7W6Twx+SUA91ySpSzS0
R/K/SxZU0Nxnl87V7CfCt+Z4kN5ookl8vbhQ+oOamiHOh4VDMfkOB2/TaOnAWGsH
BNRZSplToN9/MUPbcS4CPobkBgNvJJRKFJyIiAT486aXUGI+XO/ReVAdRp94EscR
DDR3ldtAC89loQ7lM5IYLVoY3T5t+pJaCN1lvR3TsKr1usdNjporobkW0qBxg/zm
20cwOIYWu54ZDzOlOshfEYGwUyKasGvwMYJoffo1G17X0M8h4qVUHPGnXP/+6y6I
tBVqMDhaEleOftn4xL68wX8qfs+DIsA=
-----END CERTIFICATE-----
Generated at Sat May 10 12:12:22 2025 by rpki-client