Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/347a67a2-7ad0-32bc-9459-d6381a35a408.roa
File: 347a67a2-7ad0-32bc-9459-d6381a35a408.roa (raw, json)
Hash identifier: /Dqqnmsg416zyX3CBrb63Ylg2+4qhHsqHxw01sOagZE=
Subject key identifier: EF:24:F2:F2:FE:92:07:C7:09:2B:55:F7:6A:7E:71:A0:A3:A0:1E:5D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BCF0252AA5824FFB488C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/347a67a2-7ad0-32bc-9459-d6381a35a408.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.230.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bc:f0:25:2a:a5:82:4f:fb:48:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c0aabad7-65b2-4ad7-bda2-929bf8e58974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c0:b9:58:5d:ea:7c:41:b7:f5:c0:3e:d6:60:
2b:0b:b4:8c:bd:ec:9d:2f:c9:72:66:0e:77:c5:61:
b9:4b:97:1d:64:ad:3c:90:f5:9b:02:0c:de:cd:5b:
26:74:f0:c6:51:31:46:a6:31:9f:60:e7:6a:fe:ff:
df:af:96:89:c8:c1:21:d7:dc:15:55:19:b8:15:0f:
4b:e7:b2:01:03:eb:a0:3e:df:77:5f:75:cc:17:7e:
c6:4d:9e:fa:09:f0:ce:d3:e4:1c:0b:32:f7:c9:d3:
a5:42:c1:8a:e0:ca:84:42:3d:de:45:83:8b:e6:bd:
b5:3a:e3:4d:c3:0e:48:09:7c:be:1b:4c:d2:ba:4b:
95:e3:70:b3:28:17:b9:9f:be:e4:c3:67:3b:5a:83:
ed:a7:69:42:00:c2:9e:fb:97:1b:cf:ba:e3:79:46:
85:d2:8f:53:9f:94:58:42:d2:6c:b0:95:76:af:1b:
a4:f2:ca:dd:75:b6:cf:2c:dc:12:21:d8:b0:ef:32:
2b:f4:a4:34:4c:7c:87:68:3e:7e:61:6a:de:46:4a:
3d:65:6a:b6:32:23:03:ac:b6:e0:d3:86:97:a3:91:
79:9d:0b:5c:2b:ce:c6:34:52:3a:12:e2:fb:c0:ab:
a7:d1:ff:be:ea:5c:4d:d3:69:9b:d0:da:2b:cf:50:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:24:F2:F2:FE:92:07:C7:09:2B:55:F7:6A:7E:71:A0:A3:A0:1E:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/347a67a2-7ad0-32bc-9459-d6381a35a408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.230.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:fb:0d:8d:cf:a4:5e:14:aa:05:83:1a:3e:f1:22:78:6f:bf:
1d:2d:bd:59:a8:2f:a2:d4:62:06:d9:8f:e1:e2:5f:3a:c1:7b:
81:d9:f8:72:5a:7a:1c:1b:ed:a5:be:b8:53:33:12:94:bb:48:
50:83:cd:c7:4f:ba:7a:b0:91:0f:2e:5d:c1:19:4c:45:fa:8d:
b0:04:b9:39:25:1c:6b:64:5d:9e:9d:6b:f7:1b:0e:86:16:bb:
b0:85:98:8b:36:7e:4f:c9:de:79:3a:ab:66:32:ce:b5:f4:6f:
42:78:f1:1a:57:4a:54:6a:9d:d0:06:8c:4a:47:a8:31:7f:81:
35:70:f0:26:85:4f:6d:41:b4:30:c4:49:72:b5:75:61:05:db:
3d:97:8c:67:ff:10:9d:13:00:ef:4a:ca:de:ac:d7:67:27:57:
c2:b6:f4:35:45:03:32:44:c5:24:f5:6c:b4:02:82:e2:6b:7e:
c4:8c:94:c0:bf:3a:06:ed:ec:ed:16:5e:39:43:f5:8b:0f:7d:
f1:e4:d0:fa:21:32:4c:f5:5e:d0:d1:40:e8:a7:76:76:1c:b8:
49:d5:a3:d9:c3:bf:a1:6f:46:a5:8d:f5:79:76:6d:4b:ef:ba:
d5:6b:86:5d:9c:27:9a:5e:77:9a:e6:aa:f3:7f:36:79:b1:47:
c2:a2:67:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnvPAlKqWCT/tIjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YzBhYWJhZDctNjViMi00YWQ3LWJkYTItOTI5YmY4ZTU4OTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMC5WF3qfEG39cA+1mArC7SMveydL8lyZg53
xWG5S5cdZK08kPWbAgzezVsmdPDGUTFGpjGfYOdq/v/fr5aJyMEh19wVVRm4FQ9L
57IBA+ugPt93X3XMF37GTZ76CfDO0+QcCzL3ydOlQsGK4MqEQj3eRYOL5r21OuNN
ww5ICXy+G0zSukuV43CzKBe5n77kw2c7WoPtp2lCAMKe+5cbz7rjeUaF0o9Tn5RY
QtJssJV2rxuk8srddbbPLNwSIdiw7zIr9KQ0THyHaD5+YWreRko9ZWq2MiMDrLbg
04aXo5F5nQtcK87GNFI6EuL7wKun0f++6lxN02mb0Norz1DArQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8k8vL+kgfHCStV92p+caCjoB5dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzQ3YTY3YTItN2FkMC0z
MmJjLTk0NTktZDYzODFhMzVhNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCI+bQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/7DY3PpF4UqgWDGj7xInhvvx0tvVmoL6LUYgbZj+HiXzrBe4HZ+HJa
ehwb7aW+uFMzEpS7SFCDzcdPunqwkQ8uXcEZTEX6jbAEuTklHGtkXZ6da/cbDoYW
u7CFmIs2fk/J3nk6q2YyzrX0b0J48RpXSlRqndAGjEpHqDF/gTVw8CaFT21BtDDE
SXK1dWEF2z2XjGf/EJ0TAO9Kyt6s12cnV8K29DVFAzJExST1bLQCguJrfsSMlMC/
Ogbt7O0WXjlD9YsPffHk0PohMkz1XtDRQOindnYcuEnVo9nDv6FvRqWN9Xl2bUvv
utVrhl2cJ5ped5rmqvN/NnmxR8KiZ2g=
-----END CERTIFICATE-----
Generated at Sat May 10 19:17:20 2025 by rpki-client