Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3488fce7-9d69-3696-b559-60213e63cf47.roa
File: 3488fce7-9d69-3696-b559-60213e63cf47.roa (raw, json)
Hash identifier: 2AYZbVt+yb1nPXEh+0R14UyQqM64p85WX+BJ5xs1xw4=
Subject key identifier: 32:BB:2C:4C:B0:60:31:F3:67:AC:1A:AC:86:53:A6:6A:A6:63:B3:FB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A11DE5FC8916E6A7B544FC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3488fce7-9d69-3696-b559-60213e63cf47.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.203.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:11:de:5f:c8:91:6e:6a:7b:54:4f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b48fe5bc-72e9-4b71-a6cd-7f26452c987f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:73:0a:41:ba:65:ae:d6:c9:ca:18:61:43:
c1:1f:86:91:09:55:b5:6c:cd:fb:98:05:ba:f6:3a:
58:0d:74:54:be:78:92:13:6b:45:80:73:25:0a:df:
85:3f:6d:79:40:06:d6:18:b0:29:5d:8e:17:c4:d7:
ca:20:ed:24:2c:2e:e6:58:48:17:a5:31:b2:6d:72:
2e:6c:6f:c5:35:43:ca:4e:2d:0f:0f:08:26:d9:ec:
2a:2b:af:8f:e2:ab:fd:14:2c:b5:65:ed:c1:95:b1:
91:4f:a1:f2:dd:b9:40:f9:23:e5:3a:45:0e:00:df:
e7:94:78:4f:93:64:11:19:e7:55:ba:df:7f:6e:c7:
6c:32:f6:a3:cf:8d:f9:67:22:02:46:a4:72:45:03:
f1:d3:41:bf:bb:cd:ee:ee:96:f4:01:3c:72:78:30:
43:d4:e6:e5:ef:ed:2f:0f:b5:70:f7:74:73:12:dd:
eb:b8:1e:3e:1a:ea:4d:24:87:8e:c8:9e:b1:e0:3d:
38:93:88:5e:54:c1:69:02:07:00:89:bd:d5:1b:4d:
a3:5d:07:e0:f6:31:ff:08:82:44:29:f6:30:9a:2e:
3d:3c:ff:da:16:09:e8:12:d6:37:4e:6b:e5:2a:a0:
3b:73:cd:07:90:65:dc:63:3f:17:35:ed:55:49:45:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BB:2C:4C:B0:60:31:F3:67:AC:1A:AC:86:53:A6:6A:A6:63:B3:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3488fce7-9d69-3696-b559-60213e63cf47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:03:07:f1:b3:2a:bd:f7:f3:2a:1b:00:3f:51:c7:a6:f1:5c:
26:c7:37:89:f5:ed:d1:d9:a9:ce:b1:4b:2e:05:8a:2a:e0:47:
50:73:78:d5:4a:bf:bc:98:70:e5:55:43:d8:81:b8:cc:ca:b8:
93:78:e1:ec:90:4e:80:88:74:c3:46:a6:cc:50:1c:b4:20:09:
6b:16:87:79:47:dd:ff:a0:fc:c6:00:33:be:0e:ec:d6:02:df:
af:73:4f:d3:27:2b:fc:f2:88:0e:7d:bc:64:63:d2:0b:6c:30:
46:47:12:d4:e9:be:74:34:f9:7c:a0:56:58:c2:c5:51:cf:d6:
e8:fa:cd:82:e0:22:ce:3d:fe:3b:dd:16:aa:36:f0:97:b9:57:
3c:93:00:1e:8e:e3:39:6c:ac:7b:b4:7d:bd:63:79:db:ec:4b:
85:cb:93:b2:0a:68:35:ec:63:5a:db:66:48:b6:26:24:d2:38:
18:d0:52:e2:f4:d8:dc:8d:b4:60:29:71:23:e4:81:fd:48:dd:
7b:2c:10:ba:dc:a7:c1:ff:fe:a9:1f:54:52:9f:a0:fc:0d:93:
12:44:4c:ef:1c:19:89:3a:08:0b:ef:86:4b:c0:bc:7c:d8:7e:
b3:3d:90:9b:dd:0c:fc:a8:7b:bb:36:ee:9a:5a:b5:c0:fe:97:
e8:ac:08:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKEd5fyJFuantUT8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YjQ4ZmU1YmMtNzJlOS00YjcxLWE2Y2QtN2YyNjQ1MmM5ODdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGVzCkG6Za7WycoYYUPBH4aRCVW1bM37mAW6
9jpYDXRUvniSE2tFgHMlCt+FP215QAbWGLApXY4XxNfKIO0kLC7mWEgXpTGybXIu
bG/FNUPKTi0PDwgm2ewqK6+P4qv9FCy1Ze3BlbGRT6Hy3blA+SPlOkUOAN/nlHhP
k2QRGedVut9/bsdsMvajz435ZyICRqRyRQPx00G/u83u7pb0ATxyeDBD1Obl7+0v
D7Vw93RzEt3ruB4+GupNJIeOyJ6x4D04k4heVMFpAgcAib3VG02jXQfg9jH/CIJE
KfYwmi49PP/aFgnoEtY3TmvlKqA7c80HkGXcYz8XNe1VSUV8HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDK7LEywYDHzZ6warIZTpmqmY7P7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzQ4OGZjZTctOWQ2OS0z
Njk2LWI1NTktNjAyMTNlNjNjZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8DB/GzKr338yobAD9Rx6bxXCbHN4n17dHZqc6xSy4FiirgR1BzeNVK
v7yYcOVVQ9iBuMzKuJN44eyQToCIdMNGpsxQHLQgCWsWh3lH3f+g/MYAM74O7NYC
369zT9MnK/zyiA59vGRj0gtsMEZHEtTpvnQ0+XygVljCxVHP1uj6zYLgIs49/jvd
Fqo28Je5VzyTAB6O4zlsrHu0fb1jedvsS4XLk7IKaDXsY1rbZki2JiTSOBjQUuL0
2NyNtGApcSPkgf1I3XssELrcp8H//qkfVFKfoPwNkxJETO8cGYk6CAvvhkvAvHzY
frM9kJvdDPyoe7s27ppatcD+l+isCGc=
-----END CERTIFICATE-----
Generated at Sat May 10 13:45:19 2025 by rpki-client