Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39035349-857f-3739-a165-b3ee062490e5.roa
File: 39035349-857f-3739-a165-b3ee062490e5.roa (raw, json)
Hash identifier: 4Tf1qtQ/2CPN7WEoaGDwiv/VFmTCGq3FgwGxv71eXsc=
Subject key identifier: 0B:D9:0F:E6:54:DF:07:57:2B:9B:AC:BF:04:77:64:CE:F1:A2:8C:76
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F4EAA5331C4FDD47228000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39035349-857f-3739-a165-b3ee062490e5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.238.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:ea:a5:33:1c:4f:dd:47:22:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=574b05a7-68de-4695-a77b-aceda0bf1c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1d:99:24:2d:ca:ec:7e:08:ee:3d:bd:ec:f1:
18:1d:9e:83:87:73:c7:34:b0:de:d7:56:c0:57:df:
74:63:78:55:e4:2e:3b:da:54:95:0b:6d:3c:29:a8:
47:03:32:0d:3e:7d:66:58:ea:f8:f2:01:34:2a:a7:
80:1e:71:44:b5:1e:88:28:05:79:56:9c:99:74:ef:
cd:ec:50:da:4e:66:2d:d1:36:6f:16:57:b1:2a:b2:
6a:d1:d7:7b:b4:42:3e:f8:d2:cc:d7:cd:d7:2d:a7:
41:60:5f:90:41:f4:72:bc:27:ae:eb:d5:90:16:6b:
9f:e8:f8:11:a6:7e:11:ee:c3:4f:74:e1:51:25:e5:
b8:43:ca:01:1c:b0:8f:31:02:f4:78:ed:59:64:69:
e8:2c:ea:f6:f5:cb:eb:79:73:d3:54:0f:ea:7d:9d:
12:9c:79:f8:e2:b0:be:d6:0c:f9:03:74:6a:a9:15:
e9:45:ab:d3:ab:62:8b:61:60:96:2d:71:46:87:96:
c9:7a:d1:40:19:14:2b:b0:4e:a2:d2:43:62:4c:09:
4b:07:e7:83:40:2f:58:4e:36:44:25:95:4c:0c:22:
bf:1a:f5:1d:db:37:e0:d1:e2:b5:f0:3e:4c:0c:16:
e4:18:47:93:ae:59:5f:dc:f8:d0:47:05:a0:a7:01:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D9:0F:E6:54:DF:07:57:2B:9B:AC:BF:04:77:64:CE:F1:A2:8C:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39035349-857f-3739-a165-b3ee062490e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.238.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:4a:fa:82:d2:31:3c:cb:da:3f:6f:87:2e:9a:48:4b:5b:46:
c8:ec:95:d4:3e:3a:84:52:22:3f:72:6b:69:85:cd:1c:3f:31:
a3:09:01:6c:42:85:1a:22:b7:20:4a:a5:a6:66:23:f9:12:5e:
a9:bb:73:d1:56:ca:50:a9:4c:88:9d:1e:20:5b:4c:27:f4:ce:
03:53:81:50:c1:75:a2:d5:b2:aa:ad:3a:f4:88:77:e3:5d:93:
83:a9:a9:3e:b6:bc:b4:55:dc:63:d1:d0:94:79:2a:6d:12:56:
e3:7e:07:20:7a:18:9d:f3:7f:b6:c8:49:88:ac:e1:f4:6b:ae:
4d:8f:8e:21:fa:2a:cf:4e:1f:71:f4:47:3b:be:3b:4a:9f:6f:
1a:35:4e:16:c2:79:cd:97:98:c4:71:33:b2:79:54:2a:f8:1f:
3d:eb:33:e7:a7:42:9b:39:ef:ad:4a:84:58:b1:3a:4a:7e:89:
68:c4:5f:d6:c0:01:a6:4a:76:a0:10:c2:45:a8:57:19:66:a7:
35:67:c1:0c:b5:5a:ac:12:5f:1f:34:a8:6e:be:72:fd:1d:c9:
2a:00:90:77:a8:1d:8a:f5:e9:b6:c2:18:9f:ee:a0:6b:22:17:
ff:27:44:3c:28:7a:37:35:a3:ea:1a:df:8c:25:02:31:53:8d:
b9:eb:53:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ9OqlMxxP3UcigAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTc0YjA1YTctNjhkZS00Njk1LWE3N2ItYWNlZGEwYmYxYzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB2ZJC3K7H4I7j297PEYHZ6Dh3PHNLDe11bA
V990Y3hV5C472lSVC208KahHAzINPn1mWOr48gE0KqeAHnFEtR6IKAV5VpyZdO/N
7FDaTmYt0TZvFlexKrJq0dd7tEI++NLM183XLadBYF+QQfRyvCeu69WQFmuf6PgR
pn4R7sNPdOFRJeW4Q8oBHLCPMQL0eO1ZZGnoLOr29cvreXPTVA/qfZ0SnHn44rC+
1gz5A3RqqRXpRavTq2KLYWCWLXFGh5bJetFAGRQrsE6i0kNiTAlLB+eDQC9YTjZE
JZVMDCK/GvUd2zfg0eK18D5MDBbkGEeTrllf3PjQRwWgpwH9LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAvZD+ZU3wdXK5usvwR3ZM7xoox2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzkwMzUzNDktODU3Zi0z
NzM5LWExNjUtYjNlZTA2MjQ5MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+7AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARK+oLSMTzL2j9vhy6aSEtbRsjsldQ+OoRSIj9ya2mFzRw/MaMJAWxC
hRoityBKpaZmI/kSXqm7c9FWylCpTIidHiBbTCf0zgNTgVDBdaLVsqqtOvSId+Nd
k4OpqT62vLRV3GPR0JR5Km0SVuN+ByB6GJ3zf7bISYis4fRrrk2PjiH6Ks9OH3H0
Rzu+O0qfbxo1ThbCec2XmMRxM7J5VCr4Hz3rM+enQps5761KhFixOkp+iWjEX9bA
AaZKdqAQwkWoVxlmpzVnwQy1WqwSXx80qG6+cv0dySoAkHeoHYr16bbCGJ/uoGsi
F/8nRDwoejc1o+oa34wlAjFTjbnrU/0=
-----END CERTIFICATE-----
Generated at Sun May 11 02:12:44 2025 by rpki-client