Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b8ec698-6274-3be1-b9b1-ad3a69a4f22a.roa
File: 3b8ec698-6274-3be1-b9b1-ad3a69a4f22a.roa (raw, json)
Hash identifier: R8fkdfM3Vui67cEXU+Tr66R3OA2sBqwMtiPWQjl18kQ=
Subject key identifier: 7D:FF:67:24:5E:F3:6F:48:4D:10:31:82:F7:83:34:8F:05:4B:54:96
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C53D5A5ACF76E29ED79540
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b8ec698-6274-3be1-b9b1-ad3a69a4f22a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 35.206.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c5:3d:5a:5a:cf:76:e2:9e:d7:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=48608040-d218-4d2e-be33-1de792079a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:fe:49:99:1b:eb:11:25:f4:77:ea:83:e9:
04:e9:41:c0:af:60:b3:f3:8c:61:b3:b8:e8:9a:10:
37:bd:36:59:52:85:36:83:c8:ee:e3:ee:3e:94:41:
58:9c:86:5e:6c:80:cf:b6:02:56:57:4b:cb:d5:a6:
ee:28:0f:ae:8b:69:18:42:93:5c:77:96:2a:64:ca:
a5:15:c9:f4:66:9c:91:dc:6b:9d:0f:ed:a4:67:fa:
ca:9d:da:9f:38:f6:fd:ba:cf:92:59:f3:dd:a5:b1:
a4:15:70:b7:04:1b:ed:07:70:69:2b:71:71:2f:91:
b3:90:3c:0d:85:ed:8f:c6:ce:85:1f:f1:04:eb:32:
74:f1:ff:92:05:9e:95:0e:e2:65:a6:c9:ff:0f:35:
90:fc:b5:74:4d:02:d5:eb:55:60:08:80:da:7f:e1:
a4:7d:ac:c7:18:a1:84:5e:86:3d:9b:e8:d8:2d:54:
18:ad:d7:d6:0c:6c:14:c0:9a:dd:28:df:99:be:31:
04:3a:c9:c9:2f:6f:93:55:1c:ca:b5:1d:bb:4b:ca:
47:77:f8:b9:ec:24:75:cf:b4:95:9f:ff:c5:75:25:
1a:19:91:b5:f1:82:5b:de:45:f5:3f:29:fe:52:c4:
15:7d:1e:1d:7b:07:c3:de:0f:7a:58:d6:8f:a0:08:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FF:67:24:5E:F3:6F:48:4D:10:31:82:F7:83:34:8F:05:4B:54:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3b8ec698-6274-3be1-b9b1-ad3a69a4f22a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.206.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:e1:fe:81:d7:4f:a9:3c:09:e7:19:25:46:af:56:78:6e:7b:
76:a1:41:20:0f:f7:27:7e:fc:7e:e2:57:1a:73:06:55:2d:a0:
9e:cb:f4:95:14:81:7f:ff:ec:f0:83:b3:09:27:8d:69:18:98:
e3:90:07:7e:07:59:ea:d3:d7:ab:59:26:f4:8f:39:2f:d7:f5:
cf:64:44:ea:f3:3a:6c:99:08:64:54:4b:eb:21:cc:f9:e5:81:
c8:ee:29:bc:d7:02:4f:8e:e3:51:52:a2:86:38:10:8f:af:33:
90:53:0d:95:99:64:1a:8f:9e:02:ee:9e:89:1f:92:23:53:b8:
cc:50:f8:96:74:37:71:64:7d:78:86:4b:63:71:57:ea:ec:6c:
f5:0d:01:3e:f0:23:3a:5e:56:3d:89:91:8e:98:57:3c:1e:9f:
27:ae:ef:f7:82:9d:2f:c9:c5:12:8a:11:58:ba:df:64:ff:ea:
30:4f:bc:2c:ae:e5:c4:2e:b7:3f:88:6b:54:88:d1:e9:ea:f8:
91:cb:8b:4c:eb:77:d9:81:ef:3e:ae:4c:cd:8a:42:57:0d:38:
5f:67:57:97:27:f0:46:79:bf:70:ad:a3:cb:6f:79:7c:8a:45:
55:cd:89:04:5d:4c:3a:3a:2e:e9:ef:0b:0d:2c:68:aa:83:ef:
07:ad:88:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnxT1aWs924p7XlUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NDg2MDgwNDAtZDIxOC00ZDJlLWJlMzMtMWRlNzkyMDc5YTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oH+SZkb6xEl9Hfqg+kE6UHAr2Cz84xhs7jo
mhA3vTZZUoU2g8ju4+4+lEFYnIZebIDPtgJWV0vL1abuKA+ui2kYQpNcd5YqZMql
Fcn0ZpyR3GudD+2kZ/rKndqfOPb9us+SWfPdpbGkFXC3BBvtB3BpK3FxL5GzkDwN
he2Pxs6FH/EE6zJ08f+SBZ6VDuJlpsn/DzWQ/LV0TQLV61VgCIDaf+GkfazHGKGE
XoY9m+jYLVQYrdfWDGwUwJrdKN+ZvjEEOsnJL2+TVRzKtR27S8pHd/i57CR1z7SV
n//FdSUaGZG18YJb3kX1Pyn+UsQVfR4dewfD3g96WNaPoAi5IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH3/ZyRe829ITRAxgveDNI8FS1SWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2I4ZWM2OTgtNjI3NC0z
YmUxLWI5YjEtYWQzYTY5YTRmMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvh/oHXT6k8CecZJUavVnhue3ahQSAP9yd+/H7iVxpzBlUtoJ7L9JUU
gX//7PCDswknjWkYmOOQB34HWerT16tZJvSPOS/X9c9kROrzOmyZCGRUS+shzPnl
gcjuKbzXAk+O41FSooY4EI+vM5BTDZWZZBqPngLunokfkiNTuMxQ+JZ0N3FkfXiG
S2NxV+rsbPUNAT7wIzpeVj2JkY6YVzwenyeu7/eCnS/JxRKKEVi632T/6jBPvCyu
5cQutz+Ia1SI0enq+JHLi0zrd9mB7z6uTM2KQlcNOF9nV5cn8EZ5v3Cto8tveXyK
RVXNiQRdTDo6LunvCw0saKqD7wetiHY=
-----END CERTIFICATE-----
Generated at Sat May 10 12:05:33 2025 by rpki-client