Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cb8d2af-e287-368d-96cc-d7e85a83eff8.roa
File: 3cb8d2af-e287-368d-96cc-d7e85a83eff8.roa (raw, json)
Hash identifier: e8cyz6wfuxcbuQODkxMKnAf8MikRmLBgIvhVXtbQFDg=
Subject key identifier: 35:0F:E2:B7:EC:07:6C:A2:08:28:73:FF:84:05:B3:65:CF:51:F6:BE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EC77BF1F7215811477F810
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cb8d2af-e287-368d-96cc-d7e85a83eff8.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.200.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ec:77:bf:1f:72:15:81:14:77:f8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6e4b268e-bd99-45d8-a64e-9d09f1b0ba6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:a0:f0:00:e9:97:aa:16:4a:ca:62:1f:c6:
d6:38:f5:65:0e:21:d6:95:32:19:dd:7f:ed:c0:39:
d9:b0:06:23:94:ef:88:5a:73:03:a6:e5:a9:9c:2e:
bb:4d:02:39:66:b1:0a:d6:ac:82:97:7d:dd:17:c4:
48:ee:d2:21:ec:d0:e7:c6:0e:03:0e:cf:07:3d:56:
06:43:c5:16:83:ca:7c:83:1f:b5:57:9d:4e:ce:74:
eb:d4:36:5f:28:2a:ba:91:0b:3e:a3:3a:55:29:e3:
31:28:e3:9a:82:a3:c1:1c:f7:b1:86:b6:94:d9:16:
97:09:04:13:d5:51:6b:07:72:19:7b:7c:ca:80:e5:
90:13:46:a2:29:fc:37:04:6a:6c:71:bc:36:68:00:
f4:fd:0d:7e:57:5f:77:35:c7:b0:b6:cc:b1:b1:d1:
fa:ce:30:6e:01:24:f7:e6:98:cb:79:13:9e:af:e3:
89:20:bf:36:5e:02:2b:49:ef:4c:c0:41:39:42:b2:
d6:ab:ed:79:f3:98:15:a8:da:68:d8:44:d5:6d:6f:
51:db:fd:a9:e9:d5:f1:75:ec:ef:24:d7:77:16:82:
e1:af:74:60:e6:3e:a4:c8:90:2b:3c:17:7f:f3:0b:
02:d7:95:36:22:7a:11:28:7c:a7:fd:41:ef:55:a9:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0F:E2:B7:EC:07:6C:A2:08:28:73:FF:84:05:B3:65:CF:51:F6:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cb8d2af-e287-368d-96cc-d7e85a83eff8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.200.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:ff:3a:d4:6c:48:3b:62:6f:38:f2:73:e5:1f:db:d8:d1:15:
32:a8:91:07:0b:55:6f:58:70:eb:4e:97:04:f3:61:92:63:1b:
d9:eb:e4:a7:7c:e7:ab:fd:e8:21:d0:9d:15:08:8d:c5:59:9b:
b8:62:56:13:a7:20:d3:10:69:4e:3a:27:24:59:59:cc:ee:cc:
9d:f4:98:8d:14:b3:2d:bd:22:0e:6a:7a:9d:f5:0b:f7:1a:a4:
e0:fb:3e:68:2f:e1:82:95:d9:f0:95:a8:7f:64:95:4e:7f:74:
9d:24:d7:03:1f:2f:b9:97:59:8f:f7:f0:8a:77:2b:69:8c:a3:
f9:02:28:b1:97:0d:bc:bc:1a:bc:a3:d2:a5:5e:a7:b9:b1:db:
00:c6:9e:2a:d4:50:76:d1:e8:16:08:0c:97:3f:85:9d:76:7b:
11:09:d1:4b:db:e3:af:1c:ba:03:a8:26:4f:ee:5a:ac:4d:b2:
f5:fd:39:17:6b:60:8d:71:f5:c7:b1:aa:cd:82:15:29:1b:c2:
12:ed:b3:9f:c0:b5:89:49:42:f4:de:14:26:56:25:7a:e4:b5:
a2:3e:b7:c6:70:17:6d:8a:fc:2f:cd:2f:24:59:e5:ba:04:7d:
e9:32:b2:8f:d7:0e:d5:95:8c:1c:b0:07:ee:54:83:e5:22:17:
f6:9b:8c:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ7He/H3IVgRR3+BAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NmU0YjI2OGUtYmQ5OS00NWQ4LWE2NGUtOWQwOWYxYjBiYTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjig8ADpl6oWSspiH8bWOPVlDiHWlTIZ3X/t
wDnZsAYjlO+IWnMDpuWpnC67TQI5ZrEK1qyCl33dF8RI7tIh7NDnxg4DDs8HPVYG
Q8UWg8p8gx+1V51OznTr1DZfKCq6kQs+ozpVKeMxKOOagqPBHPexhraU2RaXCQQT
1VFrB3IZe3zKgOWQE0aiKfw3BGpscbw2aAD0/Q1+V193NcewtsyxsdH6zjBuAST3
5pjLeROer+OJIL82XgIrSe9MwEE5QrLWq+1585gVqNpo2ETVbW9R2/2p6dXxdezv
JNd3FoLhr3Rg5j6kyJArPBd/8wsC15U2InoRKHyn/UHvVami5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDUP4rfsB2yiCChz/4QFs2XPUfa+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NiOGQyYWYtZTI4Ny0z
NjhkLTk2Y2MtZDdlODVhODNlZmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8iAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7/OtRsSDtibzjyc+Uf29jRFTKokQcLVW9YcOtOlwTzYZJjG9nr5Kd8
56v96CHQnRUIjcVZm7hiVhOnINMQaU46JyRZWczuzJ30mI0Usy29Ig5qep31C/ca
pOD7Pmgv4YKV2fCVqH9klU5/dJ0k1wMfL7mXWY/38Ip3K2mMo/kCKLGXDby8Gryj
0qVep7mx2wDGnirUUHbR6BYIDJc/hZ12exEJ0Uvb468cugOoJk/uWqxNsvX9ORdr
YI1x9cexqs2CFSkbwhLts5/AtYlJQvTeFCZWJXrktaI+t8ZwF22K/C/NLyRZ5boE
fekyso/XDtWVjBywB+5Ug+UiF/abjEs=
-----END CERTIFICATE-----
Generated at Sat May 10 16:32:28 2025 by rpki-client