Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4471fb74-a7f1-39df-a720-8fcabe24436c.roa
File: 4471fb74-a7f1-39df-a720-8fcabe24436c.roa (raw, json)
Hash identifier: oBGa13io74/NDME0a8DmsD7nO3F7JmBTEp4NDI9RuTg=
Subject key identifier: 21:FD:DC:C8:7A:DD:12:99:4E:DF:69:1D:FD:F4:40:E8:EE:A7:44:38
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AC17809484D0FF08AAA9A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4471fb74-a7f1-39df-a720-8fcabe24436c.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 35.185.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ac:17:80:94:84:d0:ff:08:aa:a9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=0cef0f10-33d9-4a6a-a025-6c351c7cb18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:47:4b:fb:eb:d8:35:d0:91:fd:87:be:ad:
c3:6f:d1:99:78:18:23:04:4b:d0:e3:0e:3e:25:ac:
d9:26:b5:f4:42:05:d9:35:ff:a0:a8:61:f3:fa:b7:
80:db:aa:5d:a0:e5:90:9c:90:6c:1b:2e:61:34:ad:
07:ff:51:a7:00:96:b6:f5:14:e2:3c:80:65:1c:28:
be:43:ad:c0:a1:19:22:06:9b:f7:be:c5:93:86:6a:
2e:d5:0a:3d:2d:c3:9f:71:49:50:3a:6a:57:d7:8f:
43:67:47:59:f6:b9:16:41:49:98:f5:50:15:5c:7d:
eb:25:94:b3:0c:de:1e:5b:7f:da:fa:71:79:3a:f2:
0c:e2:d2:53:01:bc:8c:fe:34:2d:1d:49:9c:7e:b6:
1c:cd:e9:b6:72:ac:b2:5a:91:35:17:3e:c5:99:35:
cb:f3:a6:0b:b9:54:8a:c8:c1:f5:b6:fd:bf:40:b3:
e1:e5:24:20:80:94:5e:86:b1:4e:8c:b5:d5:b6:b7:
e7:56:b7:47:b8:c3:d2:84:f9:0a:7c:f7:66:6c:6c:
db:31:3d:b3:4a:9c:b4:b6:b2:88:b3:7e:28:4a:72:
4c:29:08:5c:27:6d:bf:51:bd:6d:20:09:e8:55:58:
53:41:96:81:0f:b9:a5:6f:a5:d4:65:b8:2d:34:7c:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FD:DC:C8:7A:DD:12:99:4E:DF:69:1D:FD:F4:40:E8:EE:A7:44:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4471fb74-a7f1-39df-a720-8fcabe24436c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.185.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:e0:8f:52:5a:45:36:ff:72:4a:a9:ce:d2:57:d0:67:bd:01:
ac:0f:fc:70:48:d6:a9:02:07:ad:69:68:87:41:b2:35:b3:ed:
15:40:8b:40:78:c7:a3:60:fa:d7:86:00:cb:66:5a:4e:88:72:
03:28:e1:c5:b9:a5:92:36:a1:4b:3a:d3:0f:7b:ff:3f:8b:bb:
55:10:92:bb:29:fa:1b:72:5c:d8:a0:24:7c:a1:15:7b:3e:da:
e3:d3:c6:5e:a5:37:4a:a1:d8:2d:e3:cc:fe:99:cd:d8:ea:7c:
16:c7:64:fb:22:e3:21:03:22:c5:dc:5e:39:80:1a:c2:65:de:
41:4c:d3:b5:ce:be:f0:06:72:49:10:f3:54:39:e6:22:e2:6e:
d9:e0:22:15:e5:79:b7:ea:9c:31:be:0d:1f:22:02:25:fb:a9:
c0:ac:ab:8b:31:7a:98:d4:3d:14:67:bd:20:a0:a7:2c:69:08:
b8:98:b0:c9:7b:5c:90:f1:a3:e4:7a:e7:ea:43:8d:a0:af:71:
e5:15:41:e7:1d:17:cb:3b:ff:18:c2:9c:78:87:b9:4c:83:0d:
83:86:7d:d6:a8:96:99:52:6a:c6:f2:e6:55:fd:55:21:c1:84:
ee:1b:e0:b7:51:3b:67:64:1d:d5:ea:bb:c6:dd:31:e1:0f:eb:
76:74:15:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnrBeAlITQ/wiqqaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MGNlZjBmMTAtMzNkOS00YTZhLWEwMjUtNmMzNTFjN2NiMThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz5HS/vr2DXQkf2Hvq3Db9GZeBgjBEvQ4w4+
JazZJrX0QgXZNf+gqGHz+reA26pdoOWQnJBsGy5hNK0H/1GnAJa29RTiPIBlHCi+
Q63AoRkiBpv3vsWThmou1Qo9LcOfcUlQOmpX149DZ0dZ9rkWQUmY9VAVXH3rJZSz
DN4eW3/a+nF5OvIM4tJTAbyM/jQtHUmcfrYczem2cqyyWpE1Fz7FmTXL86YLuVSK
yMH1tv2/QLPh5SQggJRehrFOjLXVtrfnVrdHuMPShPkKfPdmbGzbMT2zSpy0trKI
s34oSnJMKQhcJ22/Ub1tIAnoVVhTQZaBD7mlb6XUZbgtNHwwgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCH93Mh63RKZTt9pHf30QOjup0Q4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDQ3MWZiNzQtYTdmMS0z
OWRmLWE3MjAtOGZjYWJlMjQ0MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI7lAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXgj1JaRTb/ckqpztJX0Ge9AawP/HBI1qkCB61paIdBsjWz7RVAi0B4
x6Ng+teGAMtmWk6IcgMo4cW5pZI2oUs60w97/z+Lu1UQkrsp+htyXNigJHyhFXs+
2uPTxl6lN0qh2C3jzP6ZzdjqfBbHZPsi4yEDIsXcXjmAGsJl3kFM07XOvvAGckkQ
81Q55iLibtngIhXlebfqnDG+DR8iAiX7qcCsq4sxepjUPRRnvSCgpyxpCLiYsMl7
XJDxo+R65+pDjaCvceUVQecdF8s7/xjCnHiHuUyDDYOGfdaolplSasby5lX9VSHB
hO4b4LdRO2dkHdXqu8bdMeEP63Z0FU8=
-----END CERTIFICATE-----
Generated at Sat May 10 15:05:05 2025 by rpki-client