Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4594a209-61b4-387e-afbc-b424c8f6caf6.roa
File: 4594a209-61b4-387e-afbc-b424c8f6caf6.roa (raw, json)
Hash identifier: HIsMblsgCUvW/NsFqw7ZDkwEC6f2+39fUwAgQJwpevo=
Subject key identifier: 20:57:FF:29:A9:95:E0:44:87:4C:88:CE:19:09:41:33:9F:21:CF:96
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1D36CDB4AF81D9909940C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4594a209-61b4-387e-afbc-b424c8f6caf6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.235.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:36:cd:b4:af:81:d9:90:99:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0e271f71-c451-4518-b8a9-966bc481ca34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a7:96:4f:35:89:6f:18:9c:48:80:db:3c:2e:
5a:75:1c:13:d2:e2:5e:30:f4:a2:d8:2d:63:ba:f9:
11:49:d3:18:52:09:9a:02:e4:eb:a6:2d:fd:f6:4a:
2a:d1:57:2f:ff:67:0e:11:2e:f7:a0:c8:d1:ad:2f:
4d:2d:75:da:10:ed:c9:19:1a:5d:c7:e5:72:08:0a:
d4:13:e7:2b:65:6b:95:f2:5e:36:3e:40:7c:de:14:
6e:50:1e:7a:1c:9b:13:dd:c7:b4:81:6e:56:5b:59:
55:cf:6b:44:9a:90:7a:b7:fb:b1:e9:26:71:f9:24:
6f:66:1f:c4:fa:fa:dd:57:db:d5:1f:1f:64:bd:79:
45:e4:69:15:23:0f:f6:be:0d:dd:42:98:03:bf:a0:
8c:b2:80:2e:f4:4e:18:15:f3:52:e0:33:d9:54:08:
38:42:03:17:75:81:8f:20:a8:b2:96:c6:17:2c:ff:
e4:b9:28:df:a4:a4:56:1c:da:b7:93:c0:ab:1a:be:
8f:b3:6c:4b:0e:85:51:ba:79:e4:aa:25:ab:18:22:
19:c7:79:de:2f:26:e7:dc:71:fe:ca:28:ef:d6:63:
b5:3e:48:09:1d:66:97:4c:fd:c6:0e:93:68:81:53:
96:54:0c:5d:2c:d1:1c:43:62:20:4f:0e:85:7a:8a:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:57:FF:29:A9:95:E0:44:87:4C:88:CE:19:09:41:33:9F:21:CF:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4594a209-61b4-387e-afbc-b424c8f6caf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.235.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:9e:5e:6f:cf:4c:8c:56:1e:3d:21:21:ff:e6:91:ed:60:6d:
d3:31:81:62:29:cd:a3:90:fe:f4:da:2e:1b:39:97:a8:0e:7d:
de:4f:d0:ae:06:cc:85:b0:b8:7c:03:5d:98:01:de:c6:4a:65:
7c:a8:d1:36:96:12:2a:db:82:0b:3f:1d:79:f3:f1:ce:78:b8:
e4:68:b3:0f:cd:3b:fa:0c:92:c1:c1:8d:fc:46:fe:9e:16:ca:
41:09:4d:5f:83:14:8d:27:b3:5e:56:76:6f:95:13:a2:62:46:
05:bb:79:60:d8:75:0c:16:9d:04:e8:be:c2:9e:79:ab:25:3f:
55:8a:d6:5a:4b:48:1c:e9:ca:0d:07:1b:d2:c9:b8:75:fa:b6:
93:50:a0:39:92:34:a6:7d:f4:d4:b6:02:55:ca:99:fa:0a:b6:
31:e7:d6:5e:26:9b:b8:6a:37:2d:7c:92:1e:53:ac:16:db:b1:
6f:3d:ec:5b:91:83:d7:a9:9e:8d:41:36:22:5a:84:f3:80:c9:
55:d2:cb:26:f9:f3:cc:02:25:78:8d:2d:21:99:c8:58:4d:28:
78:93:b4:46:cc:be:30:26:e7:2b:ac:99:e1:90:88:6f:dd:91:
35:54:be:cd:48:32:66:a3:51:87:81:4a:cd:74:7c:70:84:2c:
98:5d:d5:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKHTbNtK+B2ZCZQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MGUyNzFmNzEtYzQ1MS00NTE4LWI4YTktOTY2YmM0ODFjYTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaeWTzWJbxicSIDbPC5adRwT0uJeMPSi2C1j
uvkRSdMYUgmaAuTrpi399koq0Vcv/2cOES73oMjRrS9NLXXaEO3JGRpdx+VyCArU
E+crZWuV8l42PkB83hRuUB56HJsT3ce0gW5WW1lVz2tEmpB6t/ux6SZx+SRvZh/E
+vrdV9vVHx9kvXlF5GkVIw/2vg3dQpgDv6CMsoAu9E4YFfNS4DPZVAg4QgMXdYGP
IKiylsYXLP/kuSjfpKRWHNq3k8CrGr6Ps2xLDoVRunnkqiWrGCIZx3neLybn3HH+
yijv1mO1PkgJHWaXTP3GDpNogVOWVAxdLNEcQ2IgTw6FeopzbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBX/ympleBEh0yIzhkJQTOfIc+WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDU5NGEyMDktNjFiNC0z
ODdlLWFmYmMtYjQyNGM4ZjZjYWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBI+vkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyeXm/PTIxWHj0hIf/mke1gbdMxgWIpzaOQ/vTaLhs5l6gOfd5P0K4G
zIWwuHwDXZgB3sZKZXyo0TaWEirbggs/HXnz8c54uORosw/NO/oMksHBjfxG/p4W
ykEJTV+DFI0ns15Wdm+VE6JiRgW7eWDYdQwWnQTovsKeeaslP1WK1lpLSBzpyg0H
G9LJuHX6tpNQoDmSNKZ99NS2AlXKmfoKtjHn1l4mm7hqNy18kh5TrBbbsW897FuR
g9epno1BNiJahPOAyVXSyyb588wCJXiNLSGZyFhNKHiTtEbMvjAm5yusmeGQiG/d
kTVUvs1IMmajUYeBSs10fHCELJhd1cI=
-----END CERTIFICATE-----
Generated at Sat May 10 13:50:22 2025 by rpki-client