Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ceddd0e-adcf-38a7-a848-8dcb6d706eff.roa
File: 4ceddd0e-adcf-38a7-a848-8dcb6d706eff.roa (raw, json)
Hash identifier: vP8CXtPRGdoLTrVIjbVpTeEBKbT2+S9XjxvGQ4JIf9E=
Subject key identifier: 38:DA:5C:CD:8B:0A:46:FB:D0:60:AE:F5:55:C5:0B:C0:C8:2E:B9:57
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1CC00A7E143B5AFBABEEC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ceddd0e-adcf-38a7-a848-8dcb6d706eff.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 19527
IP address blocks: 35.206.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1c:c0:0a:7e:14:3b:5a:fb:ab:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=174fc3bb-cbea-4f5e-b2f2-c053ed22187d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:e1:20:52:ce:4c:c7:99:83:20:e0:bb:23:
fe:42:24:80:fc:7e:f3:25:b4:06:c6:85:fc:8c:08:
72:a7:12:86:d5:09:3b:76:91:6d:d4:4b:d6:1e:97:
81:2b:af:d9:f8:db:e0:fe:cd:ce:5b:96:d7:ae:95:
4c:50:62:f3:8e:c0:51:e2:c9:56:1f:22:e2:95:49:
4d:81:c9:4e:85:99:8a:b8:6b:f5:c2:e2:f0:85:36:
77:3b:a2:f0:f0:64:59:ec:4e:f5:32:24:22:f7:e5:
ae:03:57:f8:4b:71:fe:61:eb:d2:c5:18:87:bb:f2:
ba:df:15:1e:4e:97:08:e4:9d:f9:0d:9a:c1:14:f4:
4b:85:d7:e9:62:d1:cc:62:fa:ed:f0:6b:80:a3:46:
4e:52:42:d2:b6:ec:6a:8c:1d:d4:00:ad:7d:89:12:
f7:39:5e:f4:3d:b1:ed:c6:33:50:fa:ef:e3:92:ee:
ad:15:be:fc:d6:f1:32:5a:4f:70:1d:2b:e0:aa:91:
fc:6d:34:ba:71:8e:65:0f:80:63:e7:d9:a1:d5:ab:
e3:45:7e:a6:7d:c2:e6:98:42:30:bc:ae:b2:56:04:
a0:ed:eb:b3:bf:da:11:28:fe:15:1b:4f:7f:38:2f:
c9:df:6b:e9:eb:96:05:28:b4:82:89:d4:0c:0d:1b:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DA:5C:CD:8B:0A:46:FB:D0:60:AE:F5:55:C5:0B:C0:C8:2E:B9:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ceddd0e-adcf-38a7-a848-8dcb6d706eff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.206.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:79:eb:40:ff:8a:27:87:e1:b7:5d:19:b1:7d:4f:22:dd:17:
53:74:a8:cb:b0:12:79:f1:ef:bd:b9:ac:b7:43:6b:d6:c6:35:
a1:9b:9c:cc:24:78:7d:0f:58:69:f2:87:90:69:86:0e:cb:e8:
47:96:8d:b0:f4:c1:b9:0d:18:d4:9a:1b:fe:84:a2:d2:b6:c4:
ac:db:ea:84:d8:a7:7c:8d:6f:73:83:ee:60:ff:20:11:2a:91:
b1:61:bf:11:d8:e4:2d:f9:6d:3b:1c:27:0b:ea:24:fd:57:de:
98:63:3d:76:4a:15:03:d4:01:79:8f:53:0c:f2:53:32:9b:ea:
10:9c:a2:6c:20:9a:43:d0:06:d1:38:f9:f4:4a:eb:13:09:f2:
44:a3:60:af:3f:34:76:37:f2:81:51:65:20:20:4c:3e:fa:b8:
6d:bc:15:c3:11:c9:87:e3:f5:ff:80:6c:9c:87:0a:0c:6d:8c:
67:bc:5c:e1:e9:5a:2f:1c:fd:b9:35:d9:43:7a:13:44:38:a9:
62:22:03:26:af:3a:4e:ac:c0:2c:dc:a1:22:ed:64:60:07:22:
63:2d:df:a6:3c:78:85:5c:18:9f:61:4a:29:37:d2:88:4c:02:
14:b5:45:82:0b:2f:49:97:60:46:4d:c2:42:5f:63:a4:80:8f:
0e:88:35:27
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEMKHMAKfhQ7Wvur7sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTc0ZmMzYmItY2JlYS00ZjVlLWIyZjItYzA1M2VkMjIxODdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHThIFLOTMeZgyDguyP+QiSA/H7zJbQGxoX8
jAhypxKG1Qk7dpFt1EvWHpeBK6/Z+Nvg/s3OW5bXrpVMUGLzjsBR4slWHyLilUlN
gclOhZmKuGv1wuLwhTZ3O6Lw8GRZ7E71MiQi9+WuA1f4S3H+YevSxRiHu/K63xUe
TpcI5J35DZrBFPRLhdfpYtHMYvrt8GuAo0ZOUkLStuxqjB3UAK19iRL3OV70PbHt
xjNQ+u/jku6tFb781vEyWk9wHSvgqpH8bTS6cY5lD4Bj59mh1avjRX6mfcLmmEIw
vK6yVgSg7euzv9oRKP4VG09/OC/J32vp65YFKLSCidQMDRsU8wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDjaXM2LCkb70GCu9VXFC8DILrlXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGNlZGRkMGUtYWRjZi0z
OGE3LWE4NDgtOGRjYjZkNzA2ZWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBI84wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGnnrQP+KJ4fht10ZsX1PIt0XU3Soy7ASefHvvbmst0Nr1sY1oZuczCR4
fQ9YafKHkGmGDsvoR5aNsPTBuQ0Y1Job/oSi0rbErNvqhNinfI1vc4PuYP8gESqR
sWG/EdjkLfltOxwnC+ok/VfemGM9dkoVA9QBeY9TDPJTMpvqEJyibCCaQ9AG0Tj5
9ErrEwnyRKNgrz80djfygVFlICBMPvq4bbwVwxHJh+P1/4BsnIcKDG2MZ7xc4ela
Lxz9uTXZQ3oTRDipYiIDJq86TqzALNyhIu1kYAciYy3fpjx4hVwYn2FKKTfSiEwC
FLVFggsvSZdgRk3CQl9jpICPDog1Jw==
-----END CERTIFICATE-----
Generated at Sat May 10 11:30:17 2025 by rpki-client