Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eac2f5c-7c96-36f7-b28b-55fa63daf9e6.roa
File: 4eac2f5c-7c96-36f7-b28b-55fa63daf9e6.roa (raw, json)
Hash identifier: tx0PTSwYBaL5BYoljzUxlANbKhtv2ccJJ9xtiZoNoYc=
Subject key identifier: 0C:5E:5F:BD:A7:23:2D:39:0D:83:CD:64:F3:31:3D:20:37:8E:40:DE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A195389A98D286B820CE380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eac2f5c-7c96-36f7-b28b-55fa63daf9e6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.204.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:19:53:89:a9:8d:28:6b:82:0c:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9da026a4-8690-472a-a2ea-ddc4b8baf17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:85:ab:62:7e:d4:5c:52:1f:fa:73:18:5a:
61:08:4a:4f:6b:ae:f6:01:1f:69:fa:2e:21:fb:3a:
88:6c:19:7c:33:67:a2:b9:44:7c:a1:6a:01:e6:8a:
69:f6:e4:08:f9:68:e1:70:2d:d5:67:e8:b5:98:98:
96:05:fb:28:22:8b:94:79:f1:03:4a:7f:f0:99:d1:
27:9e:1d:ac:6d:66:21:2c:5d:14:b8:c6:ce:43:f3:
18:bd:b0:0d:8c:55:82:40:42:c8:e6:c9:b4:ac:13:
95:64:e8:6c:7c:99:f4:d9:81:14:d3:0b:2e:23:90:
eb:35:02:d2:2f:c4:38:08:6a:e5:a2:b7:0b:51:cc:
34:2a:6b:9a:be:91:6d:be:67:fb:20:62:e8:41:63:
09:81:3b:ae:42:8f:45:23:c6:03:7a:dc:07:16:47:
c1:1e:79:f0:cc:96:19:36:a8:ce:e5:ad:ea:9d:9d:
4e:43:ce:f9:76:8f:73:1d:23:e9:7b:1c:6e:b3:7d:
b9:3d:94:23:2b:66:11:57:5c:23:d6:80:9f:1f:26:
e4:55:2d:a2:66:ab:61:d6:45:41:1e:c8:46:9b:06:
97:8e:1e:f8:8c:cb:2f:9e:88:85:bb:cd:b5:85:7b:
bf:66:9b:43:b2:15:67:10:22:e1:24:66:fa:d8:58:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5E:5F:BD:A7:23:2D:39:0D:83:CD:64:F3:31:3D:20:37:8E:40:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eac2f5c-7c96-36f7-b28b-55fa63daf9e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.204.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:d8:86:66:7e:e8:df:ba:1a:fb:3a:48:14:2e:eb:4b:ac:50:
cd:0c:58:69:c8:cf:b5:65:79:4f:e8:46:63:bc:67:a7:ad:44:
5f:6d:e7:67:57:c9:43:93:04:88:a5:87:8c:b6:f2:00:bc:f1:
c9:09:f7:8d:a7:8f:1a:74:2c:4a:02:b8:23:96:36:8b:d7:1d:
e0:b8:7d:64:d1:02:b6:38:e2:44:3f:19:ed:52:4a:29:93:be:
d3:c4:12:b6:ca:5e:c1:5f:64:98:66:d9:0d:53:d0:6a:05:29:
10:99:e3:6f:da:86:89:56:d7:74:e8:dd:14:49:fa:9d:b2:60:
61:c6:90:08:df:53:4b:ba:17:24:38:e8:ed:05:80:58:9c:68:
39:51:bd:8f:ae:4d:49:f5:0b:30:4d:4a:00:b3:04:dc:0f:8a:
85:a7:38:72:c7:c5:36:0c:66:86:6e:a4:fe:a7:67:d8:fa:a4:
85:f6:17:d0:5e:cc:51:69:02:68:fb:fb:a4:f8:b7:df:b5:a5:
05:48:e5:f7:1a:2d:75:b0:3e:b6:69:58:48:b2:86:71:e9:e4:
3e:dc:8f:33:9f:c1:ab:97:3a:00:25:fc:ea:b0:81:f5:cc:40:
c7:e5:3a:ed:1d:c7:19:cb:a9:fc:23:39:59:9b:6f:67:bc:8b:
c3:d5:8e:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGVOJqY0oa4IM44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OWRhMDI2YTQtODY5MC00NzJhLWEyZWEtZGRjNGI4YmFmMTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQCFq2J+1FxSH/pzGFphCEpPa672AR9p+i4h
+zqIbBl8M2eiuUR8oWoB5opp9uQI+WjhcC3VZ+i1mJiWBfsoIouUefEDSn/wmdEn
nh2sbWYhLF0UuMbOQ/MYvbANjFWCQELI5sm0rBOVZOhsfJn02YEU0wsuI5DrNQLS
L8Q4CGrlorcLUcw0KmuavpFtvmf7IGLoQWMJgTuuQo9FI8YDetwHFkfBHnnwzJYZ
NqjO5a3qnZ1OQ875do9zHSPpexxus325PZQjK2YRV1wj1oCfHybkVS2iZqth1kVB
HshGmwaXjh74jMsvnoiFu821hXu/ZptDshVnECLhJGb62FhJmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAxeX72nIy05DYPNZPMxPSA3jkDeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGVhYzJmNWMtN2M5Ni0z
NmY3LWIyOGItNTVmYTYzZGFmOWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8zAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbYhmZ+6N+6Gvs6SBQu60usUM0MWGnIz7VleU/oRmO8Z6etRF9t52dX
yUOTBIilh4y28gC88ckJ942njxp0LEoCuCOWNovXHeC4fWTRArY44kQ/Ge1SSimT
vtPEErbKXsFfZJhm2Q1T0GoFKRCZ42/aholW13To3RRJ+p2yYGHGkAjfU0u6FyQ4
6O0FgFicaDlRvY+uTUn1CzBNSgCzBNwPioWnOHLHxTYMZoZupP6nZ9j6pIX2F9Be
zFFpAmj7+6T4t9+1pQVI5fcaLXWwPrZpWEiyhnHp5D7cjzOfwauXOgAl/OqwgfXM
QMflOu0dxxnLqfwjOVmbb2e8i8PVjgw=
-----END CERTIFICATE-----
Generated at Sat May 10 14:49:01 2025 by rpki-client