Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58ee0733-d005-327e-a25c-45d5e05e189a.roa
File: 58ee0733-d005-327e-a25c-45d5e05e189a.roa (raw, json)
Hash identifier: qzd8sFkUsQ2Cr6Fch36GnN46GBehz3zNfQUJkf1hrMg=
Subject key identifier: DA:2C:E8:87:4D:19:FA:81:62:F1:D5:BF:03:8C:A6:07:F2:C3:44:4F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A25564AF0C189DE1A273BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58ee0733-d005-327e-a25c-45d5e05e189a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.188.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:25:56:4a:f0:c1:89:de:1a:27:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=68786c7b-2e40-4980-a34f-5de29e4e205f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:69:35:be:c1:1e:61:8e:b6:70:f2:f0:67:
b6:89:04:7d:28:9a:8a:a0:4b:81:ba:4d:30:5f:a9:
16:b5:c7:3b:a9:e8:8c:52:c8:c3:55:62:73:5d:08:
57:5e:a0:09:b0:1f:05:16:1f:64:8a:f3:5c:52:10:
2f:b2:34:ad:cc:00:80:20:ec:3c:ea:c3:f6:48:27:
00:48:80:c2:b4:78:fe:70:07:c3:18:b4:c6:5d:3c:
25:e2:19:49:2e:db:34:10:7f:7f:c9:ba:f8:1a:49:
30:73:59:65:6a:4a:9e:27:e6:5b:68:e9:5a:e5:60:
8e:fb:68:59:7e:db:b8:dc:8e:4e:f6:64:95:f3:73:
ad:81:f4:45:b1:ea:8b:e4:ff:49:0f:16:1f:8c:b1:
aa:b6:34:76:7d:60:79:8b:f9:e9:18:6a:51:85:66:
6b:36:8a:b5:3d:aa:15:79:cc:31:af:94:f4:3b:b9:
ad:a4:f9:a5:7e:2b:34:06:18:90:97:b7:5d:01:88:
82:83:3f:06:7d:6c:67:ee:f9:8a:65:ca:af:b1:ac:
68:53:78:37:64:ac:80:c6:ab:a9:ad:2f:ee:d2:da:
b1:7e:da:12:fc:22:4c:ca:df:41:99:97:4b:99:48:
5c:41:2d:0f:a9:5c:1f:ba:49:f1:98:2b:c8:a8:25:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2C:E8:87:4D:19:FA:81:62:F1:D5:BF:03:8C:A6:07:F2:C3:44:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58ee0733-d005-327e-a25c-45d5e05e189a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:e2:d3:dc:dc:ba:0d:18:ac:a5:50:f9:a3:d6:38:eb:00:a6:
e1:32:aa:e3:ff:48:96:c7:d8:09:84:3b:a5:01:17:7d:c0:60:
a6:b0:9e:c7:79:c8:7c:21:6e:a6:f3:07:11:c6:b0:c7:45:35:
53:a3:5e:90:94:a4:fc:27:eb:8d:b1:ce:eb:c2:67:22:5e:6f:
d4:bd:e0:14:f1:36:d5:32:95:c2:48:28:41:f7:51:a8:70:54:
02:8b:26:66:3a:1c:4a:f5:a3:59:0c:09:59:51:9f:48:d8:81:
ae:36:47:35:b3:fb:22:2b:38:f5:16:2d:23:9d:19:8e:ad:6b:
b5:bf:b7:88:7a:f2:58:0a:0f:a2:4c:ce:c5:db:22:92:11:ee:
9d:0b:68:1f:47:47:4c:1e:65:8e:f3:af:5c:c1:22:4b:2d:3d:
e4:27:87:dc:85:80:28:5e:1d:ea:9e:42:db:24:36:7c:5d:28:
ab:4f:9f:1a:4a:ac:01:fb:ab:7b:0c:fd:81:36:4a:1e:da:53:
14:f7:d9:11:c8:a2:f3:d2:cc:9a:29:0c:a2:6f:eb:2a:b8:d9:
80:58:11:c3:f2:62:03:4b:4c:2b:e0:8c:a8:eb:7c:68:aa:94:
c7:77:65:64:b1:d2:ca:3c:66:5d:25:4b:f6:e0:f9:4a:ef:fa:
a9:19:e2:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJVZK8MGJ3honO8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
Njg3ODZjN2ItMmU0MC00OTgwLWEzNGYtNWRlMjllNGUyMDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrxpNb7BHmGOtnDy8Ge2iQR9KJqKoEuBuk0w
X6kWtcc7qeiMUsjDVWJzXQhXXqAJsB8FFh9kivNcUhAvsjStzACAIOw86sP2SCcA
SIDCtHj+cAfDGLTGXTwl4hlJLts0EH9/ybr4Gkkwc1llakqeJ+ZbaOla5WCO+2hZ
ftu43I5O9mSV83OtgfRFseqL5P9JDxYfjLGqtjR2fWB5i/npGGpRhWZrNoq1PaoV
ecwxr5T0O7mtpPmlfis0BhiQl7ddAYiCgz8GfWxn7vmKZcqvsaxoU3g3ZKyAxqup
rS/u0tqxftoS/CJMyt9BmZdLmUhcQS0PqVwfuknxmCvIqCUM5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNos6IdNGfqBYvHVvwOMpgfyw0RPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNThlZTA3MzMtZDAwNS0z
MjdlLWEyNWMtNDVkNWUwNWUxODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7zgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACji09zcug0YrKVQ+aPWOOsApuEyquP/SJbH2AmEO6UBF33AYKawnsd5
yHwhbqbzBxHGsMdFNVOjXpCUpPwn642xzuvCZyJeb9S94BTxNtUylcJIKEH3Uahw
VAKLJmY6HEr1o1kMCVlRn0jYga42RzWz+yIrOPUWLSOdGY6ta7W/t4h68lgKD6JM
zsXbIpIR7p0LaB9HR0weZY7zr1zBIkstPeQnh9yFgCheHeqeQtskNnxdKKtPnxpK
rAH7q3sM/YE2Sh7aUxT32RHIovPSzJopDKJv6yq42YBYEcPyYgNLTCvgjKjrfGiq
lMd3ZWSx0so8Zl0lS/bg+Urv+qkZ4tA=
-----END CERTIFICATE-----
Generated at Sat May 10 11:32:07 2025 by rpki-client