Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/599509a5-458e-39c3-872c-e1914287028a.roa
File: 599509a5-458e-39c3-872c-e1914287028a.roa (raw, json)
Hash identifier: 0TLiqZd795oQ166cCTBgOaPitrsYrRaqKwVNtsGVVnU=
Subject key identifier: 6C:38:A1:57:4B:0E:EE:E9:FE:70:B8:F5:A9:C8:39:C5:08:7B:A9:EB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A24996CF528EF7DF76BE580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/599509a5-458e-39c3-872c-e1914287028a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.192.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:99:6c:f5:28:ef:7d:f7:6b:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=54e45d4d-702a-4fda-8bbf-019972c0fe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7b:5c:b1:2b:21:a7:c8:1c:65:3e:5e:33:a9:
1c:17:db:01:0a:a9:5d:79:83:a6:67:31:5a:a9:ba:
b5:03:09:f2:89:db:8c:0b:c0:2a:85:b9:cc:79:26:
0c:44:ee:4d:a2:d6:84:74:90:d2:aa:5e:c6:1a:6a:
2d:12:f1:49:6f:f7:6f:89:28:02:84:9c:32:31:03:
6d:13:4d:a4:21:60:47:91:b7:54:b3:42:b9:28:26:
31:84:46:6a:11:d4:a5:cc:ac:59:a8:c6:66:6d:62:
d3:f4:7f:f4:ef:74:25:1e:2b:08:4a:fd:77:84:cf:
12:c3:0a:29:13:de:5c:67:16:70:cd:bb:7c:6d:a6:
95:ee:ef:75:52:e7:a8:c7:75:2b:2d:26:9c:38:0a:
73:ee:0c:53:7e:ea:bb:06:ec:88:57:ac:0f:d7:31:
c2:cd:1a:34:4f:fc:b7:6b:d5:d5:97:a2:a5:bc:bd:
58:64:87:55:42:95:e5:c8:56:61:59:21:95:b3:da:
0f:83:3b:1c:53:1f:2d:6c:94:d8:f7:91:be:ca:11:
93:66:74:19:5e:11:63:c4:c3:1e:ce:72:b9:45:fc:
5d:b2:a0:d7:a3:4b:62:50:82:ec:1c:41:5f:df:cd:
46:8b:ce:80:74:62:61:05:e7:6f:b7:c0:65:99:08:
1f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:38:A1:57:4B:0E:EE:E9:FE:70:B8:F5:A9:C8:39:C5:08:7B:A9:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/599509a5-458e-39c3-872c-e1914287028a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.192.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:06:bc:ff:97:c3:f7:dd:50:f9:30:d2:39:77:7f:9a:15:25:
06:1b:12:c3:b6:92:fb:83:ec:43:5c:4e:7c:51:44:7c:ff:90:
74:d5:cb:58:c9:ef:60:42:d0:5f:8b:fe:1b:4d:58:5e:db:34:
13:e7:48:81:9a:fb:16:9e:ff:ef:d6:6e:4e:0a:d2:c2:1c:2a:
b9:2b:48:28:42:42:8b:85:af:f8:14:02:70:a6:c4:53:d3:69:
00:1c:75:99:df:3d:71:c3:e1:bf:dd:1d:b8:2f:85:d0:66:e5:
08:5f:d5:76:a6:56:39:a3:49:d8:fb:f7:34:8c:74:8f:d8:76:
20:41:c9:ed:a5:42:23:be:9c:93:1c:3e:16:ee:cf:8d:d2:da:
3f:d1:ea:37:72:af:8e:50:ee:b3:13:5c:82:32:21:11:54:05:
e8:1d:bd:f0:d8:a1:0c:59:1d:09:1c:72:b8:42:42:3f:1f:82:
99:50:3d:3b:14:8c:0c:d2:75:0d:60:3c:ec:0b:c3:dd:9f:94:
b5:06:4c:18:25:64:c8:cf:65:a7:3d:21:b8:eb:93:5e:24:9e:
45:bc:94:d1:62:9d:0f:6b:81:e8:d1:b2:ca:01:e5:c6:5a:92:
db:39:a4:6f:c2:c4:d1:7c:3e:63:45:af:b9:62:d7:1e:8f:de:
56:f5:d6:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJJls9Sjvffdr5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTRlNDVkNGQtNzAyYS00ZmRhLThiYmYtMDE5OTcyYzBmZTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHtcsSshp8gcZT5eM6kcF9sBCqldeYOmZzFa
qbq1AwnyiduMC8AqhbnMeSYMRO5NotaEdJDSql7GGmotEvFJb/dviSgChJwyMQNt
E02kIWBHkbdUs0K5KCYxhEZqEdSlzKxZqMZmbWLT9H/073QlHisISv13hM8Swwop
E95cZxZwzbt8baaV7u91Uueox3UrLSacOApz7gxTfuq7BuyIV6wP1zHCzRo0T/y3
a9XVl6KlvL1YZIdVQpXlyFZhWSGVs9oPgzscUx8tbJTY95G+yhGTZnQZXhFjxMMe
znK5RfxdsqDXo0tiUILsHEFf381Gi86AdGJhBedvt8BlmQgfEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGw4oVdLDu7p/nC49anIOcUIe6nrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTk5NTA5YTUtNDU4ZS0z
OWMzLTg3MmMtZTE5MTQyODcwMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8AQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0GvP+Xw/fdUPkw0jl3f5oVJQYbEsO2kvuD7ENcTnxRRHz/kHTVy1jJ
72BC0F+L/htNWF7bNBPnSIGa+xae/+/Wbk4K0sIcKrkrSChCQouFr/gUAnCmxFPT
aQAcdZnfPXHD4b/dHbgvhdBm5Qhf1XamVjmjSdj79zSMdI/YdiBBye2lQiO+nJMc
Phbuz43S2j/R6jdyr45Q7rMTXIIyIRFUBegdvfDYoQxZHQkccrhCQj8fgplQPTsU
jAzSdQ1gPOwLw92flLUGTBglZMjPZac9Ibjrk14knkW8lNFinQ9rgejRssoB5cZa
kts5pG/CxNF8PmNFr7li1x6P3lb11j4=
-----END CERTIFICATE-----
Generated at Sat May 10 19:51:29 2025 by rpki-client