Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6285fd82-1d7a-3efb-80d8-3a96e506b2f0.roa
File: 6285fd82-1d7a-3efb-80d8-3a96e506b2f0.roa (raw, json)
Hash identifier: pI0rIUNoH3BaCLuT3j+Lt2f3nLyqIYOIJ8Wv6TGzgVo=
Subject key identifier: 8D:F9:F4:F0:81:20:E7:C0:46:AE:8D:8F:B7:82:71:CB:0E:82:76:AB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BF064EB82D18F54E53DE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6285fd82-1d7a-3efb-80d8-3a96e506b2f0.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 19527
IP address blocks: 35.219.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bf:06:4e:b8:2d:18:f5:4e:53:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=2eb3d61a-933c-461e-898a-3f7867ca018b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:03:ea:3a:a2:e8:4b:86:91:e8:09:56:51:
42:67:23:f5:e9:cf:99:68:42:7b:48:4d:69:e6:c4:
79:94:0a:24:ab:c9:c8:8b:2b:c9:17:3b:d9:38:0a:
96:d6:34:c2:3c:94:5d:e8:67:9b:ef:1e:71:42:cd:
4a:a2:8a:43:a0:f3:54:a7:bf:51:b3:43:cf:20:d9:
0e:4d:81:09:98:36:e8:bc:3f:19:2e:d0:fb:d9:db:
fd:df:af:ef:24:e6:1f:ee:96:4f:91:a4:fb:48:70:
a4:18:5f:4b:c0:65:3e:e4:ff:6e:03:5f:5b:87:f5:
fc:de:f6:2e:b0:ba:71:3c:52:a5:09:ee:5a:04:36:
55:47:77:76:38:b7:2a:77:03:ac:23:e8:cf:09:2d:
2a:cc:8e:87:3b:7b:6e:5a:5d:26:c9:34:25:c6:70:
68:1d:91:f2:86:4a:3c:ce:75:80:2f:b8:3e:c1:33:
b0:0e:c9:ea:0f:b9:97:f0:1b:2e:96:36:bf:3b:34:
14:c0:f0:c0:d9:0a:a2:d4:2e:d3:98:db:9f:12:79:
0a:0b:0c:8f:a4:1f:38:20:d7:8f:55:58:b3:02:76:
94:ff:b0:50:27:f1:ca:db:80:68:84:de:8e:d9:b8:
b1:02:d1:d5:b8:49:6f:3d:be:74:b6:16:4f:22:36:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F9:F4:F0:81:20:E7:C0:46:AE:8D:8F:B7:82:71:CB:0E:82:76:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6285fd82-1d7a-3efb-80d8-3a96e506b2f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.219.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:1d:31:f7:36:b6:6f:3c:00:e6:86:e3:68:05:3f:ee:59:f8:
3b:a9:6c:9b:c7:06:c6:f9:9a:ed:c5:c9:d9:45:b6:5b:14:74:
a5:e4:3b:4a:c2:73:a2:b5:8c:f3:76:22:80:43:76:97:f9:50:
5d:6d:4c:99:8b:c4:ea:3f:4e:19:56:8f:60:1e:87:ea:48:6f:
ec:d1:35:aa:20:a1:84:86:b7:86:d6:46:11:ed:a2:bf:a0:1f:
94:78:04:0c:ee:72:90:60:3c:ac:f5:23:2e:3a:68:16:2a:8e:
31:18:30:5a:52:24:6f:04:28:c3:f4:86:ae:3f:e5:a0:cd:46:
ee:70:ce:78:e5:c0:5e:61:7c:2b:2b:e4:76:ca:97:03:70:c6:
b3:0e:4c:fc:dc:df:e2:8d:67:97:6d:3e:4e:f6:8e:77:63:ba:
63:9f:24:2d:c8:e1:73:92:4c:3f:9a:1c:5b:b2:a4:01:0e:46:
2d:e9:a9:f1:d7:40:77:d6:50:24:fa:af:74:42:97:d8:50:9f:
ac:4e:3a:25:6a:b6:0d:7d:ef:27:a8:81:77:92:29:5e:c4:be:
1f:af:52:49:44:70:35:52:d4:41:9c:27:be:2b:24:a7:a0:ea:
8b:f8:4a:a1:12:91:90:b2:51:13:45:ec:d6:8e:db:4d:a6:0d:
a2:b2:b5:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnvwZOuC0Y9U5T3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MmViM2Q2MWEtOTMzYy00NjFlLTg5OGEtM2Y3ODY3Y2EwMThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYED6jqi6EuGkegJVlFCZyP16c+ZaEJ7SE1p
5sR5lAokq8nIiyvJFzvZOAqW1jTCPJRd6Geb7x5xQs1KoopDoPNUp79Rs0PPINkO
TYEJmDbovD8ZLtD72dv936/vJOYf7pZPkaT7SHCkGF9LwGU+5P9uA19bh/X83vYu
sLpxPFKlCe5aBDZVR3d2OLcqdwOsI+jPCS0qzI6HO3tuWl0myTQlxnBoHZHyhko8
znWAL7g+wTOwDsnqD7mX8Bsulja/OzQUwPDA2Qqi1C7TmNufEnkKCwyPpB84INeP
VVizAnaU/7BQJ/HK24BohN6O2bixAtHVuElvPb50thZPIjajkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI359PCBIOfARq6Nj7eCccsOgnarMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjI4NWZkODItMWQ3YS0z
ZWZiLTgwZDgtM2E5NmU1MDZiMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9sAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMdMfc2tm88AOaG42gFP+5Z+DupbJvHBsb5mu3FydlFtlsUdKXkO0rC
c6K1jPN2IoBDdpf5UF1tTJmLxOo/ThlWj2Aeh+pIb+zRNaogoYSGt4bWRhHtor+g
H5R4BAzucpBgPKz1Iy46aBYqjjEYMFpSJG8EKMP0hq4/5aDNRu5wznjlwF5hfCsr
5HbKlwNwxrMOTPzc3+KNZ5dtPk72jndjumOfJC3I4XOSTD+aHFuypAEORi3pqfHX
QHfWUCT6r3RCl9hQn6xOOiVqtg197yeogXeSKV7Evh+vUklEcDVS1EGcJ74rJKeg
6ov4SqESkZCyURNF7NaO202mDaKytWs=
-----END CERTIFICATE-----
Generated at Sat May 10 14:40:09 2025 by rpki-client