Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d74b120-3012-32d6-a1a4-cab352922105.roa
File: 7d74b120-3012-32d6-a1a4-cab352922105.roa (raw, json)
Hash identifier: N6B5rMIB4QaLgeQSfCn2B1BEjwXbZqBfDAAC4rx9Me8=
Subject key identifier: 6B:87:3B:ED:B0:25:23:6A:C9:72:C8:D1:B3:97:5F:EB:6E:D8:85:42
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F7313614D63FD0C86A1CC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d74b120-3012-32d6-a1a4-cab352922105.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f7:31:36:14:d6:3f:d0:c8:6a:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=12062fe4-3812-4689-9cc3-5de6920282ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:b1:af:f7:18:53:e6:f8:03:bd:e0:b5:50:
ed:ea:31:5e:d9:07:0c:f8:6b:4f:e1:69:96:0e:76:
6b:e6:67:a9:6e:31:3d:71:20:03:ec:18:1e:61:a8:
c3:ea:70:24:14:43:70:c5:dd:f0:f9:07:d9:c0:c1:
ea:fd:f0:f6:8a:0d:46:d4:d7:70:28:07:e6:40:d2:
81:10:6f:bb:9b:fb:2d:01:b9:cf:21:53:45:23:ef:
41:c6:30:46:31:aa:f1:4c:5e:22:ea:45:02:12:71:
67:12:aa:ab:a8:bf:59:40:a3:d4:ea:82:34:44:1c:
16:f2:cf:10:e1:fd:bc:a6:af:23:98:c7:79:b5:25:
8c:3c:6b:1c:94:63:d0:85:df:e0:cd:78:e9:bc:2b:
f3:c7:00:a1:04:ff:82:8c:8d:1f:13:b2:22:0b:92:
cb:f4:f8:9a:85:a0:ae:21:3b:9c:e9:74:8b:24:5e:
06:92:79:78:41:a5:c2:bb:dc:bf:4d:04:8c:b4:9c:
71:8c:0b:7a:7b:96:61:1e:c5:a5:fb:b9:9a:60:6f:
55:46:d3:a0:b2:3a:03:db:f4:c6:1f:62:f4:4c:71:
6e:86:01:67:10:29:08:71:a7:62:0f:43:fb:5e:2a:
d8:70:52:0c:8d:90:5c:80:c7:ed:75:4e:2c:90:b3:
95:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:87:3B:ED:B0:25:23:6A:C9:72:C8:D1:B3:97:5F:EB:6E:D8:85:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d74b120-3012-32d6-a1a4-cab352922105.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:7a:02:21:9a:72:72:17:70:19:aa:f1:78:d3:ea:7b:cc:64:
b7:f7:f8:f9:ba:5b:cf:b1:8b:4e:26:ee:18:db:aa:06:84:ed:
6d:a2:ca:cf:ef:ed:98:3f:9e:39:d2:e4:11:a6:4b:e2:ce:d8:
42:17:5d:db:4c:da:1e:a1:12:69:c1:67:89:e9:5d:dc:e8:bf:
22:db:01:d3:13:10:7e:f3:fd:f3:08:0e:09:dd:64:f2:f5:f4:
a7:a7:09:14:01:9c:3e:37:74:cd:c9:7f:ea:94:f9:6a:22:48:
25:91:c7:86:2f:bc:fb:e2:fe:93:bf:38:61:e1:4b:a5:ba:e3:
ed:2a:2d:e7:2f:d0:99:37:43:1b:8f:95:b3:bb:07:fb:7b:cc:
b0:21:0b:f8:15:a7:70:44:b0:a0:ca:22:b1:60:33:6d:28:7b:
1b:24:91:3b:75:ab:91:92:98:d4:aa:e2:14:80:8f:5b:aa:a9:
5a:08:03:c3:1f:73:02:31:9b:e9:c2:80:30:ea:f5:1a:a4:cf:
72:8d:25:d1:6b:58:91:e5:e1:bd:9f:37:21:05:89:1e:32:06:
2c:11:79:76:a8:18:01:99:c6:9f:05:43:60:97:be:cb:30:7c:
b2:62:c2:d6:ed:5b:0b:4e:4e:92:9e:98:49:87:d3:3e:1c:b9:
a8:2d:62:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ9zE2FNY/0MhqHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTIwNjJmZTQtMzgxMi00Njg5LTljYzMtNWRlNjkyMDI4MmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXSxr/cYU+b4A73gtVDt6jFe2QcM+GtP4WmW
DnZr5mepbjE9cSAD7BgeYajD6nAkFENwxd3w+QfZwMHq/fD2ig1G1NdwKAfmQNKB
EG+7m/stAbnPIVNFI+9BxjBGMarxTF4i6kUCEnFnEqqrqL9ZQKPU6oI0RBwW8s8Q
4f28pq8jmMd5tSWMPGsclGPQhd/gzXjpvCvzxwChBP+CjI0fE7IiC5LL9PiahaCu
ITuc6XSLJF4Gknl4QaXCu9y/TQSMtJxxjAt6e5ZhHsWl+7maYG9VRtOgsjoD2/TG
H2L0THFuhgFnECkIcadiD0P7XirYcFIMjZBcgMftdU4skLOVUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGuHO+2wJSNqyXLI0bOXX+tu2IVCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2Q3NGIxMjAtMzAxMi0z
MmQ2LWExYTQtY2FiMzUyOTIyMTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI974MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADh6AiGacnIXcBmq8XjT6nvMZLf3+Pm6W8+xi04m7hjbqgaE7W2iys/v
7Zg/njnS5BGmS+LO2EIXXdtM2h6hEmnBZ4npXdzovyLbAdMTEH7z/fMIDgndZPL1
9KenCRQBnD43dM3Jf+qU+WoiSCWRx4YvvPvi/pO/OGHhS6W64+0qLecv0Jk3QxuP
lbO7B/t7zLAhC/gVp3BEsKDKIrFgM20oexskkTt1q5GSmNSq4hSAj1uqqVoIA8Mf
cwIxm+nCgDDq9Rqkz3KNJdFrWJHl4b2fNyEFiR4yBiwReXaoGAGZxp8FQ2CXvssw
fLJiwtbtWwtOTpKemEmH0z4cuagtYqY=
-----END CERTIFICATE-----
Generated at Sat May 10 13:27:07 2025 by rpki-client