Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f0d2b5a-9ec9-353d-ba63-201446a06cec.roa
File: 7f0d2b5a-9ec9-353d-ba63-201446a06cec.roa (raw, json)
Hash identifier: SVjdTSn4xTxAcGQPmAv5f7RC5oWXxppSKbBVtOJpZdM=
Subject key identifier: 40:87:82:9E:39:10:6F:23:7A:D8:FF:72:9C:32:64:F5:8F:15:F2:A2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A23706AED5EBC30F87F2440
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f0d2b5a-9ec9-353d-ba63-201446a06cec.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.204.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:23:70:6a:ed:5e:bc:30:f8:7f:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=49cf2230-961f-4b9a-8e8d-c6cbfa428a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5e:3e:c5:4a:8c:82:35:32:6c:cc:b4:b6:fc:
2f:17:8a:58:03:8c:32:4e:99:ea:7b:29:8a:99:2d:
80:c4:ac:6a:d1:1f:da:a8:17:bf:6f:2a:94:aa:9d:
2b:a0:cb:4b:cf:54:8f:4f:de:7a:d6:f2:42:5c:ce:
32:2d:cb:18:49:09:21:a4:ce:b4:0d:7c:11:39:c4:
1a:fd:2a:1c:b6:05:85:57:07:7e:7d:5e:bb:bc:74:
15:02:e7:79:04:a4:08:5f:fd:f8:62:cd:1f:cf:3a:
f8:d6:07:41:c9:9c:fb:35:e5:a7:c8:84:2e:5d:fc:
98:da:e8:22:ba:20:41:0d:06:c2:5a:db:95:7d:4d:
df:f0:6b:62:f5:79:2d:a6:d1:e6:1d:ca:0c:a7:2f:
f8:5e:52:96:fe:79:b9:8f:0d:37:51:b4:08:6f:07:
1f:04:13:d2:1c:94:a1:77:5c:b2:93:c2:04:a7:25:
d4:6e:fe:1b:4e:f7:54:a3:09:12:bf:f1:f0:73:77:
5f:b0:ef:2d:c6:fd:3c:66:be:17:06:bd:1f:85:0e:
0a:8f:a7:1d:cd:78:51:ee:52:fa:bd:7e:36:bd:39:
f7:ce:b4:6b:38:f8:40:24:ba:a1:e8:9e:da:2c:ef:
fe:b2:ee:81:bd:74:ac:cf:b9:54:ab:ce:4e:da:81:
0a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:87:82:9E:39:10:6F:23:7A:D8:FF:72:9C:32:64:F5:8F:15:F2:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f0d2b5a-9ec9-353d-ba63-201446a06cec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.204.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:8c:ec:aa:a4:94:a2:d6:06:3a:7f:d7:c5:4f:99:0f:95:23:
bd:bc:b0:59:a5:75:d2:09:33:b8:50:8d:8d:2c:51:e4:49:50:
e8:45:74:d5:c5:1f:a6:a3:a8:fb:e5:a8:10:68:2b:3e:8c:be:
19:c2:c1:b9:d4:d7:3f:35:99:a8:0e:27:0d:1f:1d:cb:f9:b8:
be:c6:8e:34:0f:de:24:73:de:07:70:97:3b:7e:52:c9:30:64:
7a:cc:92:0b:75:9a:21:35:80:2e:28:c4:ea:54:73:8c:68:f4:
bb:75:6e:57:cc:ba:8b:e4:99:77:57:70:b5:23:04:61:85:91:
ef:8f:ad:05:4a:36:81:ad:9c:8c:6e:1c:fa:cb:99:2b:0b:11:
f9:e3:16:2c:44:27:71:aa:68:96:ee:8a:4a:4e:69:8e:e8:5f:
d2:d1:ca:66:ea:eb:3d:a4:43:d4:1a:00:24:b0:30:6f:14:87:
b3:5d:a1:2b:23:9d:7b:f3:81:34:5e:46:8f:28:29:f5:70:6b:
7b:76:6d:5e:a9:c0:21:ba:cd:6a:01:da:f9:fc:15:b9:91:e5:
c8:74:c3:bc:aa:6a:8b:00:e3:23:5c:0b:7e:db:80:fb:0f:d4:
ad:0f:53:d1:f2:27:84:f1:66:ab:fc:3c:d1:58:f4:f8:85:7e:
49:13:ad:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKI3Bq7V68MPh/JEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NDljZjIyMzAtOTYxZi00YjlhLThlOGQtYzZjYmZhNDI4YTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh14+xUqMgjUybMy0tvwvF4pYA4wyTpnqeymK
mS2AxKxq0R/aqBe/byqUqp0roMtLz1SPT9561vJCXM4yLcsYSQkhpM60DXwROcQa
/SoctgWFVwd+fV67vHQVAud5BKQIX/34Ys0fzzr41gdByZz7NeWnyIQuXfyY2ugi
uiBBDQbCWtuVfU3f8Gti9XktptHmHcoMpy/4XlKW/nm5jw03UbQIbwcfBBPSHJSh
d1yyk8IEpyXUbv4bTvdUowkSv/Hwc3dfsO8txv08Zr4XBr0fhQ4Kj6cdzXhR7lL6
vX42vTn3zrRrOPhAJLqh6J7aLO/+su6BvXSsz7lUq85O2oEKnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECHgp45EG8jetj/cpwyZPWPFfKiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2YwZDJiNWEtOWVjOS0z
NTNkLWJhNjMtMjAxNDQ2YTA2Y2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8zwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACiM7KqklKLWBjp/18VPmQ+VI728sFmlddIJM7hQjY0sUeRJUOhFdNXF
H6ajqPvlqBBoKz6MvhnCwbnU1z81magOJw0fHcv5uL7GjjQP3iRz3gdwlzt+Uskw
ZHrMkgt1miE1gC4oxOpUc4xo9Lt1blfMuovkmXdXcLUjBGGFke+PrQVKNoGtnIxu
HPrLmSsLEfnjFixEJ3GqaJbuikpOaY7oX9LRymbq6z2kQ9QaACSwMG8Uh7NdoSsj
nXvzgTReRo8oKfVwa3t2bV6pwCG6zWoB2vn8FbmR5ch0w7yqaosA4yNcC37bgPsP
1K0PU9HyJ4TxZqv8PNFY9PiFfkkTrUE=
-----END CERTIFICATE-----
Generated at Sun May 11 04:01:34 2025 by rpki-client