Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/833927c7-a93d-37f4-ba84-88454ffda0ab.roa
File: 833927c7-a93d-37f4-ba84-88454ffda0ab.roa (raw, json)
Hash identifier: AGjgFsDPFdqcUf+3YdFYPfERYaIsz9zsm/R5qcjYbKk=
Subject key identifier: 94:5B:F4:7C:5F:EE:EA:09:75:82:A3:67:B7:CC:4B:51:59:01:65:1B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A17BF249DF2CF188A080500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/833927c7-a93d-37f4-ba84-88454ffda0ab.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.235.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:17:bf:24:9d:f2:cf:18:8a:08:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=528b7f94-7f3f-4869-ad2d-1ea80996690e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:fa:2b:1c:33:ed:52:4e:17:39:44:69:8b:
3f:54:1c:a9:4c:cc:83:1b:fb:7d:c7:6b:dd:d7:57:
32:90:08:e7:5f:fe:ba:e3:ca:63:4a:18:9f:34:8d:
59:fb:79:f3:68:e7:a1:70:c3:6b:d4:2c:7d:f5:49:
38:19:28:55:5e:6c:49:93:03:c8:ce:8e:c8:f0:3b:
72:03:42:4f:94:c8:d8:b1:b5:45:43:4c:81:04:38:
b0:cd:a9:67:ea:23:d1:af:a3:b8:0c:9e:84:af:b0:
b3:3e:ea:95:1a:4d:5b:12:af:07:2f:34:3c:fe:23:
e9:33:2c:ed:12:e3:e2:e4:cc:92:52:3b:01:32:64:
09:98:cb:92:8f:7c:45:0d:60:0b:42:b1:b6:4e:4a:
b7:eb:1c:a7:b1:3c:13:c1:b3:a1:2a:0b:e2:88:f2:
00:ac:6f:1b:88:8f:77:c9:0b:25:78:8e:03:93:32:
df:8c:56:e3:b0:ae:7f:54:af:1b:95:fa:e5:b8:c1:
9a:33:81:e1:13:51:1e:65:cf:99:c2:d7:ac:5e:58:
9d:e9:5f:9c:98:b3:e4:4f:42:4b:ab:19:6d:2f:d1:
63:ed:2d:d1:4d:bb:4c:a1:be:ff:dc:da:8c:18:2c:
c5:45:f9:5c:51:ab:8e:2c:7b:78:fe:6a:c6:c0:66:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5B:F4:7C:5F:EE:EA:09:75:82:A3:67:B7:CC:4B:51:59:01:65:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/833927c7-a93d-37f4-ba84-88454ffda0ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.235.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:92:74:24:b3:2c:4b:84:ff:1f:3f:56:37:83:54:9c:85:7a:
de:af:f3:62:5c:29:f2:f1:82:77:62:b0:ef:b7:d3:48:57:57:
6d:a7:2d:31:ff:01:20:a2:26:a6:b9:d2:7f:9f:0a:47:f4:3b:
3d:7c:ad:09:f1:00:f9:8f:7f:91:c9:36:bc:71:b4:21:61:e6:
b9:85:be:2c:3c:e8:1c:e0:f9:30:c4:f7:74:36:d8:5f:21:bd:
03:37:f5:f8:f4:97:6a:99:71:bb:1d:60:8a:cc:77:3e:e4:06:
b8:1e:14:43:4d:b7:be:32:37:48:10:36:34:28:c4:8d:1a:4d:
f8:95:2c:ce:69:a6:1a:a5:31:2b:88:17:93:f9:55:84:8a:7a:
c4:39:26:79:91:59:d5:00:51:c2:0d:cf:ae:66:b4:31:a6:70:
aa:f2:02:83:61:da:73:b7:fe:93:90:05:c4:3f:3d:42:63:67:
b0:bc:a1:dc:52:d8:0e:24:c8:d9:99:06:b7:14:39:3e:de:2c:
32:f6:cc:f4:e0:86:8f:19:9a:89:df:46:4e:b4:2e:db:2c:96:
43:8c:b0:19:b5:d5:db:1d:66:0b:9b:0f:60:70:58:da:8b:3c:
2a:46:58:08:53:73:25:40:d7:7f:c7:9b:8d:aa:18:79:f0:10:
35:f6:05:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKF78knfLPGIoIBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTI4YjdmOTQtN2YzZi00ODY5LWFkMmQtMWVhODA5OTY2OTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWP6Kxwz7VJOFzlEaYs/VBypTMyDG/t9x2vd
11cykAjnX/6648pjShifNI1Z+3nzaOehcMNr1Cx99Uk4GShVXmxJkwPIzo7I8Dty
A0JPlMjYsbVFQ0yBBDiwzaln6iPRr6O4DJ6Er7CzPuqVGk1bEq8HLzQ8/iPpMyzt
EuPi5MySUjsBMmQJmMuSj3xFDWALQrG2Tkq36xynsTwTwbOhKgviiPIArG8biI93
yQsleI4DkzLfjFbjsK5/VK8blfrluMGaM4HhE1EeZc+ZwtesXlid6V+cmLPkT0JL
qxltL9Fj7S3RTbtMob7/3NqMGCzFRflcUauOLHt4/mrGwGZ7GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRb9Hxf7uoJdYKjZ7fMS1FZAWUbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODMzOTI3YzctYTkzZC0z
N2Y0LWJhODQtODg0NTRmZmRhMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+uAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmSdCSzLEuE/x8/VjeDVJyFet6v82JcKfLxgndisO+300hXV22nLTH/
ASCiJqa50n+fCkf0Oz18rQnxAPmPf5HJNrxxtCFh5rmFviw86Bzg+TDE93Q22F8h
vQM39fj0l2qZcbsdYIrMdz7kBrgeFENNt74yN0gQNjQoxI0aTfiVLM5pphqlMSuI
F5P5VYSKesQ5JnmRWdUAUcINz65mtDGmcKryAoNh2nO3/pOQBcQ/PUJjZ7C8odxS
2A4kyNmZBrcUOT7eLDL2zPTgho8ZmonfRk60LtsslkOMsBm11dsdZgubD2BwWNqL
PCpGWAhTcyVA13/Hm42qGHnwEDX2BVA=
-----END CERTIFICATE-----
Generated at Sat May 10 13:35:47 2025 by rpki-client