Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86032ebf-65e9-30d0-8d04-114da0cffd0a.roa
File: 86032ebf-65e9-30d0-8d04-114da0cffd0a.roa (raw, json)
Hash identifier: Q2TeRX+GIYOrPuHIuK8wwaVhIERMRIZp4p98VGMNZS8=
Subject key identifier: C5:32:1F:47:AF:FE:77:CD:0F:A1:3B:1A:77:AB:29:8B:9C:82:85:EF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F3BBBCE62F6536338BEA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86032ebf-65e9-30d0-8d04-114da0cffd0a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.226.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f3:bb:bc:e6:2f:65:36:33:8b:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9e045e25-f0a7-46e2-bf91-f55c4ae8d4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:f2:49:15:80:65:ec:9a:fd:6a:75:f4:90:
a5:c2:4f:c2:fc:d7:07:15:8e:9f:e9:ce:34:09:fd:
c6:2d:a1:20:50:1c:73:11:e4:92:eb:ef:b1:bf:6d:
b3:e4:06:e1:7b:84:e4:34:37:40:a3:8f:cb:4a:40:
e2:49:29:61:3c:0a:98:b5:c1:4b:8c:28:4a:a2:bc:
26:5f:4b:b4:f7:6e:62:63:bf:08:d7:0e:c3:f4:48:
65:76:b3:91:2e:74:e9:a8:6c:24:aa:72:34:4b:71:
7f:4d:df:47:ea:e3:46:85:d9:2b:82:6b:63:ad:bd:
4d:10:91:57:4d:a8:a5:15:96:c1:6f:21:9e:d6:c6:
02:f4:03:61:78:a1:00:2a:65:91:8d:53:86:6e:01:
aa:db:98:4b:a3:1a:4d:21:d8:46:8c:24:76:f6:ef:
94:b9:45:e6:13:6e:d8:c9:e5:66:62:18:7e:3d:55:
a9:55:24:ae:52:0c:c1:e5:76:fc:9c:1a:70:e6:02:
29:a1:14:e3:da:7e:de:5c:98:69:28:53:ea:6e:86:
a2:ab:06:5d:0f:52:82:ae:7d:0f:6c:73:33:54:89:
57:37:7c:55:b8:b8:17:00:89:ce:cf:89:c0:bb:ee:
4a:46:e6:2f:c3:7d:28:c2:82:3c:b5:af:29:7d:ca:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:32:1F:47:AF:FE:77:CD:0F:A1:3B:1A:77:AB:29:8B:9C:82:85:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86032ebf-65e9-30d0-8d04-114da0cffd0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.226.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:94:5b:ee:ef:74:2e:30:15:4b:09:92:e4:8f:56:7d:19:af:
c8:8c:40:c8:12:c4:a0:7d:ea:72:35:94:70:fc:43:a1:36:c0:
ae:0e:a7:3c:7c:3d:0a:a2:46:26:72:1e:54:99:eb:23:27:4b:
d9:93:a0:e1:e9:b5:82:a0:ca:55:68:e4:74:f7:4d:1e:e3:b5:
6a:df:2a:5a:b3:2e:63:20:fd:66:f3:dc:93:b7:b3:40:39:0f:
bf:ec:1c:d7:a6:5e:ea:9d:5a:5e:61:48:c4:1a:db:f7:39:26:
88:df:17:87:12:6a:aa:4c:17:83:ae:eb:dd:45:5d:f7:5b:ba:
d6:36:bf:2b:20:80:50:ce:2e:f8:fb:1a:d9:69:7b:1c:20:2c:
a1:f6:fb:20:98:94:24:f4:a4:f8:2c:0f:fb:a3:f4:e9:9b:2b:
b3:56:6f:89:e2:db:87:98:13:eb:31:71:fa:03:a8:41:b0:4c:
c4:5b:80:04:3c:39:00:5d:df:7d:81:51:1c:6b:13:d7:d0:50:
b6:ce:12:8e:3e:6b:2b:c5:a1:b1:bc:a1:39:d7:4a:7a:45:08:
21:3b:ad:06:d2:12:e0:88:8d:ad:cd:e7:c0:a5:d6:d0:80:04:
36:c5:c5:0c:ed:49:82:07:a2:2b:25:51:a3:16:22:3c:d0:21:
27:c9:f3:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ87u85i9lNjOL6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OWUwNDVlMjUtZjBhNy00NmUyLWJmOTEtZjU1YzRhZThkNGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLzySRWAZeya/Wp19JClwk/C/NcHFY6f6c40
Cf3GLaEgUBxzEeSS6++xv22z5Abhe4TkNDdAo4/LSkDiSSlhPAqYtcFLjChKorwm
X0u0925iY78I1w7D9EhldrORLnTpqGwkqnI0S3F/Td9H6uNGhdkrgmtjrb1NEJFX
TailFZbBbyGe1sYC9ANheKEAKmWRjVOGbgGq25hLoxpNIdhGjCR29u+UuUXmE27Y
yeVmYhh+PVWpVSSuUgzB5Xb8nBpw5gIpoRTj2n7eXJhpKFPqboaiqwZdD1KCrn0P
bHMzVIlXN3xVuLgXAInOz4nAu+5KRuYvw30owoI8ta8pfcpXxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMUyH0ev/nfND6E7GnerKYucgoXvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODYwMzJlYmYtNjVlOS0z
MGQwLThkMDQtMTE0ZGEwY2ZmZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+IQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKUW+7vdC4wFUsJkuSPVn0Zr8iMQMgSxKB96nI1lHD8Q6E2wK4Opzx8
PQqiRiZyHlSZ6yMnS9mToOHptYKgylVo5HT3TR7jtWrfKlqzLmMg/Wbz3JO3s0A5
D7/sHNemXuqdWl5hSMQa2/c5JojfF4cSaqpMF4Ou691FXfdbutY2vysggFDOLvj7
GtlpexwgLKH2+yCYlCT0pPgsD/uj9OmbK7NWb4ni24eYE+sxcfoDqEGwTMRbgAQ8
OQBd332BURxrE9fQULbOEo4+ayvFobG8oTnXSnpFCCE7rQbSEuCIja3N58Cl1tCA
BDbFxQztSYIHoislUaMWIjzQISfJ88w=
-----END CERTIFICATE-----
Generated at Sat May 10 12:28:40 2025 by rpki-client