Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/899b5efd-dd4a-3519-98a2-4f310b17c9e1.roa
File: 899b5efd-dd4a-3519-98a2-4f310b17c9e1.roa (raw, json)
Hash identifier: GwX9DyZYKaT3crK2/iUlrfjFYLmh0HBxiFCrPG/Y8YU=
Subject key identifier: F2:0D:70:EF:19:A5:E9:F4:15:4E:4E:E2:76:0B:1B:D9:8C:EF:66:80
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A100559CB49F827508CCA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/899b5efd-dd4a-3519-98a2-4f310b17c9e1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 104.199.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:10:05:59:cb:49:f8:27:50:8c:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=908bc066-7019-46c6-940a-f33bbe2d1826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:4e:5d:90:ac:ad:5b:b6:b1:ae:68:b3:79:
6e:cf:63:85:f8:54:50:d8:74:56:c6:32:91:53:a2:
30:75:0e:b7:7b:7c:8f:2d:e4:cd:69:30:b1:00:1f:
e6:c3:37:b2:53:59:de:f5:9e:d8:a5:51:81:16:db:
17:a7:ea:1b:87:55:79:86:f7:dd:c7:5d:79:1f:7a:
48:46:9e:f0:50:be:80:d3:a9:75:0a:8e:19:61:4e:
16:c4:c4:e3:31:9e:66:e1:4d:96:14:97:66:71:36:
6a:4f:44:f5:1b:1b:b0:b0:93:84:ed:d4:df:48:68:
d6:b7:b8:c6:bd:a9:2d:b1:41:35:c4:6d:cd:7a:cc:
8a:fd:26:b4:ae:b1:76:d0:30:1c:9b:eb:73:ab:71:
df:b9:18:99:fd:65:ee:39:70:37:d9:f0:3b:a6:de:
aa:aa:66:5d:93:94:fa:1f:ea:76:4b:85:38:53:db:
ce:63:3a:83:08:94:a9:ce:47:89:eb:0e:02:82:eb:
00:68:3d:3a:64:9f:79:ff:c0:29:14:5c:5f:cb:da:
1c:b6:e9:53:88:ba:7a:98:ca:a1:b4:a6:24:6f:73:
22:91:a2:a9:ef:d8:51:6f:f1:5c:64:69:b0:b3:b6:
78:9a:6f:d8:9c:66:cc:32:12:12:97:85:83:ed:5d:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0D:70:EF:19:A5:E9:F4:15:4E:4E:E2:76:0B:1B:D9:8C:EF:66:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/899b5efd-dd4a-3519-98a2-4f310b17c9e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.199.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:aa:9e:89:c5:9d:5f:21:c3:3f:9b:34:e5:12:a3:11:ff:cb:
54:a3:22:81:cb:80:55:b2:59:1f:1a:f6:c0:6a:ae:54:f1:6b:
fd:8d:c1:3e:4b:f6:ca:fb:49:dc:31:90:ef:ac:66:14:48:12:
c8:9b:35:3a:f2:e8:b7:1f:e6:e1:16:7a:fe:63:a8:fb:b3:dd:
e9:31:3a:91:6c:84:7f:2d:e2:da:9c:28:45:4e:dd:dc:f1:67:
26:06:be:d8:50:9f:d2:f2:a3:64:3e:a7:14:16:fd:56:84:b6:
90:75:eb:92:28:25:9d:8f:14:a5:21:77:f6:47:f0:3a:b9:1a:
08:49:67:4e:cd:db:68:1f:ba:b6:c9:bb:a5:15:4a:8f:e9:2f:
bc:94:0a:8e:36:7c:72:6a:ae:0c:2c:74:d0:4e:3a:60:94:56:
8b:49:90:70:16:bf:d0:7b:40:df:0a:3f:6b:5e:5a:97:a2:fb:
2a:05:d9:5c:3a:d6:16:60:2b:27:db:40:ab:a9:70:57:07:1a:
1f:1c:b2:05:03:a4:3b:be:97:77:b6:24:16:91:9c:46:44:e7:
80:99:e7:6e:c8:fd:52:f8:97:76:06:c9:1f:d0:8d:7c:70:75:
71:7c:80:24:27:6b:1b:d6:80:bb:85:88:f4:14:d2:80:6b:90:
48:2c:c4:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKEAVZy0n4J1CMygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OTA4YmMwNjYtNzAxOS00NmM2LTk0MGEtZjMzYmJlMmQxODI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuhOXZCsrVu2sa5os3luz2OF+FRQ2HRWxjKR
U6IwdQ63e3yPLeTNaTCxAB/mwzeyU1ne9Z7YpVGBFtsXp+obh1V5hvfdx115H3pI
Rp7wUL6A06l1Co4ZYU4WxMTjMZ5m4U2WFJdmcTZqT0T1GxuwsJOE7dTfSGjWt7jG
vaktsUE1xG3NesyK/Sa0rrF20DAcm+tzq3HfuRiZ/WXuOXA32fA7pt6qqmZdk5T6
H+p2S4U4U9vOYzqDCJSpzkeJ6w4CgusAaD06ZJ95/8ApFFxfy9octulTiLp6mMqh
tKYkb3MikaKp79hRb/FcZGmws7Z4mm/YnGbMMhISl4WD7V0ZAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPINcO8Zpen0FU5O4nYLG9mM72aAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODk5YjVlZmQtZGQ0YS0z
NTE5LTk4YTItNGYzMTBiMTdjOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMcAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2qnonFnV8hwz+bNOUSoxH/y1SjIoHLgFWyWR8a9sBqrlTxa/2NwT5L
9sr7SdwxkO+sZhRIEsibNTry6Lcf5uEWev5jqPuz3ekxOpFshH8t4tqcKEVO3dzx
ZyYGvthQn9Lyo2Q+pxQW/VaEtpB165IoJZ2PFKUhd/ZH8Dq5GghJZ07N22gfurbJ
u6UVSo/pL7yUCo42fHJqrgwsdNBOOmCUVotJkHAWv9B7QN8KP2teWpei+yoF2Vw6
1hZgKyfbQKupcFcHGh8csgUDpDu+l3e2JBaRnEZE54CZ527I/VL4l3YGyR/QjXxw
dXF8gCQnaxvWgLuFiPQU0oBrkEgsxJ8=
-----END CERTIFICATE-----
Generated at Sat May 10 13:03:56 2025 by rpki-client