Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99af1249-4352-3c23-bb01-a902a6472751.roa
File: 99af1249-4352-3c23-bb01-a902a6472751.roa (raw, json)
Hash identifier: +CdHmfMn0a5/gImOsOfAJU+FC2BZxLAypEreA6phJNM=
Subject key identifier: 3C:69:AE:4C:81:5B:2F:49:CA:B3:12:1D:F2:74:1B:1B:AA:3C:3B:C6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EFAED1AE997732E041B270
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99af1249-4352-3c23-bb01-a902a6472751.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 19527
IP address blocks: 35.214.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:ae:d1:ae:99:77:32:e0:41:b2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=259de0b3-8307-432e-9bf6-ebac93a8ebf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:99:ea:83:08:e8:99:d4:38:6f:c9:e6:e2:
12:bd:90:3d:e9:c1:eb:37:9e:c9:08:76:fa:3d:24:
f8:ad:46:1c:aa:28:46:2a:66:bd:c6:96:c8:39:e8:
77:7d:b6:2e:67:27:60:89:59:d1:62:59:e7:0a:c6:
fd:79:22:56:be:bf:e1:84:5d:ad:80:5e:3f:04:3e:
a1:6b:13:8a:17:53:61:da:7a:58:06:9d:d0:82:83:
6d:d8:73:cb:4c:aa:5f:36:d2:15:3d:19:39:51:05:
5a:0f:aa:52:d3:17:9e:f4:81:a2:f3:6a:3e:df:7a:
25:89:ef:00:15:d8:7a:54:82:24:17:4a:42:9c:21:
d6:d2:00:79:50:ec:7f:be:91:e5:8a:49:2b:dc:2c:
36:37:ec:8f:1a:83:68:67:42:63:ea:f9:28:ea:be:
57:ba:1e:7c:00:e5:c8:3c:9b:95:d2:30:f1:8d:17:
cb:20:61:f3:3a:49:4d:2d:78:4b:57:04:85:a1:fb:
5d:bf:58:be:1f:f0:1e:99:55:a6:14:bf:e4:c7:93:
26:2d:c5:1a:34:b2:c2:a7:b3:91:7d:d1:83:e6:d8:
1f:ca:d6:96:ed:7d:cf:8e:c8:e2:68:a3:cd:30:ba:
55:b7:cb:33:31:32:b2:bb:01:93:3b:6c:b6:94:e5:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:69:AE:4C:81:5B:2F:49:CA:B3:12:1D:F2:74:1B:1B:AA:3C:3B:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99af1249-4352-3c23-bb01-a902a6472751.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.214.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:9b:fa:97:33:1e:2a:78:be:36:66:9c:20:b4:ec:41:0f:5e:
f0:be:ca:f1:e5:51:6f:2f:80:4c:cc:28:66:43:95:59:1e:2e:
57:e5:20:e8:57:97:e0:2e:69:b0:28:a7:c4:4d:d3:6b:39:e8:
36:ee:38:38:65:a9:59:8b:78:96:a2:52:e1:9b:00:35:49:c9:
af:c8:c5:39:70:1d:23:f6:e0:6c:7a:4b:50:a7:5a:96:92:a8:
aa:94:c3:24:29:50:2e:d7:5d:85:e2:f8:45:9a:87:f5:f4:9e:
97:46:2b:4f:96:6c:40:81:72:2e:07:9c:36:22:bb:78:2e:90:
1d:52:d0:55:a9:c0:91:7c:85:ba:bf:9a:63:c8:94:ef:42:40:
48:f6:db:8a:4b:29:5d:e8:89:e6:b1:e0:47:b5:51:17:81:e6:
e6:6c:dd:56:a9:90:59:0b:ed:62:5d:e7:be:06:1f:5f:4a:bb:
8e:ec:5d:70:dc:50:b3:3d:cd:15:eb:0e:8c:99:da:bd:b1:48:
fa:f3:b4:8d:93:60:5f:f5:46:94:86:fd:1a:84:fb:ef:15:fd:
76:a2:63:42:65:49:8f:25:51:b7:be:f2:50:b2:0f:63:b3:ec:
8c:17:6f:73:13:68:00:46:cc:19:85:ba:90:36:4b:47:13:d2:
01:4b:4d:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ767Rrpl3MuBBsnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MjU5ZGUwYjMtODMwNy00MzJlLTliZjYtZWJhYzkzYThlYmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3yZ6oMI6JnUOG/J5uISvZA96cHrN57JCHb6
PST4rUYcqihGKma9xpbIOeh3fbYuZydgiVnRYlnnCsb9eSJWvr/hhF2tgF4/BD6h
axOKF1Nh2npYBp3QgoNt2HPLTKpfNtIVPRk5UQVaD6pS0xee9IGi82o+33olie8A
Fdh6VIIkF0pCnCHW0gB5UOx/vpHlikkr3Cw2N+yPGoNoZ0Jj6vko6r5Xuh58AOXI
PJuV0jDxjRfLIGHzOklNLXhLVwSFoftdv1i+H/AemVWmFL/kx5MmLcUaNLLCp7OR
fdGD5tgfytaW7X3PjsjiaKPNMLpVt8szMTKyuwGTO2y2lOXeAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDxprkyBWy9JyrMSHfJ0GxuqPDvGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTlhZjEyNDktNDM1Mi0z
YzIzLWJiMDEtYTkwMmE2NDcyNzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9aAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHGb+pczHip4vjZmnCC07EEPXvC+yvHlUW8vgEzMKGZDlVkeLlflIOhX
l+AuabAop8RN02s56DbuODhlqVmLeJaiUuGbADVJya/IxTlwHSP24Gx6S1CnWpaS
qKqUwyQpUC7XXYXi+EWah/X0npdGK0+WbECBci4HnDYiu3gukB1S0FWpwJF8hbq/
mmPIlO9CQEj224pLKV3oieax4Ee1UReB5uZs3VapkFkL7WJd574GH19Ku47sXXDc
ULM9zRXrDoyZ2r2xSPrztI2TYF/1RpSG/RqE++8V/XaiY0JlSY8lUbe+8lCyD2Oz
7IwXb3MTaABGzBmFupA2S0cT0gFLTT0=
-----END CERTIFICATE-----
Generated at Sun May 11 12:50:19 2025 by rpki-client