Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d60dd34-bffc-3b23-89d0-607d9acd6434.roa
File: 9d60dd34-bffc-3b23-89d0-607d9acd6434.roa (raw, json)
Hash identifier: Ap3/HadsfG87lzN43iSyVtHnSHYjoioyEA9WC7awlJA=
Subject key identifier: D0:9D:E5:5D:0F:14:B3:A6:2E:3C:50:71:30:AE:6D:D8:5E:54:AA:7D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B401BD13297C25733EC100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d60dd34-bffc-3b23-89d0-607d9acd6434.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.189.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b4:01:bd:13:29:7c:25:73:3e:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=8d01ff09-9325-4224-85ef-a87903cb76d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:30:ee:ea:6c:f5:c5:44:18:16:d1:0a:5b:49:
55:d8:7a:29:e2:93:ff:2e:ba:1a:99:64:39:7a:bf:
07:bc:f0:44:0c:fb:4b:b7:6c:1e:d4:15:e3:65:b1:
bc:33:6b:37:85:2e:82:72:91:ac:92:a7:58:dc:77:
c3:4d:6c:41:fa:85:64:68:bf:ec:10:b7:96:7b:25:
64:6e:f2:b9:fb:ca:4c:12:82:61:79:0d:37:64:55:
a5:a4:70:9b:18:78:9b:bd:46:3f:2b:a4:61:e9:26:
98:9d:46:af:c9:41:b5:b0:b0:55:13:3e:31:c9:53:
aa:25:db:c3:c1:ac:16:cb:67:11:4a:ab:ec:e6:b9:
63:ad:24:5f:7e:a6:f7:c0:82:79:4d:2a:89:0c:96:
f1:57:eb:4f:f2:dc:c2:ed:7b:4c:f9:ac:f6:f3:3a:
bb:8c:79:c6:e1:98:6a:9d:6c:7f:b2:50:ac:bc:65:
36:42:ab:6c:3e:3d:e3:9d:ca:90:30:db:46:44:c1:
37:10:6e:e2:bc:56:2b:2c:c6:72:e5:81:df:90:e3:
f4:80:a3:61:e2:12:d7:bb:5e:ed:3a:44:83:16:06:
00:0b:b6:3c:e9:7f:75:c3:7a:7f:de:da:76:25:8d:
67:ca:6e:13:26:17:25:fb:36:b7:da:18:36:60:f6:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9D:E5:5D:0F:14:B3:A6:2E:3C:50:71:30:AE:6D:D8:5E:54:AA:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d60dd34-bffc-3b23-89d0-607d9acd6434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:16:8d:cb:eb:b0:5f:23:8e:97:e2:b0:5b:22:c5:97:30:d5:
44:57:92:21:bb:24:cd:ab:c6:36:25:22:25:a6:fd:4e:30:d2:
97:9c:6b:25:38:53:93:ee:7e:8f:02:6b:1f:ae:dc:d6:46:43:
76:f3:63:2c:92:e1:c1:32:a7:a0:bf:04:38:41:b0:45:65:23:
22:5f:a1:57:bb:db:88:a1:01:b2:8d:36:9e:cc:a1:0e:d9:2b:
18:85:15:14:40:87:fd:f7:cf:5d:c8:f9:b2:58:0e:54:c6:b0:
ba:cb:86:95:db:38:1c:46:50:e1:f7:08:50:5e:5c:a0:12:8d:
02:e0:0d:cf:32:f7:c9:c7:d1:67:a2:83:cd:b4:00:8f:e4:1f:
b7:d1:b5:5b:fe:e0:bb:78:53:38:55:42:c2:9a:d5:f0:27:b0:
db:c8:7a:d2:54:e0:32:1b:53:ce:67:76:54:e3:14:a4:28:a5:
6c:82:d9:85:86:80:b8:79:db:af:bd:3d:bd:53:55:9d:ad:4d:
4d:c5:57:b4:4d:f1:b0:25:ee:a8:98:c7:54:8d:7e:59:3c:70:
b2:08:df:9c:0b:b0:c5:68:7b:5f:ea:fe:f1:ba:c5:2d:de:aa:
71:8c:14:17:74:04:d2:33:f3:36:50:6c:7d:be:b5:f2:59:b7:
ec:2e:c0:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqntAG9Eyl8JXM+wQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
OGQwMWZmMDktOTMyNS00MjI0LTg1ZWYtYTg3OTAzY2I3NmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDDu6mz1xUQYFtEKW0lV2Hop4pP/LroamWQ5
er8HvPBEDPtLt2we1BXjZbG8M2s3hS6CcpGskqdY3HfDTWxB+oVkaL/sELeWeyVk
bvK5+8pMEoJheQ03ZFWlpHCbGHibvUY/K6Rh6SaYnUavyUG1sLBVEz4xyVOqJdvD
wawWy2cRSqvs5rljrSRffqb3wIJ5TSqJDJbxV+tP8tzC7XtM+az28zq7jHnG4Zhq
nWx/slCsvGU2QqtsPj3jncqQMNtGRME3EG7ivFYrLMZy5YHfkOP0gKNh4hLXu17t
OkSDFgYAC7Y86X91w3p/3tp2JY1nym4TJhcl+za32hg2YPZI7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNCd5V0PFLOmLjxQcTCubdheVKp9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWQ2MGRkMzQtYmZmYy0z
YjIzLTg5ZDAtNjA3ZDlhY2Q2NDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI72QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcWjcvrsF8jjpfisFsixZcw1URXkiG7JM2rxjYlIiWm/U4w0pecayU4
U5Pufo8Cax+u3NZGQ3bzYyyS4cEyp6C/BDhBsEVlIyJfoVe724ihAbKNNp7MoQ7Z
KxiFFRRAh/33z13I+bJYDlTGsLrLhpXbOBxGUOH3CFBeXKASjQLgDc8y98nH0Wei
g820AI/kH7fRtVv+4Lt4UzhVQsKa1fAnsNvIetJU4DIbU85ndlTjFKQopWyC2YWG
gLh526+9Pb1TVZ2tTU3FV7RN8bAl7qiYx1SNflk8cLII35wLsMVoe1/q/vG6xS3e
qnGMFBd0BNIz8zZQbH2+tfJZt+wuwMM=
-----END CERTIFICATE-----
Generated at Sat May 10 18:59:17 2025 by rpki-client