Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d7c1e5b-8bdd-3fe4-acbf-a0bffae50463.roa
File: 9d7c1e5b-8bdd-3fe4-acbf-a0bffae50463.roa (raw, json)
Hash identifier: QloWVnUOHENIRe1Xei3O0JhERtaPVBvg68jH18kkdxc=
Subject key identifier: 29:63:0B:AF:F2:85:59:02:AE:A4:24:CB:F2:60:0C:62:6E:BD:FD:5F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B1B789EF97464280EC2700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d7c1e5b-8bdd-3fe4-acbf-a0bffae50463.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.239.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b1:b7:89:ef:97:46:42:80:ec:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=fb4f4e37-52c0-4f23-8cde-3e4182b0ce2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:28:d9:03:76:57:7d:62:0f:b6:8f:82:47:
b1:7b:60:93:1e:ad:b5:93:60:b1:e2:e0:8c:4b:e1:
f8:09:f5:6f:ec:36:61:3b:cb:80:7a:6d:04:5c:eb:
33:e6:76:84:6e:5d:84:34:36:ce:70:73:cd:bf:4d:
7c:15:83:5f:92:f8:aa:90:0d:ce:1f:08:b2:75:7b:
a2:1a:c2:31:c6:9b:f1:ab:00:35:42:aa:f5:43:7b:
6b:35:47:2f:ca:be:c3:1b:23:47:cf:a6:ec:9d:d7:
6d:3f:32:a4:23:e9:e6:5a:0e:e8:90:7b:66:74:c3:
90:0d:1d:75:70:75:ca:88:9d:56:43:64:67:55:fb:
27:ab:d2:d5:69:7c:dc:a3:97:c0:15:bc:e4:ab:f9:
e6:ee:b9:b4:2c:23:4e:84:82:54:49:35:9f:a5:c1:
33:dc:71:0b:e6:45:e7:81:a2:8f:c6:30:9d:4d:e6:
5e:09:cd:9e:e7:b9:24:e6:58:17:a5:08:d3:ec:6c:
89:51:b4:fd:5e:c7:f1:35:e4:da:56:9f:2c:87:82:
96:dd:da:00:94:c0:f0:b9:fa:aa:57:9b:91:e8:03:
92:e1:f6:ba:d4:0e:42:fd:64:d0:64:8c:90:f7:21:
fc:06:e8:4c:48:4a:1b:2a:f8:d0:56:8d:3f:7c:32:
cc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:63:0B:AF:F2:85:59:02:AE:A4:24:CB:F2:60:0C:62:6E:BD:FD:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d7c1e5b-8bdd-3fe4-acbf-a0bffae50463.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.239.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:6a:71:19:4e:5a:cd:cc:1b:ea:c5:58:c9:97:82:5c:c1:f4:
97:28:f5:a0:a5:5b:ff:4f:f2:c6:29:58:19:d7:f9:4b:71:a1:
6c:59:82:23:fb:bd:26:cb:23:d2:22:9d:d0:71:f7:2b:31:cb:
14:c2:2a:fa:f6:9c:a1:b6:4c:6d:41:75:5b:3a:ed:01:d4:a6:
3f:c9:b9:e8:58:6e:10:26:f6:b2:2f:ea:6a:e0:b9:ec:e5:e2:
68:6b:a1:a9:fd:4d:d3:5f:9a:b3:55:11:b8:e2:a2:e0:cc:96:
e3:9f:fc:14:16:81:4f:86:00:e3:26:b2:ab:a6:29:1a:ec:18:
87:4a:74:15:19:db:25:71:57:04:3d:92:b8:1a:fd:d0:35:7c:
b4:2f:5a:a8:45:5e:0a:92:06:2a:be:95:3a:e5:33:d2:2c:cf:
7c:a9:9f:67:1f:75:2a:7f:e0:72:11:81:86:44:e9:12:ed:2a:
cb:7b:28:1d:11:ed:fb:fc:a6:1d:fc:a0:63:17:23:b6:62:e8:
40:32:e5:60:ac:ec:49:d1:26:2a:84:c6:d5:fb:0d:97:4a:ca:
bb:ec:5c:67:2b:25:ab:75:c6:64:23:29:9e:af:e9:5d:a6:57:
a2:cc:1e:fb:50:6e:23:2b:86:06:81:e4:c5:74:7b:89:16:e7:
a4:af:f1:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnsbeJ75dGQoDsJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZmI0ZjRlMzctNTJjMC00ZjIzLThjZGUtM2U0MTgyYjBjZTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Qo2QN2V31iD7aPgkexe2CTHq21k2Cx4uCM
S+H4CfVv7DZhO8uAem0EXOsz5naEbl2ENDbOcHPNv018FYNfkviqkA3OHwiydXui
GsIxxpvxqwA1Qqr1Q3trNUcvyr7DGyNHz6bsnddtPzKkI+nmWg7okHtmdMOQDR11
cHXKiJ1WQ2RnVfsnq9LVaXzco5fAFbzkq/nm7rm0LCNOhIJUSTWfpcEz3HEL5kXn
gaKPxjCdTeZeCc2e57kk5lgXpQjT7GyJUbT9XsfxNeTaVp8sh4KW3doAlMDwufqq
V5uR6AOS4fa61A5C/WTQZIyQ9yH8BuhMSEobKvjQVo0/fDLM9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCljC6/yhVkCrqQky/JgDGJuvf1fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWQ3YzFlNWItOGJkZC0z
ZmU0LWFjYmYtYTBiZmZhZTUwNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+9gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhqcRlOWs3MG+rFWMmXglzB9Jco9aClW/9P8sYpWBnX+UtxoWxZgiP7
vSbLI9IindBx9ysxyxTCKvr2nKG2TG1BdVs67QHUpj/JuehYbhAm9rIv6mrguezl
4mhroan9TdNfmrNVEbjiouDMluOf/BQWgU+GAOMmsqumKRrsGIdKdBUZ2yVxVwQ9
krga/dA1fLQvWqhFXgqSBiq+lTrlM9Isz3ypn2cfdSp/4HIRgYZE6RLtKst7KB0R
7fv8ph38oGMXI7Zi6EAy5WCs7EnRJiqExtX7DZdKyrvsXGcrJat1xmQjKZ6v6V2m
V6LMHvtQbiMrhgaB5MV0e4kW56Sv8VA=
-----END CERTIFICATE-----
Generated at Sat May 10 12:25:08 2025 by rpki-client