Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dccde79-5b76-30b6-a4b5-d8f2bb58c1b2.roa
File: 9dccde79-5b76-30b6-a4b5-d8f2bb58c1b2.roa (raw, json)
Hash identifier: TGN2r0xDVUU9qhthoFsXFycNNyGheTUWXAAIzkWCAhw=
Subject key identifier: 9E:FC:EC:54:4E:99:98:F4:3A:4C:3B:81:43:A1:C5:76:AE:EA:F5:EB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A219AF6E4342CD213CAF620
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dccde79-5b76-30b6-a4b5-d8f2bb58c1b2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.240.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:21:9a:f6:e4:34:2c:d2:13:ca:f6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0c188926-b9ec-455f-a357-3d6be080a1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:42:de:67:c6:b8:de:dd:8a:41:7a:bc:e1:
e0:cb:37:f0:95:91:a8:ee:35:eb:18:d2:a1:3f:13:
50:9c:c3:ff:25:04:c2:b6:c5:06:70:f4:6d:70:d7:
67:21:d5:3c:7c:11:02:66:78:ac:1a:5d:ff:fc:52:
b3:9c:03:fb:80:10:f6:4d:d4:76:29:6c:a7:bc:15:
21:fb:0a:0d:77:d7:4b:92:14:33:2b:e0:65:7e:bf:
ab:97:4d:93:c8:ff:d5:25:ea:06:21:42:72:93:59:
aa:9a:0e:8d:d1:28:6b:7f:02:28:5f:44:29:13:48:
d1:7a:f4:1a:7b:09:43:ef:4b:8e:36:61:4a:bd:70:
bf:e3:46:df:81:85:4c:32:32:e7:25:aa:1e:1d:70:
36:ee:38:3d:eb:e7:49:cc:30:d6:93:a9:26:e7:f9:
cc:4d:0f:8a:ad:01:30:9d:80:d5:50:81:d8:5b:42:
98:06:3e:ce:6a:c1:7f:5c:00:a2:df:bc:b3:6e:91:
f0:1f:9e:ca:28:60:09:f0:95:da:fb:e8:5a:c1:32:
86:d8:3b:b4:d6:56:0a:44:2b:2f:ca:ca:fa:b3:66:
c6:eb:67:68:58:04:df:7f:3c:ee:cb:2e:63:ad:1b:
c7:fe:cb:b7:ee:77:b1:da:8a:11:62:d7:8a:8c:10:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FC:EC:54:4E:99:98:F4:3A:4C:3B:81:43:A1:C5:76:AE:EA:F5:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dccde79-5b76-30b6-a4b5-d8f2bb58c1b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.240.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:53:36:63:ec:8b:4d:96:c4:d4:58:fa:a4:96:96:e4:a4:3e:
95:8f:7c:3c:7d:9c:f4:b6:1c:9a:77:05:8f:40:d9:d0:23:2a:
9c:9a:1a:3c:a6:26:ce:30:ca:03:eb:c5:32:be:6a:0a:6b:74:
db:d2:29:41:53:9c:3e:b9:05:cb:20:2d:5b:4d:db:ce:fd:6e:
54:cc:26:0c:42:1a:8d:9d:03:8a:7d:52:37:5a:5a:7d:93:d4:
86:b5:e8:66:a8:47:25:6e:a2:ea:9f:63:56:38:1d:1e:64:91:
36:69:2f:af:c0:10:94:40:2e:8e:4d:19:5d:13:97:89:e8:19:
66:18:ac:f3:c8:64:61:a1:bc:c3:0f:f1:fb:38:04:e5:7f:0c:
c5:91:37:3d:45:35:12:4e:61:ac:a1:df:3d:60:37:48:aa:fd:
50:ca:7c:7a:fb:6b:d0:f0:e2:ad:c4:49:a0:1b:54:4e:24:75:
0d:87:66:2d:00:62:cd:c3:df:8c:14:3c:7c:1d:5d:e8:23:03:
1a:e9:d4:19:36:33:10:c7:0c:82:3a:2f:a9:4e:e1:2c:50:5e:
ec:e5:1d:41:6e:11:02:51:a1:a8:12:09:36:c7:74:a4:05:1e:
2b:26:0a:bc:8d:8f:3c:b9:21:bc:0b:54:9f:a0:84:1e:1d:63:
e4:f4:c4:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKIZr25DQs0hPK9iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MGMxODg5MjYtYjllYy00NTVmLWEzNTctM2Q2YmUwODBhMWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B5C3mfGuN7dikF6vOHgyzfwlZGo7jXrGNKh
PxNQnMP/JQTCtsUGcPRtcNdnIdU8fBECZnisGl3//FKznAP7gBD2TdR2KWynvBUh
+woNd9dLkhQzK+Blfr+rl02TyP/VJeoGIUJyk1mqmg6N0ShrfwIoX0QpE0jRevQa
ewlD70uONmFKvXC/40bfgYVMMjLnJaoeHXA27jg96+dJzDDWk6km5/nMTQ+KrQEw
nYDVUIHYW0KYBj7OasF/XACi37yzbpHwH57KKGAJ8JXa++hawTKG2Du01lYKRCsv
ysr6s2bG62doWATffzzuyy5jrRvH/su37nex2ooRYteKjBACGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ787FROmZj0Okw7gUOhxXau6vXrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWRjY2RlNzktNWI3Ni0z
MGI2LWE0YjUtZDhmMmJiNThjMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/CgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBTNmPsi02WxNRY+qSWluSkPpWPfDx9nPS2HJp3BY9A2dAjKpyaGjym
Js4wygPrxTK+agprdNvSKUFTnD65BcsgLVtN2879blTMJgxCGo2dA4p9UjdaWn2T
1Ia16GaoRyVuouqfY1Y4HR5kkTZpL6/AEJRALo5NGV0Tl4noGWYYrPPIZGGhvMMP
8fs4BOV/DMWRNz1FNRJOYayh3z1gN0iq/VDKfHr7a9Dw4q3ESaAbVE4kdQ2HZi0A
Ys3D34wUPHwdXegjAxrp1Bk2MxDHDII6L6lO4SxQXuzlHUFuEQJRoagSCTbHdKQF
HismCryNjzy5IbwLVJ+ghB4dY+T0xMg=
-----END CERTIFICATE-----
Generated at Sat May 10 14:39:08 2025 by rpki-client