Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e8bfa2c-0e82-346e-9efd-4c1ab5d792fe.roa
File: 9e8bfa2c-0e82-346e-9efd-4c1ab5d792fe.roa (raw, json)
Hash identifier: Ss0Zl7Yi7nJN2ANanvHfXHb2sGC0YdWUKVFKYEUDSCI=
Subject key identifier: 2C:52:41:68:EE:98:FB:E3:C3:65:FF:5F:0C:8A:03:4F:AC:B5:41:7C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EEBCB7D6EF8AC8C169EA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e8bfa2c-0e82-346e-9efd-4c1ab5d792fe.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.231.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:bc:b7:d6:ef:8a:c8:c1:69:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b24e8753-87f9-488d-9fa0-8cf033443b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:a2:e9:bf:cc:f9:a3:bb:d3:23:f6:bb:a4:
bf:1f:4b:a0:6d:8d:9d:e3:f5:c1:8a:37:02:21:e5:
74:7c:67:5e:8f:43:a8:ae:f6:5a:ee:b4:91:38:37:
16:5a:38:36:8a:31:e2:b0:c6:db:89:f2:c2:e4:91:
f1:5c:7d:59:4e:02:95:9b:39:16:cd:2f:90:44:9c:
f3:bc:72:57:71:ce:c4:6b:8d:23:bc:33:aa:e7:8a:
84:ae:4d:2b:6a:29:42:d7:ef:d6:92:60:fa:e1:40:
e8:9f:06:9f:09:51:35:4c:18:da:b0:f6:31:6e:32:
54:82:81:87:5c:67:0a:cc:c5:4c:d6:4c:e1:29:4a:
1a:f5:08:03:4a:1b:07:7d:4e:cf:93:aa:be:64:c2:
aa:ce:ea:14:4d:95:db:bd:67:30:c6:e9:d4:13:ca:
45:2f:80:b3:99:3d:26:55:f9:2c:82:3a:6b:91:8e:
16:04:a7:7c:cd:69:0a:cf:a0:45:b5:1d:27:02:ec:
58:eb:25:5e:5b:46:9c:4c:0f:a5:8e:d7:0a:53:98:
ea:f4:fa:32:f3:f9:3f:ca:51:c6:87:e0:f1:de:3d:
68:ee:61:a3:b4:d8:c0:01:33:4e:11:61:2c:15:bc:
f9:54:53:db:33:91:9a:cd:f7:1d:e5:33:ad:92:c7:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:52:41:68:EE:98:FB:E3:C3:65:FF:5F:0C:8A:03:4F:AC:B5:41:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e8bfa2c-0e82-346e-9efd-4c1ab5d792fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.231.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:29:3b:7d:b6:0a:d0:10:a2:81:1c:99:87:30:bd:e8:31:12:
8d:e5:1f:0a:2f:50:0c:22:11:1b:46:bf:6c:bb:9d:cc:48:e1:
47:2b:c9:4d:85:cf:28:ac:3b:28:0e:88:2c:e1:b1:c5:cb:40:
c8:cb:a7:30:4a:84:20:af:04:02:f1:e5:ad:6a:23:6c:4e:52:
d0:ce:df:dd:06:6d:4f:ab:d9:1d:66:29:79:8d:98:1c:c5:5a:
a9:2d:1e:7a:fd:91:49:59:86:29:ae:91:22:4a:b2:30:13:9c:
d1:b3:db:e3:42:d5:af:8d:49:97:57:3a:05:7f:9d:fa:bc:ec:
33:f6:23:27:aa:5d:ca:9c:8a:b4:0a:1e:1b:24:51:ca:6d:1d:
f4:cb:28:d1:a7:52:b2:fa:84:86:a7:e4:ea:68:0f:8d:ba:47:
c6:42:8a:f7:91:3c:0d:7f:80:88:d5:67:89:0d:6a:68:95:05:
1e:f8:37:02:c1:1e:fa:84:36:a3:93:9f:31:5b:80:27:57:78:
20:fa:18:1f:70:76:0d:8f:03:8c:70:a5:b2:35:cc:df:88:2c:
36:07:22:61:11:87:78:fc:b3:ca:c6:62:ad:41:51:51:49:a2:
9b:36:f5:c6:b5:c0:4a:e8:6d:64:b7:a1:5c:16:ed:88:80:12:
a3:d3:33:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ7ry31u+KyMFp6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YjI0ZTg3NTMtODdmOS00ODhkLTlmYTAtOGNmMDMzNDQzYjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGOi6b/M+aO70yP2u6S/H0ugbY2d4/XBijcC
IeV0fGdej0OorvZa7rSRODcWWjg2ijHisMbbifLC5JHxXH1ZTgKVmzkWzS+QRJzz
vHJXcc7Ea40jvDOq54qErk0railC1+/WkmD64UDonwafCVE1TBjasPYxbjJUgoGH
XGcKzMVM1kzhKUoa9QgDShsHfU7Pk6q+ZMKqzuoUTZXbvWcwxunUE8pFL4CzmT0m
VfksgjprkY4WBKd8zWkKz6BFtR0nAuxY6yVeW0acTA+ljtcKU5jq9Poy8/k/ylHG
h+Dx3j1o7mGjtNjAATNOEWEsFbz5VFPbM5Gazfcd5TOtksfpWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCxSQWjumPvjw2X/XwyKA0+stUF8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWU4YmZhMmMtMGU4Mi0z
NDZlLTllZmQtNGMxYWI1ZDc5MmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI+eAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkpO322CtAQooEcmYcwvegxEo3lHwovUAwiERtGv2y7ncxI4UcryU2F
zyisOygOiCzhscXLQMjLpzBKhCCvBALx5a1qI2xOUtDO390GbU+r2R1mKXmNmBzF
WqktHnr9kUlZhimukSJKsjATnNGz2+NC1a+NSZdXOgV/nfq87DP2IyeqXcqcirQK
HhskUcptHfTLKNGnUrL6hIan5OpoD426R8ZCiveRPA1/gIjVZ4kNamiVBR74NwLB
HvqENqOTnzFbgCdXeCD6GB9wdg2PA4xwpbI1zN+ILDYHImERh3j8s8rGYq1BUVFJ
ops29ca1wErobWS3oVwW7YiAEqPTMyg=
-----END CERTIFICATE-----
Generated at Sat May 10 11:14:40 2025 by rpki-client