Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9fe11042-53e7-34ad-bc19-e92098e27e91.roa
File: 9fe11042-53e7-34ad-bc19-e92098e27e91.roa (raw, json)
Hash identifier: M44I310D9xtqWdg4MNgC4mZKFIhyFjyn/7hgzIYXRNQ=
Subject key identifier: 94:44:F4:6B:D7:1A:F1:C1:24:CB:DB:28:E7:CB:0D:57:57:30:01:B8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6BE3E0BBFD12A3771360
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9fe11042-53e7-34ad-bc19-e92098e27e91.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.192.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6b:e3:e0:bb:fd:12:a3:77:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=bc8f53f4-60eb-4764-94f4-5eb6d4f5ecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3a:4b:9c:79:0b:a9:fa:1e:9f:f8:2b:1b:6a:
83:ed:cb:9a:e3:1d:7b:d8:ca:da:cf:fb:e0:ca:49:
54:5f:04:f0:c4:df:1b:98:9b:e2:df:ef:0c:d0:5e:
59:01:ba:e2:0a:fb:b6:68:4b:6e:a2:09:47:9a:d7:
8e:18:29:c7:bf:0c:2b:4f:b5:34:53:48:52:8a:4a:
ce:5b:a0:be:52:bf:e0:7d:d8:1f:df:58:bf:82:4a:
17:6d:2f:40:39:c6:f6:10:f6:94:37:67:46:94:35:
27:f9:28:10:94:e2:53:05:20:1e:9a:4b:ac:00:36:
92:c8:8b:7f:d6:b5:9d:ec:31:55:08:b3:a7:96:1d:
c4:b5:ff:48:11:cb:19:5a:bf:fe:2b:ba:98:23:83:
15:63:fc:5a:c6:2f:fc:cd:eb:a0:61:c7:c4:9b:47:
66:53:2b:76:3e:69:33:88:dd:1d:4f:e6:29:06:51:
13:7c:4b:e0:51:4b:9c:0d:28:22:08:b7:7c:6c:73:
bd:d7:f6:8d:d8:35:a6:5b:10:f0:64:28:13:d8:09:
b5:a2:1b:55:f3:90:41:1e:76:34:7f:f0:e9:37:ab:
2f:16:e7:a6:40:91:b7:64:68:e5:97:3c:9d:1c:ee:
3e:62:8f:91:50:24:09:7e:bb:51:8f:ec:0a:b7:49:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:44:F4:6B:D7:1A:F1:C1:24:CB:DB:28:E7:CB:0D:57:57:30:01:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9fe11042-53e7-34ad-bc19-e92098e27e91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.192.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:08:14:92:4e:d9:82:44:1c:ea:d8:2b:d6:a5:43:d1:3d:17:
a2:87:85:fb:af:76:ea:04:b7:0b:36:da:76:84:d0:b7:c3:8a:
ae:74:19:21:db:e9:65:92:60:0c:bc:45:19:c1:d5:96:2d:70:
8e:53:4a:1c:bb:0c:f7:f8:87:8b:5d:53:14:ff:ca:cf:76:2a:
6a:11:8f:30:79:8e:76:fb:f3:28:5f:0a:d6:5a:1a:77:73:28:
19:7f:aa:c9:2a:82:89:7a:a2:6e:d9:49:d4:05:a7:f0:df:f0:
1f:67:8d:a3:c3:5a:8f:12:cc:49:8e:34:67:01:0b:64:74:38:
6f:d6:6e:93:6e:dc:10:04:a1:35:cc:f2:0d:53:5c:9d:db:ef:
a0:ce:a4:c0:be:40:b7:f5:e3:08:bc:e4:4f:22:74:3e:75:3f:
bd:44:ab:41:08:44:e1:fc:ac:56:32:70:75:7c:11:6a:fa:ad:
69:74:9c:3d:70:53:2d:33:46:3d:15:9e:6f:aa:f4:14:79:14:
4c:c8:1d:28:15:87:b1:44:e4:d2:dc:4d:11:0a:cf:a2:d4:67:
ad:81:44:0e:3c:cb:e9:03:d6:48:ca:7d:4c:2f:52:bf:d3:4e:
12:ac:6c:45:f3:bd:77:6c:39:09:9f:6c:ea:57:33:21:de:ef:
dc:c6:66:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/Smvj4Lv9EqN3E2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
YmM4ZjUzZjQtNjBlYi00NzY0LTk0ZjQtNWViNmQ0ZjVlY2FhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjpLnHkLqfoen/grG2qD7cua4x172Mraz/vg
yklUXwTwxN8bmJvi3+8M0F5ZAbriCvu2aEtuoglHmteOGCnHvwwrT7U0U0hSikrO
W6C+Ur/gfdgf31i/gkoXbS9AOcb2EPaUN2dGlDUn+SgQlOJTBSAemkusADaSyIt/
1rWd7DFVCLOnlh3Etf9IEcsZWr/+K7qYI4MVY/xaxi/8zeugYcfEm0dmUyt2Pmkz
iN0dT+YpBlETfEvgUUucDSgiCLd8bHO91/aN2DWmWxDwZCgT2Am1ohtV85BBHnY0
f/DpN6svFuemQJG3ZGjllzydHO4+Yo+RUCQJfrtRj+wKt0lRiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRE9GvXGvHBJMvbKOfLDVdXMAG4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWZlMTEwNDItNTNlNy0z
NGFkLWJjMTktZTkyMDk4ZTI3ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI8AAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHIIFJJO2YJEHOrYK9alQ9E9F6KHhfuvduoEtws22naE0LfDiq50GSHb
6WWSYAy8RRnB1ZYtcI5TShy7DPf4h4tdUxT/ys92KmoRjzB5jnb78yhfCtZaGndz
KBl/qskqgol6om7ZSdQFp/Df8B9njaPDWo8SzEmONGcBC2R0OG/WbpNu3BAEoTXM
8g1TXJ3b76DOpMC+QLf14wi85E8idD51P71Eq0EIROH8rFYycHV8EWr6rWl0nD1w
Uy0zRj0Vnm+q9BR5FEzIHSgVh7FE5NLcTREKz6LUZ62BRA48y+kD1kjKfUwvUr/T
ThKsbEXzvXdsOQmfbOpXMyHe79zGZu8=
-----END CERTIFICATE-----
Generated at Sat May 10 12:26:31 2025 by rpki-client