Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5bd6cd7-5d92-3f6b-80ba-42a963d3ee81.roa
File: a5bd6cd7-5d92-3f6b-80ba-42a963d3ee81.roa (raw, json)
Hash identifier: yvi4IlEDUOe2MzpD4WP8zs4lIA65oVXLZ5Q/975eQKA=
Subject key identifier: B9:93:F5:D1:DB:B0:F2:59:1B:35:1D:AF:77:1E:DA:AA:D2:5A:10:B7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0136FA56D713D7A21C7880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5bd6cd7-5d92-3f6b-80ba-42a963d3ee81.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.236.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:01:36:fa:56:d7:13:d7:a2:1c:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=430b7efb-f83c-453e-8f89-681fcae615d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:dc:fb:04:a5:2a:a6:ac:6a:64:e8:12:21:
3e:0e:fe:4a:47:b8:1a:c6:19:bc:24:25:4a:93:07:
e9:9d:30:94:53:db:fc:a8:55:56:0f:35:70:05:c7:
41:af:50:74:7c:9e:ba:7d:dc:87:8e:88:07:b6:62:
75:b1:27:43:63:fb:7b:26:23:34:4f:21:12:95:6e:
27:58:55:e1:ab:de:bc:ff:f9:74:89:f8:b5:bb:c9:
6b:ee:e9:05:9c:7a:d7:c7:96:c9:3d:fe:16:f4:65:
e8:3c:f8:e2:aa:fb:b8:0a:dd:46:71:e7:18:cc:5d:
3b:49:59:51:03:71:6c:1f:79:31:68:1d:f0:97:dc:
8b:8e:3d:6d:e1:ca:8b:38:1b:00:85:fe:62:dd:57:
fb:80:1f:39:d3:9b:62:b8:a0:7a:67:29:02:d3:33:
aa:04:2c:2a:e8:1f:d5:40:e9:51:1c:9e:62:5b:70:
dc:62:50:13:14:77:5a:20:e2:ff:1d:4d:a6:87:3b:
38:5f:e7:a9:f9:25:a6:51:08:10:d4:7c:c5:ee:1c:
de:1a:7c:e7:59:09:8e:00:df:8f:b5:1c:f3:2d:8a:
15:cf:3a:d4:3c:71:89:a2:84:63:85:11:39:b3:16:
90:ac:70:5b:58:ea:b4:50:46:ff:56:9f:a6:e8:8a:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:93:F5:D1:DB:B0:F2:59:1B:35:1D:AF:77:1E:DA:AA:D2:5A:10:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5bd6cd7-5d92-3f6b-80ba-42a963d3ee81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.236.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:be:59:b2:be:92:b8:52:f3:29:c6:36:f5:5f:0f:ea:de:00:
45:75:39:8f:fb:37:46:08:44:b8:f5:4e:b8:5f:18:10:c7:ba:
83:d6:4e:0a:24:76:11:56:05:81:f7:0e:be:d9:eb:16:ff:c0:
e4:03:7a:a5:b0:31:0a:f8:49:90:54:1c:67:10:12:17:7e:a6:
4d:b1:00:c4:97:31:0d:5e:d8:20:65:5e:f1:29:09:56:d7:5d:
06:42:cc:70:9e:92:3e:53:22:6e:0d:ed:c1:2c:70:74:85:8c:
5a:fc:01:1d:24:5d:01:28:86:79:ca:1c:55:a6:f4:a4:16:9f:
f2:7e:22:3c:54:98:b1:96:ed:9c:8e:fa:75:e1:cf:26:0f:b4:
44:10:6b:b8:45:26:a8:32:d0:8a:68:88:93:1f:e5:d3:db:06:
b8:d9:9c:ae:cf:b6:3d:cc:96:8c:e0:92:e8:85:19:ec:00:de:
3b:5d:4a:7f:ad:f3:8f:b7:31:0c:ab:3e:40:f3:fc:5e:61:c0:
51:ad:31:e6:4e:c6:77:7f:c8:7d:7a:f9:82:f1:dd:30:13:53:
40:ae:16:16:d9:d0:af:9f:58:23:85:33:54:fa:6b:e8:e7:ba:
13:99:73:fd:15:f1:0a:9d:08:3a:38:58:52:60:23:04:c2:6c:
84:14:9d:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKATb6VtcT16IceIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NDMwYjdlZmItZjgzYy00NTNlLThmODktNjgxZmNhZTYxNWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE3c+wSlKqasamToEiE+Dv5KR7gaxhm8JCVK
kwfpnTCUU9v8qFVWDzVwBcdBr1B0fJ66fdyHjogHtmJ1sSdDY/t7JiM0TyESlW4n
WFXhq968//l0ifi1u8lr7ukFnHrXx5bJPf4W9GXoPPjiqvu4Ct1GcecYzF07SVlR
A3FsH3kxaB3wl9yLjj1t4cqLOBsAhf5i3Vf7gB8505tiuKB6ZykC0zOqBCwq6B/V
QOlRHJ5iW3DcYlATFHdaIOL/HU2mhzs4X+ep+SWmUQgQ1HzF7hzeGnznWQmOAN+P
tRzzLYoVzzrUPHGJooRjhRE5sxaQrHBbWOq0UEb/Vp+m6IpuuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmT9dHbsPJZGzUdr3ce2qrSWhC3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTViZDZjZDctNWQ5Mi0z
ZjZiLTgwYmEtNDJhOTYzZDNlZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+yAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABy+WbK+krhS8ynGNvVfD+reAEV1OY/7N0YIRLj1TrhfGBDHuoPWTgok
dhFWBYH3Dr7Z6xb/wOQDeqWwMQr4SZBUHGcQEhd+pk2xAMSXMQ1e2CBlXvEpCVbX
XQZCzHCekj5TIm4N7cEscHSFjFr8AR0kXQEohnnKHFWm9KQWn/J+IjxUmLGW7ZyO
+nXhzyYPtEQQa7hFJqgy0IpoiJMf5dPbBrjZnK7Ptj3MlozgkuiFGewA3jtdSn+t
84+3MQyrPkDz/F5hwFGtMeZOxnd/yH16+YLx3TATU0CuFhbZ0K+fWCOFM1T6a+jn
uhOZc/0V8QqdCDo4WFJgIwTCbIQUnZ0=
-----END CERTIFICATE-----
Generated at Sat May 10 11:34:42 2025 by rpki-client