Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ada6fd4c-5b6b-3c8c-ada1-9ea163d3d481.roa
File: ada6fd4c-5b6b-3c8c-ada1-9ea163d3d481.roa (raw, json)
Hash identifier: F11Lu+25nokIHdv6lk8zo2n8+XNaHjkwE1CCDRCJs8c=
Subject key identifier: 3F:6E:08:AB:B3:BB:68:44:05:B5:51:BF:BE:25:F0:CD:CF:A7:DB:4A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1493A8FC04052EF4EBE780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ada6fd4c-5b6b-3c8c-ada1-9ea163d3d481.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.199.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:93:a8:fc:04:05:2e:f4:eb:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2e846dc4-6159-4308-a578-9711aa55d56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:81:88:7d:94:44:79:e5:d5:8a:79:aa:95:7a:
7a:cc:e9:28:83:a9:b1:e3:e8:97:a3:13:8e:20:1e:
b1:9f:1f:e2:fb:57:cc:cc:da:a4:03:9e:ba:29:d7:
9e:b2:6b:74:52:f5:0b:2e:28:b0:dc:1e:43:18:aa:
96:e6:42:28:07:a2:00:fd:75:8f:b4:77:6a:71:f0:
70:b4:d8:68:c1:43:5c:40:f1:75:2a:07:7d:d1:97:
20:83:d3:da:ce:22:c4:97:c9:3b:b7:ec:b6:51:e5:
0f:95:69:ec:37:1e:b1:cb:5d:74:0b:eb:49:9b:9b:
c8:78:8b:9f:1a:7a:ff:e2:02:0a:97:e7:c3:03:c9:
ab:64:bd:ce:ef:5c:1b:44:34:08:50:3f:a8:f6:33:
e1:d4:f5:c6:f1:36:7d:75:e4:f5:59:4b:dd:8b:6b:
e9:5f:f4:cc:35:ba:5d:1f:b8:29:b2:cc:59:bc:3e:
3b:b1:7d:47:04:58:ba:f9:aa:da:86:89:82:64:a6:
04:57:b2:d5:d9:49:86:31:4c:50:02:0e:d7:36:31:
7d:47:88:c3:0e:28:9c:b1:cf:03:c2:d9:c9:50:f0:
ae:65:89:0d:7b:51:9f:ea:ca:c0:3f:54:46:df:18:
04:c3:0e:18:ab:34:6b:1e:1b:45:b4:6f:0e:34:7b:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6E:08:AB:B3:BB:68:44:05:B5:51:BF:BE:25:F0:CD:CF:A7:DB:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ada6fd4c-5b6b-3c8c-ada1-9ea163d3d481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.199.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:e6:77:7a:ad:0e:95:44:55:2d:00:ae:56:50:91:f8:79:c3:
7c:a2:37:03:e8:28:be:f7:d4:67:62:34:85:45:1f:c2:e6:47:
1f:33:1a:3a:1d:d2:90:d0:f4:f6:5d:2f:31:cb:ff:3c:cf:e3:
8c:83:ec:ca:ea:2e:01:f1:c0:e3:5b:51:8c:4f:fa:b9:7b:c6:
18:21:77:27:d7:d9:9f:e0:24:16:cc:38:45:33:8a:d6:b5:45:
90:92:35:89:3d:80:95:e4:4b:01:87:29:13:08:09:d8:79:2a:
2e:27:63:8b:dd:28:62:1e:f9:11:a7:a5:38:e6:b0:0b:a0:f2:
3a:78:4e:c9:8b:c0:66:04:a1:9e:99:ac:d8:20:48:8d:55:ab:
a3:3c:79:90:54:39:3b:f0:3e:1e:58:dc:52:43:d1:1f:ca:f0:
50:d3:0f:2e:fd:0e:a2:ae:8b:a2:8c:05:a8:a2:23:0c:6e:38:
96:bb:5d:07:eb:a3:bb:c8:d0:f7:b0:c8:7a:13:65:d8:69:87:
e6:1e:67:48:9c:d7:85:3d:7c:5f:5d:93:1d:d5:1a:63:25:73:
f0:47:44:d4:52:3c:65:98:8b:05:47:33:85:b4:7a:1b:91:fc:
56:96:86:9a:87:4b:d3:cb:a6:02:55:7e:cf:6b:f6:1a:19:92:
cd:15:4e:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFJOo/AQFLvTr54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MmU4NDZkYzQtNjE1OS00MzA4LWE1NzgtOTcxMWFhNTVkNTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYGIfZREeeXVinmqlXp6zOkog6mx4+iXoxOO
IB6xnx/i+1fMzNqkA566Kdeesmt0UvULLiiw3B5DGKqW5kIoB6IA/XWPtHdqcfBw
tNhowUNcQPF1Kgd90Zcgg9PaziLEl8k7t+y2UeUPlWnsNx6xy110C+tJm5vIeIuf
Gnr/4gIKl+fDA8mrZL3O71wbRDQIUD+o9jPh1PXG8TZ9deT1WUvdi2vpX/TMNbpd
H7gpssxZvD47sX1HBFi6+arahomCZKYEV7LV2UmGMUxQAg7XNjF9R4jDDiicsc8D
wtnJUPCuZYkNe1Gf6srAP1RG3xgEww4YqzRrHhtFtG8ONHvznwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD9uCKuzu2hEBbVRv74l8M3Pp9tKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWRhNmZkNGMtNWI2Yi0z
YzhjLWFkYTEtOWVhMTYzZDNkNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8ewMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3md3qtDpVEVS0ArlZQkfh5w3yiNwPoKL731GdiNIVFH8LmRx8zGjod
0pDQ9PZdLzHL/zzP44yD7MrqLgHxwONbUYxP+rl7xhghdyfX2Z/gJBbMOEUzita1
RZCSNYk9gJXkSwGHKRMICdh5Ki4nY4vdKGIe+RGnpTjmsAug8jp4TsmLwGYEoZ6Z
rNggSI1Vq6M8eZBUOTvwPh5Y3FJD0R/K8FDTDy79DqKui6KMBaiiIwxuOJa7XQfr
o7vI0PewyHoTZdhph+YeZ0ic14U9fF9dkx3VGmMlc/BHRNRSPGWYiwVHM4W0ehuR
/FaWhpqHS9PLpgJVfs9r9hoZks0VTt8=
-----END CERTIFICATE-----
Generated at Sat May 10 17:02:18 2025 by rpki-client