Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae39788d-6f09-335a-a137-7477a388f5db.roa
File: ae39788d-6f09-335a-a137-7477a388f5db.roa (raw, json)
Hash identifier: k2qaZTPWgh1JrQlUIbEdy/59dKV30rw8WVarZFYGcJI=
Subject key identifier: D5:68:5D:8F:72:2D:B3:C3:18:8E:74:96:B9:AD:82:1D:FB:B0:1F:C0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A2418108249D0EC0E6777A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae39788d-6f09-335a-a137-7477a388f5db.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 19527
IP address blocks: 35.206.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:18:10:82:49:d0:ec:0e:67:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3aa0eda9-8018-423e-9d73-d676b87c7e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:ce:46:d1:07:b9:2b:de:ac:f0:c7:b7:d6:
93:35:c4:65:cc:6f:54:0a:b7:e8:b8:78:ae:4d:a0:
52:64:c8:22:be:ff:14:c0:15:0d:fb:d2:e2:e7:3a:
6b:75:aa:0d:f4:2d:3c:f7:89:4c:9a:79:35:4a:58:
e1:b3:f0:9d:41:4a:2d:ca:6a:8c:48:c1:3c:b8:00:
ee:ed:51:72:28:34:66:87:73:1a:73:24:18:8a:cd:
97:12:54:1d:91:de:23:6b:fd:19:d4:c2:87:a7:e4:
35:34:46:2d:35:31:66:be:af:5f:e9:7a:82:33:91:
84:19:87:0c:48:3b:2a:e6:3b:cd:ca:11:da:6e:44:
6e:3c:7a:67:b8:d8:14:3b:83:cf:d0:5f:9a:44:1c:
ab:a2:94:6b:fc:5d:f5:57:3e:24:10:7e:39:ab:06:
d2:f0:19:73:2e:c9:a3:ab:ec:77:06:fd:61:82:f8:
2f:2d:6e:f1:b6:79:73:da:6a:90:a1:1c:d2:5a:0d:
32:08:50:ab:be:19:51:58:8c:b2:42:dc:89:7c:58:
44:00:37:f0:47:ca:50:29:19:e5:8c:3f:b4:bb:e8:
17:cc:c4:d5:7b:59:7f:92:f0:fd:f7:13:7d:58:90:
c7:c5:f8:04:ea:84:e6:b0:96:e1:d3:a8:ac:d8:47:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:68:5D:8F:72:2D:B3:C3:18:8E:74:96:B9:AD:82:1D:FB:B0:1F:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae39788d-6f09-335a-a137-7477a388f5db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.206.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:a9:60:8f:e3:7c:04:57:57:c9:d9:76:20:ec:08:d9:89:ba:
11:a0:76:7f:16:6a:16:1b:ee:31:d2:ce:e9:a3:c2:7b:81:b7:
49:74:5c:96:64:2b:cb:8e:29:be:1d:e6:b3:51:80:ca:87:6a:
27:8b:cf:90:59:5e:ee:27:dc:26:25:af:8b:52:a7:18:33:f1:
cd:1b:fe:f2:a8:06:c0:66:51:d0:41:24:b0:dc:fb:20:ae:a4:
9c:7d:1c:d9:ed:b7:4c:99:67:68:be:f2:67:5f:c3:f8:da:e2:
13:a1:24:91:6f:5c:7c:11:41:07:a6:db:80:38:70:55:31:16:
a5:d0:45:02:ee:54:65:73:ee:52:78:33:1b:7f:1e:8d:d6:e7:
52:f4:00:a9:fc:5d:6a:4f:91:ae:68:8a:cc:7e:6a:61:a8:cd:
72:f2:d5:9d:e6:a6:0c:77:16:12:42:dd:c8:07:52:71:44:bc:
97:d6:0e:b2:a9:c3:08:7a:c9:32:bf:d0:ef:ea:ac:8f:86:68:
8d:ec:9a:15:a9:dd:6c:fd:d8:c4:d4:56:47:78:94:fd:11:4c:
00:ac:33:62:8f:12:11:21:66:5a:ed:b7:3d:50:f1:8e:64:46:
0b:25:67:ac:aa:44:e2:0a:d5:7a:40:a1:2c:11:27:55:1e:16:
fa:e2:ef:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJBgQgknQ7A5nd6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
M2FhMGVkYTktODAxOC00MjNlLTlkNzMtZDY3NmI4N2M3ZTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSXORtEHuSverPDHt9aTNcRlzG9UCrfouHiu
TaBSZMgivv8UwBUN+9Li5zprdaoN9C0894lMmnk1Sljhs/CdQUotymqMSME8uADu
7VFyKDRmh3MacyQYis2XElQdkd4ja/0Z1MKHp+Q1NEYtNTFmvq9f6XqCM5GEGYcM
SDsq5jvNyhHabkRuPHpnuNgUO4PP0F+aRByropRr/F31Vz4kEH45qwbS8BlzLsmj
q+x3Bv1hgvgvLW7xtnlz2mqQoRzSWg0yCFCrvhlRWIyyQtyJfFhEADfwR8pQKRnl
jD+0u+gXzMTVe1l/kvD99xN9WJDHxfgE6oTmsJbh06is2EcEwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVoXY9yLbPDGI50lrmtgh37sB/AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWUzOTc4OGQtNmYwOS0z
MzVhLWExMzctNzQ3N2EzODhmNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI86AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJSpYI/jfARXV8nZdiDsCNmJuhGgdn8WahYb7jHSzumjwnuBt0l0XJZk
K8uOKb4d5rNRgMqHaieLz5BZXu4n3CYlr4tSpxgz8c0b/vKoBsBmUdBBJLDc+yCu
pJx9HNntt0yZZ2i+8mdfw/ja4hOhJJFvXHwRQQem24A4cFUxFqXQRQLuVGVz7lJ4
Mxt/Ho3W51L0AKn8XWpPka5oisx+amGozXLy1Z3mpgx3FhJC3cgHUnFEvJfWDrKp
wwh6yTK/0O/qrI+GaI3smhWp3Wz92MTUVkd4lP0RTACsM2KPEhEhZlrttz1Q8Y5k
RgslZ6yqROIK1XpAoSwRJ1UeFvri71M=
-----END CERTIFICATE-----
Generated at Sat May 10 13:40:45 2025 by rpki-client