Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b648df10-abe2-3636-83ba-ec2f50c08a5e.roa
File: b648df10-abe2-3636-83ba-ec2f50c08a5e.roa (raw, json)
Hash identifier: wO74DO+WGfMt1l+Try/9fiCZk5iDLE8Uk58QWZNWTGk=
Subject key identifier: 47:2E:8A:C7:FC:70:D2:E4:52:C5:EB:11:7D:AC:51:56:F0:DA:F0:8B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FFFED217CA5451C9DCD7C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b648df10-abe2-3636-83ba-ec2f50c08a5e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.228.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ff:fe:d2:17:ca:54:51:c9:dc:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=bbf9641b-2e28-49ed-92b9-59585f534934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:b9:ad:e1:9a:4a:61:36:29:8b:47:62:e1:
77:44:62:93:a8:db:1f:68:b5:f6:54:03:ed:0c:46:
02:75:c9:e3:b3:d8:e5:17:9b:c4:0b:53:d9:2a:1a:
d5:48:7d:1c:73:d9:85:4f:17:85:74:1a:cd:b3:db:
b1:e4:d1:af:7b:7c:4e:2c:7c:12:5e:a6:83:74:78:
aa:11:ae:2c:2b:f2:66:41:4f:8a:e3:e5:a3:e6:fe:
cb:5c:6a:b1:12:d9:16:0d:68:03:64:d1:fa:a9:be:
d6:3b:82:65:d5:9b:2c:07:b3:dc:26:03:63:d3:f9:
75:2c:d2:a4:f9:ea:eb:7d:3a:b6:c9:f1:d4:74:a5:
85:4e:a7:4f:f9:df:64:58:eb:cc:e6:cd:a0:ab:da:
8b:b3:21:e4:21:50:f5:4b:2b:80:de:0e:4a:1c:1a:
c2:6a:5c:cd:2b:35:7d:53:90:44:f3:e7:6d:6d:43:
c9:9d:1b:6b:10:46:f3:90:23:89:54:3a:39:3e:1c:
f2:86:c8:8a:ca:88:81:39:51:39:c1:d8:bc:bd:b1:
22:47:bf:e6:20:e9:50:61:14:86:08:b6:5c:52:90:
cf:9f:19:f4:93:34:b0:2e:5f:1a:2a:14:de:63:2f:
91:4c:bd:0c:0c:a5:5e:24:5c:45:9d:bb:35:e6:52:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:8A:C7:FC:70:D2:E4:52:C5:EB:11:7D:AC:51:56:F0:DA:F0:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b648df10-abe2-3636-83ba-ec2f50c08a5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.228.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a4:5c:c2:e4:5a:29:50:33:18:4c:b4:71:0e:8d:e0:ae:ed:
f5:1e:e4:f8:de:4d:82:c2:a8:79:d6:9b:30:42:ae:61:cd:5e:
73:af:5a:f9:b7:2e:b8:0b:67:ce:8e:6f:20:82:7a:c3:90:b5:
58:7b:49:77:36:e3:45:96:c8:96:fd:bf:1f:78:d6:a3:00:c1:
9f:58:d8:3d:1c:8a:27:9e:35:7b:6e:3e:6a:3d:6f:77:6e:d3:
01:bf:a1:1a:d6:3f:e1:e3:a5:7d:a3:74:76:a7:b3:21:33:98:
08:91:72:d2:0d:5f:1e:ae:0e:4a:c4:25:c9:fa:88:db:20:0e:
33:da:4a:6a:ed:c2:0f:ba:f8:7d:4d:d6:3c:04:ee:af:59:05:
9d:e6:65:93:c0:e2:f4:51:0e:cc:9f:8d:00:b2:85:6a:bc:7d:
84:35:68:63:47:1e:c1:d1:5a:17:59:34:b2:69:d5:7e:96:cd:
5b:2b:b4:74:c6:ac:33:23:8b:73:f1:45:74:dd:7f:53:f4:52:
ba:fc:e7:ec:a2:b3:2a:eb:46:7f:a4:4f:5b:11:d1:f3:27:aa:
67:4a:f7:f6:da:12:c0:aa:01:0a:70:8e:6c:9f:cc:89:90:f9:
89:8e:d2:7f:e6:79:c2:25:e9:60:90:e4:97:03:94:67:a3:bb:
81:7d:0d:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ//7SF8pUUcnc18AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YmJmOTY0MWItMmUyOC00OWVkLTkyYjktNTk1ODVmNTM0OTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT25reGaSmE2KYtHYuF3RGKTqNsfaLX2VAPt
DEYCdcnjs9jlF5vEC1PZKhrVSH0cc9mFTxeFdBrNs9ux5NGve3xOLHwSXqaDdHiq
Ea4sK/JmQU+K4+Wj5v7LXGqxEtkWDWgDZNH6qb7WO4Jl1ZssB7PcJgNj0/l1LNKk
+errfTq2yfHUdKWFTqdP+d9kWOvM5s2gq9qLsyHkIVD1SyuA3g5KHBrCalzNKzV9
U5BE8+dtbUPJnRtrEEbzkCOJVDo5PhzyhsiKyoiBOVE5wdi8vbEiR7/mIOlQYRSG
CLZcUpDPnxn0kzSwLl8aKhTeYy+RTL0MDKVeJFxFnbs15lI8qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEcuisf8cNLkUsXrEX2sUVbw2vCLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjY0OGRmMTAtYWJlMi0z
NjM2LTgzYmEtZWMyZjUwYzA4YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+SQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqkXMLkWilQMxhMtHEOjeCu7fUe5PjeTYLCqHnWmzBCrmHNXnOvWvm3
LrgLZ86ObyCCesOQtVh7SXc240WWyJb9vx941qMAwZ9Y2D0ciieeNXtuPmo9b3du
0wG/oRrWP+HjpX2jdHansyEzmAiRctINXx6uDkrEJcn6iNsgDjPaSmrtwg+6+H1N
1jwE7q9ZBZ3mZZPA4vRRDsyfjQCyhWq8fYQ1aGNHHsHRWhdZNLJp1X6WzVsrtHTG
rDMji3PxRXTdf1P0Urr85+yisyrrRn+kT1sR0fMnqmdK9/baEsCqAQpwjmyfzImQ
+YmO0n/mecIl6WCQ5JcDlGeju4F9DeY=
-----END CERTIFICATE-----
Generated at Sat May 10 12:21:29 2025 by rpki-client