Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf46faa4-0614-3b74-a558-75b8a26c1019.roa
File: bf46faa4-0614-3b74-a558-75b8a26c1019.roa (raw, json)
Hash identifier: RswtJtebXxpvmV6BvbsdwJwKZMHWfIwt+FIulhx9+U8=
Subject key identifier: 7D:31:79:11:54:AD:AF:22:36:17:0A:3E:EA:CF:6C:B4:76:E8:D5:C5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A2538A0AA14AD40C5609680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf46faa4-0614-3b74-a558-75b8a26c1019.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 19527
IP address blocks: 35.217.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:25:38:a0:aa:14:ad:40:c5:60:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=52144b12-0c84-4261-b426-1150fb85cfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:97:4b:43:23:a5:04:2b:0b:13:73:56:c6:
ae:7b:65:c1:50:0b:40:01:e2:c4:b1:be:22:87:c0:
f6:5c:e3:12:e3:22:8f:ba:e6:4f:2e:3b:11:30:67:
c3:96:38:1e:4b:88:f2:a7:f3:17:85:3f:88:b6:8d:
94:32:e1:d5:e7:97:60:71:bb:c1:7b:91:f1:64:6d:
cb:30:a1:90:77:1d:fa:20:ee:17:91:38:34:b8:71:
7c:39:9d:4e:19:fc:5e:44:f4:d7:c8:8c:44:ff:42:
a1:ce:a3:aa:a3:75:19:79:ea:86:23:4b:a5:6f:d2:
ab:cd:74:95:f4:e7:c3:65:7e:51:dd:57:00:7c:17:
6c:14:c2:4a:ad:12:3b:e3:c4:94:d2:ff:0e:3a:cb:
09:22:87:80:05:26:33:05:6b:cb:a6:be:25:51:bc:
05:d6:94:73:5a:1c:12:40:e7:c8:2d:c9:b2:dd:d5:
d4:f3:c7:7f:49:11:02:a1:69:b1:5c:a6:7a:30:7a:
25:53:c2:30:82:13:02:7f:43:01:b9:15:3e:cd:d8:
91:48:3e:e4:15:0c:d0:29:dc:a2:93:f8:2c:41:2c:
93:85:0b:08:d7:4a:67:60:95:02:c0:f6:7b:97:02:
d3:3d:36:82:9e:bf:87:35:99:44:8a:2d:b4:6d:43:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:31:79:11:54:AD:AF:22:36:17:0A:3E:EA:CF:6C:B4:76:E8:D5:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf46faa4-0614-3b74-a558-75b8a26c1019.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.217.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:24:e9:27:0d:8d:42:24:67:ad:a6:cf:65:32:5d:27:0c:f6:
a3:7d:99:14:f9:95:54:9e:85:c9:8c:ec:db:ac:ed:0a:c6:53:
93:c4:b7:1a:36:10:fa:37:d7:2e:91:d6:14:4d:b5:d3:d3:82:
46:4e:f1:01:b9:9e:b0:d7:ce:43:f2:53:d0:82:5b:12:d1:e1:
ae:ef:e5:db:16:af:e8:94:2c:39:35:45:66:b5:1f:96:64:52:
f8:4c:b6:88:94:34:b1:5e:63:c5:18:89:0c:21:89:b9:02:f1:
22:77:32:ce:9a:49:5f:a6:f5:b1:fd:d7:4e:aa:61:88:44:15:
55:cc:6d:22:ee:15:85:d5:65:a0:f1:13:06:35:e4:87:87:e7:
cf:05:9e:9a:19:43:f3:85:57:f2:91:7b:a3:7e:ee:7e:fc:ec:
98:2f:54:2d:b5:43:c9:b2:88:5a:03:56:d3:08:1f:ea:8b:1f:
12:f1:b2:2f:e1:3a:13:df:f8:cc:4f:6b:85:e1:12:95:90:71:
c4:db:49:d6:35:13:54:08:cf:dc:11:db:ee:91:79:c3:8c:70:
67:45:88:3d:62:ed:c8:1c:ca:ad:94:51:ed:5e:4c:ec:c9:1e:
1d:ee:b7:26:1a:55:84:25:df:53:52:24:a8:ad:99:64:84:43:
4b:e4:fc:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJTigqhStQMVgloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTIxNDRiMTItMGM4NC00MjYxLWI0MjYtMTE1MGZiODVjZmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAKXS0MjpQQrCxNzVsaue2XBUAtAAeLEsb4i
h8D2XOMS4yKPuuZPLjsRMGfDljgeS4jyp/MXhT+Ito2UMuHV55dgcbvBe5HxZG3L
MKGQdx36IO4XkTg0uHF8OZ1OGfxeRPTXyIxE/0KhzqOqo3UZeeqGI0ulb9KrzXSV
9OfDZX5R3VcAfBdsFMJKrRI748SU0v8OOssJIoeABSYzBWvLpr4lUbwF1pRzWhwS
QOfILcmy3dXU88d/SRECoWmxXKZ6MHolU8IwghMCf0MBuRU+zdiRSD7kFQzQKdyi
k/gsQSyThQsI10pnYJUCwPZ7lwLTPTaCnr+HNZlEii20bUOdzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0xeRFUra8iNhcKPurPbLR26NXFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY0NmZhYTQtMDYxNC0z
Yjc0LWE1NTgtNzViOGEyNmMxMDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI9kAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAk6ScNjUIkZ62mz2UyXScM9qN9mRT5lVSehcmM7Nus7QrGU5PEtxo2
EPo31y6R1hRNtdPTgkZO8QG5nrDXzkPyU9CCWxLR4a7v5dsWr+iULDk1RWa1H5Zk
UvhMtoiUNLFeY8UYiQwhibkC8SJ3Ms6aSV+m9bH9106qYYhEFVXMbSLuFYXVZaDx
EwY15IeH588FnpoZQ/OFV/KRe6N+7n787JgvVC21Q8myiFoDVtMIH+qLHxLxsi/h
OhPf+MxPa4XhEpWQccTbSdY1E1QIz9wR2+6RecOMcGdFiD1i7cgcyq2UUe1eTOzJ
Hh3utyYaVYQl31NSJKitmWSEQ0vk/Ao=
-----END CERTIFICATE-----
Generated at Sat May 10 16:46:04 2025 by rpki-client