Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafb49b8-ea27-3a58-a988-1e1cdddec87e.roa
File: cafb49b8-ea27-3a58-a988-1e1cdddec87e.roa (raw, json)
Hash identifier: ywQJOLR1cVkZZ99vm+YA1bCmF6Ob9otnbS7x76X4aK8=
Subject key identifier: 7A:61:05:A1:D7:B3:71:04:6E:20:0E:78:B0:B0:19:88:86:7B:C9:27
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7AA7989CA80A1AD8A9E0EC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafb49b8-ea27-3a58-a988-1e1cdddec87e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 35.212.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:aa:79:89:ca:80:a1:ad:8a:9e:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=17b95caf-58a8-4ce7-b878-f09ced136ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5d:bf:50:f8:de:62:d4:af:3f:54:97:de:c6:
a2:b4:de:8f:85:2b:ab:c6:55:a5:3e:d4:1b:d9:f5:
40:d3:48:e1:b6:a3:41:3c:ad:15:0b:94:62:d8:3d:
dc:b5:26:7c:37:33:50:cc:16:05:8c:96:13:7f:70:
c8:6a:ef:53:8b:c3:8c:ee:b7:49:4f:c9:37:0a:df:
17:ba:63:17:08:0f:a4:33:9f:07:84:2b:9c:2f:89:
dc:31:e5:9e:4b:e8:c6:45:94:58:5e:08:7c:2d:c6:
83:96:1f:6b:33:b8:73:a2:51:e9:f2:95:f9:1a:19:
f6:76:30:ee:c9:4b:51:c8:d6:da:01:13:82:51:36:
a0:0a:dc:ed:32:6e:6a:31:f4:3c:6a:a4:23:51:24:
44:18:c9:5d:fe:05:f8:b7:33:69:72:34:70:fe:2c:
4d:4a:40:3e:f7:7b:cc:87:b7:f0:b3:3d:db:30:9a:
cd:48:5c:3e:ed:ee:1b:f2:7d:87:f3:b1:e3:21:f2:
21:b2:51:e3:fc:27:44:4b:14:4b:76:b8:cb:eb:9b:
42:46:cc:bf:db:fa:5e:53:67:49:31:a8:a5:fc:57:
63:b0:81:f1:06:47:67:70:10:69:33:60:21:18:3c:
ee:d0:6d:f4:ae:c8:f0:74:c6:36:0e:79:f8:6e:88:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:61:05:A1:D7:B3:71:04:6E:20:0E:78:B0:B0:19:88:86:7B:C9:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafb49b8-ea27-3a58-a988-1e1cdddec87e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.212.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:49:b8:24:1f:d3:a0:34:fc:f5:3e:3b:72:df:1c:6a:2b:6e:
65:53:8d:c4:6f:08:36:bd:a1:eb:b1:0e:73:da:e7:31:92:55:
b4:4c:d5:2f:cc:84:52:7b:a9:9d:9a:3f:a9:83:15:1c:c1:29:
0b:a6:53:c3:26:06:1b:42:2b:4d:79:6b:27:5d:2a:c5:c1:3d:
c9:4a:f1:5f:b2:18:2d:5c:43:bc:8b:34:8e:11:5f:68:de:ee:
85:0e:a5:d7:f7:ed:4d:a4:69:29:0f:12:c4:23:92:4c:d3:b8:
c9:a5:ed:e0:84:de:f2:11:97:3b:04:cf:ea:c9:f6:47:46:f7:
26:72:97:3a:bf:22:a9:af:6f:16:4b:22:6d:84:1e:13:46:88:
7d:68:0b:68:b4:c9:ea:05:d3:0c:eb:a0:c3:1c:54:dd:e4:95:
c6:85:b5:8a:b4:24:78:c1:74:ad:c7:9d:a4:99:fd:2c:85:93:
0d:7c:26:6f:ca:89:28:20:78:d0:e3:d1:92:7a:99:0e:c6:ad:
f9:03:20:87:a1:27:5c:04:19:c3:f5:f3:aa:1b:43:46:6c:a4:
6e:0a:60:e4:57:20:e2:cc:d2:25:63:04:8e:bb:4c:c8:e1:13:
bd:fd:f3:79:e7:5e:cc:28:43:e1:db:a2:79:d8:91:1d:9a:0b:
fd:8f:e3:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqnmJyoChrYqeDsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MTdiOTVjYWYtNThhOC00Y2U3LWI4NzgtZjA5Y2VkMTM2ZWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF2/UPjeYtSvP1SX3saitN6PhSurxlWlPtQb
2fVA00jhtqNBPK0VC5Ri2D3ctSZ8NzNQzBYFjJYTf3DIau9Ti8OM7rdJT8k3Ct8X
umMXCA+kM58HhCucL4ncMeWeS+jGRZRYXgh8LcaDlh9rM7hzolHp8pX5Ghn2djDu
yUtRyNbaAROCUTagCtztMm5qMfQ8aqQjUSREGMld/gX4tzNpcjRw/ixNSkA+93vM
h7fwsz3bMJrNSFw+7e4b8n2H87HjIfIhslHj/CdESxRLdrjL65tCRsy/2/peU2dJ
Mail/FdjsIHxBkdncBBpM2AhGDzu0G30rsjwdMY2Dnn4bogmSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHphBaHXs3EEbiAOeLCwGYiGe8knMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2FmYjQ5YjgtZWEyNy0z
YTU4LWE5ODgtMWUxY2RkZGVjODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9SAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlJuCQf06A0/PU+O3LfHGorbmVTjcRvCDa9oeuxDnPa5zGSVbRM1S/M
hFJ7qZ2aP6mDFRzBKQumU8MmBhtCK015ayddKsXBPclK8V+yGC1cQ7yLNI4RX2je
7oUOpdf37U2kaSkPEsQjkkzTuMml7eCE3vIRlzsEz+rJ9kdG9yZylzq/IqmvbxZL
Im2EHhNGiH1oC2i0yeoF0wzroMMcVN3klcaFtYq0JHjBdK3HnaSZ/SyFkw18Jm/K
iSggeNDj0ZJ6mQ7GrfkDIIehJ1wEGcP186obQ0ZspG4KYORXIOLM0iVjBI67TMjh
E73983nnXswoQ+HbonnYkR2aC/2P4/k=
-----END CERTIFICATE-----
Generated at Sat May 10 14:38:04 2025 by rpki-client