Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce3a6e5c-5284-31fc-8d9b-ab77192d3c9a.roa
File: ce3a6e5c-5284-31fc-8d9b-ab77192d3c9a.roa (raw, json)
Hash identifier: kluMxfuVOI06JSKIXiHNmvyH8e4Z5ug4bO5KOdWnlrw=
Subject key identifier: C6:EB:F3:C4:90:47:7E:4E:3D:32:B4:BB:E7:37:75:45:DF:89:74:8D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A22A2F6F2B0D15503D4D08
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce3a6e5c-5284-31fc-8d9b-ab77192d3c9a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.189.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a2:2a:2f:6f:2b:0d:15:50:3d:4d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=da9367ba-a27e-4900-b9fa-074fddf1b2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:a4:62:11:b2:4c:f2:9e:61:48:14:56:09:
07:1c:18:b6:6c:98:04:3d:83:5b:47:66:4a:93:06:
54:d1:13:04:fa:de:41:71:ea:7a:7b:fc:6b:96:54:
78:37:2d:b6:f0:0e:73:74:96:d9:bc:98:e2:6f:0e:
f5:f6:04:3c:fe:5e:c4:db:84:a5:7e:27:c4:47:fc:
4c:35:b5:5a:11:10:5d:90:92:b8:ef:1c:f5:c3:9a:
cd:32:27:85:17:0a:82:f0:44:d1:fb:ad:58:46:d3:
8d:d8:43:32:41:12:31:25:20:2d:7a:dc:74:2e:8c:
d1:4c:f8:39:69:5a:7c:97:da:50:12:43:6e:03:4b:
53:91:8a:0e:77:0f:2e:ed:39:9c:97:fb:c0:3c:e8:
8b:e8:c0:dd:4b:57:20:ee:ba:17:95:ad:db:03:2a:
d2:d9:a7:57:48:61:52:17:d2:2f:e7:80:ec:3c:0d:
11:70:52:5c:d1:bf:21:b7:96:a2:01:a1:af:e9:c1:
77:d4:90:32:84:c4:da:67:86:68:72:f3:f3:67:8d:
65:b2:2f:91:b4:1e:eb:8b:38:41:4a:b5:b6:1c:ff:
21:6b:35:bd:ca:ec:4f:b4:e7:ac:e9:af:20:88:4b:
67:6c:13:a0:90:a2:49:26:5b:09:d3:ea:01:a7:56:
ff:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EB:F3:C4:90:47:7E:4E:3D:32:B4:BB:E7:37:75:45:DF:89:74:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce3a6e5c-5284-31fc-8d9b-ab77192d3c9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:1f:59:e5:7d:63:d7:7e:5a:8c:86:3d:18:c9:99:da:41:5b:
86:e5:eb:41:4f:cd:21:be:7c:9b:88:1d:aa:66:1c:d8:74:f3:
a5:59:45:b4:2c:ac:a3:7e:56:fa:ca:a3:ad:36:91:ba:ef:64:
a6:90:0a:80:a6:db:fa:3e:65:30:38:40:1b:1e:a2:a6:c1:9d:
7d:66:f2:62:82:e4:61:36:73:1c:4b:1c:5a:15:1b:b2:b4:13:
7b:b2:4a:bb:51:09:fc:be:fb:31:5b:22:8d:17:2c:a7:0a:50:
7d:ac:3d:5e:b0:bc:ec:c3:56:93:97:bc:e3:f3:ea:18:52:82:
f9:43:9d:08:d7:2f:4c:87:fc:33:ab:b2:e9:59:27:d1:b1:a9:
99:29:69:fd:ca:de:f5:0c:1c:15:53:81:87:3d:7b:74:bc:f0:
09:ef:ca:1b:d5:5c:cb:ed:b6:97:78:1e:30:0c:80:33:9e:29:
c0:fb:45:96:0e:74:6a:3c:15:a5:0a:d0:24:8c:52:7b:2e:4e:
8e:1c:70:8b:d7:70:0d:3a:bf:79:91:09:5e:eb:25:13:78:76:
18:ea:fe:30:89:ac:1b:da:cf:08:f6:07:96:16:0c:51:ae:ea:
5e:a6:af:b2:1b:49:db:dd:d5:29:fd:fb:0c:be:86:1d:9f:c6:
92:01:99:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnoiovbysNFVA9TQgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZGE5MzY3YmEtYTI3ZS00OTAwLWI5ZmEtMDc0ZmRkZjFiMmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG2kYhGyTPKeYUgUVgkHHBi2bJgEPYNbR2ZK
kwZU0RME+t5Bcep6e/xrllR4Ny228A5zdJbZvJjibw719gQ8/l7E24SlfifER/xM
NbVaERBdkJK47xz1w5rNMieFFwqC8ETR+61YRtON2EMyQRIxJSAtetx0LozRTPg5
aVp8l9pQEkNuA0tTkYoOdw8u7Tmcl/vAPOiL6MDdS1cg7roXla3bAyrS2adXSGFS
F9Iv54DsPA0RcFJc0b8ht5aiAaGv6cF31JAyhMTaZ4ZocvPzZ41lsi+RtB7rizhB
SrW2HP8hazW9yuxPtOes6a8giEtnbBOgkKJJJlsJ0+oBp1b/pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMbr88SQR35OPTK0u+c3dUXfiXSNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2UzYTZlNWMtNTI4NC0z
MWZjLThkOWItYWI3NzE5MmQzYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI73QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADIfWeV9Y9d+WoyGPRjJmdpBW4bl60FPzSG+fJuIHapmHNh086VZRbQs
rKN+VvrKo602kbrvZKaQCoCm2/o+ZTA4QBseoqbBnX1m8mKC5GE2cxxLHFoVG7K0
E3uySrtRCfy++zFbIo0XLKcKUH2sPV6wvOzDVpOXvOPz6hhSgvlDnQjXL0yH/DOr
sulZJ9GxqZkpaf3K3vUMHBVTgYc9e3S88AnvyhvVXMvttpd4HjAMgDOeKcD7RZYO
dGo8FaUK0CSMUnsuTo4ccIvXcA06v3mRCV7rJRN4dhjq/jCJrBvazwj2B5YWDFGu
6l6mr7IbSdvd1Sn9+wy+hh2fxpIBmYU=
-----END CERTIFICATE-----
Generated at Sat May 10 14:43:50 2025 by rpki-client