Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d151b354-e4f1-3c59-8f16-e85bb4ee4d46.roa
File: d151b354-e4f1-3c59-8f16-e85bb4ee4d46.roa (raw, json)
Hash identifier: /9uY6dbCzvJ0aY4EkwpW5iXBs2t+Yie5s8SVpGyZZhc=
Subject key identifier: 26:6A:4C:79:5E:77:D3:F0:F7:88:40:09:DD:1C:6D:CD:CA:F7:67:13
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1DE9138DEDFAD1042B2F20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d151b354-e4f1-3c59-8f16-e85bb4ee4d46.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.196.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:e9:13:8d:ed:fa:d1:04:2b:2f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5fa647e3-c67a-4ca1-80af-e0e1c1e19887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:ef:92:0c:2e:0e:f9:01:14:ae:22:e0:00:
ac:50:e6:31:1c:44:99:44:c2:a5:4d:81:1b:08:13:
a5:e7:b5:dc:9f:0b:15:63:42:f6:98:c2:6a:d7:e5:
af:4f:e5:c4:e7:ff:5a:66:4d:b8:3e:c7:26:a5:49:
48:02:7a:64:34:2a:be:5e:64:e6:1b:56:73:c5:f2:
1e:45:36:48:40:36:f4:bb:5e:04:97:7a:81:0f:0a:
f1:f7:89:27:1e:fd:90:4b:85:a8:fd:a9:e9:ac:2f:
06:10:df:f4:76:5d:0c:2a:c5:9c:29:a2:76:e5:f3:
16:cf:76:a8:0f:26:07:15:11:82:3b:45:d9:b9:c6:
81:ca:bf:59:1f:5f:66:7d:31:53:a3:5d:97:59:27:
08:02:76:a9:7a:51:4a:af:9c:07:d5:f5:91:9d:2e:
31:97:5d:c7:26:b3:a8:91:fc:bc:0b:72:d6:40:51:
74:18:bc:ac:48:26:fe:7a:ad:60:44:35:31:cf:e8:
98:32:03:de:6a:1b:54:77:7a:b2:4c:ea:89:4c:74:
da:03:1e:53:5e:42:43:c4:fb:d0:3c:86:09:77:f6:
b3:38:4f:70:da:5e:44:e2:cb:76:ca:34:10:06:d4:
4d:58:0b:d5:22:1b:26:e0:5c:c6:4d:54:3e:6a:e8:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6A:4C:79:5E:77:D3:F0:F7:88:40:09:DD:1C:6D:CD:CA:F7:67:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d151b354-e4f1-3c59-8f16-e85bb4ee4d46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.196.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:31:56:15:10:c4:ab:c8:bf:2e:6d:2e:d2:23:f7:88:c8:dc:
a8:4f:6f:ff:2b:65:42:7a:ab:55:d0:d6:d2:8f:d0:b9:96:39:
57:79:09:73:9b:c7:3b:98:78:a9:49:44:23:13:a5:08:4e:0e:
37:0d:a5:01:93:31:ec:60:c9:be:70:8b:17:dc:21:7a:5f:1a:
9a:77:bc:fb:20:c0:28:b3:03:e4:13:a2:d0:42:bb:c2:0b:52:
e2:d7:09:3b:31:52:77:eb:5f:44:19:2d:41:5b:6d:8b:06:a7:
66:27:47:bb:29:dd:0d:96:d2:95:88:e1:49:bd:00:57:04:6b:
48:af:22:f3:cd:ea:ee:f6:e2:65:42:1b:ea:70:db:64:d2:20:
1e:ce:9d:9f:a9:23:97:cb:96:b8:a3:f8:61:71:83:b9:f0:12:
53:5e:ee:5c:59:da:c5:3d:61:bc:0e:45:a1:48:fb:6f:61:b1:
2d:e7:f8:8a:1b:60:98:2c:bf:a6:1f:45:fd:b6:21:07:c8:23:
e8:cf:08:7a:6b:55:4a:a3:f3:ec:3c:fa:9f:4f:64:93:23:19:
6e:26:35:29:06:bf:cc:dd:09:a7:b9:c9:bc:84:7c:97:b5:47:
ec:61:cd:13:2c:bf:91:fd:b8:a4:43:32:4f:c7:ee:a1:e3:14:
f3:57:7c:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKHekTje360QQrLyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NWZhNjQ3ZTMtYzY3YS00Y2ExLTgwYWYtZTBlMWMxZTE5ODg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpLvkgwuDvkBFK4i4ACsUOYxHESZRMKlTYEb
CBOl57XcnwsVY0L2mMJq1+WvT+XE5/9aZk24PscmpUlIAnpkNCq+XmTmG1ZzxfIe
RTZIQDb0u14El3qBDwrx94knHv2QS4Wo/anprC8GEN/0dl0MKsWcKaJ25fMWz3ao
DyYHFRGCO0XZucaByr9ZH19mfTFTo12XWScIAnapelFKr5wH1fWRnS4xl13HJrOo
kfy8C3LWQFF0GLysSCb+eq1gRDUxz+iYMgPeahtUd3qyTOqJTHTaAx5TXkJDxPvQ
PIYJd/azOE9w2l5E4st2yjQQBtRNWAvVIhsm4FzGTVQ+auicWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZqTHled9Pw94hACd0cbc3K92cTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDE1MWIzNTQtZTRmMS0z
YzU5LThmMTYtZTg1YmI0ZWU0ZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8QAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIxVhUQxKvIvy5tLtIj94jI3KhPb/8rZUJ6q1XQ1tKP0LmWOVd5CXOb
xzuYeKlJRCMTpQhODjcNpQGTMexgyb5wixfcIXpfGpp3vPsgwCizA+QTotBCu8IL
UuLXCTsxUnfrX0QZLUFbbYsGp2YnR7sp3Q2W0pWI4Um9AFcEa0ivIvPN6u724mVC
G+pw22TSIB7OnZ+pI5fLlrij+GFxg7nwElNe7lxZ2sU9YbwORaFI+29hsS3n+Iob
YJgsv6YfRf22IQfII+jPCHprVUqj8+w8+p9PZJMjGW4mNSkGv8zdCae5ybyEfJe1
R+xhzRMsv5H9uKRDMk/H7qHjFPNXfLc=
-----END CERTIFICATE-----
Generated at Sat May 10 14:49:07 2025 by rpki-client