Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d281a300-7a7e-3ece-bd42-91613e53ad15.roa
File: d281a300-7a7e-3ece-bd42-91613e53ad15.roa (raw, json)
Hash identifier: 985kAstpqZYhIkcEWUtuspkfBkFpZth4bFf01mqMXsc=
Subject key identifier: DE:7F:4B:6F:DC:EC:D5:F4:26:CE:39:5A:DE:10:41:44:BE:F2:4B:FF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A9ADAF556BBC24A7FFBBF0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d281a300-7a7e-3ece-bd42-91613e53ad15.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 35.206.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a9:ad:af:55:6b:bc:24:a7:ff:bb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f0f009b3-151c-4ec6-937b-68b18ce59e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:0b:5f:6c:7e:11:a9:8f:7d:0b:41:11:85:
ac:66:0f:4e:d4:46:9c:13:9d:5e:1a:20:8c:a1:70:
0d:ba:35:8f:1c:3c:ac:27:64:2f:b6:65:32:db:e1:
cc:11:a6:ba:79:be:67:ad:95:f2:09:04:96:00:4d:
40:bb:85:6e:ff:72:81:a8:80:00:f2:b2:2d:5b:fd:
9a:de:77:ba:bc:2c:0a:5e:45:51:ae:77:09:7d:b9:
09:bb:0e:94:a7:3c:3e:33:9b:d8:eb:42:bb:27:ce:
eb:01:f6:16:ae:0c:88:79:09:c0:f9:34:5a:f2:26:
7f:9d:89:ff:8d:12:45:60:59:b4:64:b0:bf:8c:69:
a4:69:d7:cc:07:08:a3:16:07:cf:ea:a0:04:7a:9e:
66:cc:42:f6:d9:f1:6e:ba:74:0c:7e:ed:04:0d:44:
a7:88:ae:fe:d1:b6:d3:61:53:45:7c:0c:17:66:7a:
83:4b:25:a7:17:b8:7d:18:a8:ed:b5:e4:85:13:bf:
1b:c6:5c:b2:f3:5d:ac:f1:8b:ae:64:08:99:46:db:
06:55:87:88:30:e9:c3:b7:df:1f:2d:65:55:16:6a:
17:74:65:e6:26:f9:ee:01:78:c6:40:8f:f6:31:69:
66:a1:9b:19:7c:7d:97:e6:79:e0:ef:05:0c:7b:80:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7F:4B:6F:DC:EC:D5:F4:26:CE:39:5A:DE:10:41:44:BE:F2:4B:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d281a300-7a7e-3ece-bd42-91613e53ad15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.206.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:de:5f:e9:a6:cf:b7:d2:5a:80:fc:d4:96:4b:a1:04:9c:58:
c1:39:44:76:9d:a9:25:22:5e:2c:65:47:6b:26:5d:2b:7f:86:
9d:36:67:32:4a:a9:ce:30:83:72:02:d6:6d:3d:7d:b9:bf:b1:
52:ee:c5:62:cb:14:67:55:40:e7:19:8c:91:ba:58:2f:26:c6:
86:c6:ec:9b:2e:19:8c:2c:8b:a0:e8:46:32:e2:56:d6:27:10:
69:db:5f:ad:f7:f9:8f:86:ac:b0:6a:2c:7f:67:00:29:6b:a0:
16:89:30:6d:11:18:59:93:42:3f:09:4d:26:78:95:20:e1:f5:
87:2e:e3:a8:0e:c2:f4:75:2c:de:fb:b1:52:ba:53:54:5b:52:
e5:e6:c0:a0:9b:03:7e:40:31:a0:37:b8:57:a1:3d:a1:81:b9:
b1:72:c9:af:4b:56:47:0c:7e:66:9c:6a:26:15:0c:bb:a5:54:
df:ee:5b:06:1a:78:b4:fc:21:90:3b:2f:66:ce:8e:d0:c3:45:
65:72:0e:fb:72:36:9f:5d:f6:6d:fe:87:6a:01:8e:d2:68:93:
ac:39:1a:0f:9c:82:e3:62:33:42:9d:59:89:12:fa:f2:1d:0b:
1b:e7:bb:00:67:42:5e:a3:19:10:b1:b7:00:29:f4:0d:d8:be:
09:1c:93:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqa2vVWu8JKf/u/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZjBmMDA5YjMtMTUxYy00ZWM2LTkzN2ItNjhiMThjZTU5ZTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyoLX2x+EamPfQtBEYWsZg9O1EacE51eGiCM
oXANujWPHDysJ2QvtmUy2+HMEaa6eb5nrZXyCQSWAE1Au4Vu/3KBqIAA8rItW/2a
3ne6vCwKXkVRrncJfbkJuw6Upzw+M5vY60K7J87rAfYWrgyIeQnA+TRa8iZ/nYn/
jRJFYFm0ZLC/jGmkadfMBwijFgfP6qAEep5mzEL22fFuunQMfu0EDUSniK7+0bbT
YVNFfAwXZnqDSyWnF7h9GKjtteSFE78bxlyy812s8YuuZAiZRtsGVYeIMOnDt98f
LWVVFmoXdGXmJvnuAXjGQI/2MWlmoZsZfH2X5nng7wUMe4AHHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN5/S2/c7NX0Js45Wt4QQUS+8kv/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDI4MWEzMDAtN2E3ZS0z
ZWNlLWJkNDItOTE2MTNlNTNhZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3eX+mmz7fSWoD81JZLoQScWME5RHadqSUiXixlR2smXSt/hp02ZzJK
qc4wg3IC1m09fbm/sVLuxWLLFGdVQOcZjJG6WC8mxobG7JsuGYwsi6DoRjLiVtYn
EGnbX633+Y+GrLBqLH9nAClroBaJMG0RGFmTQj8JTSZ4lSDh9Ycu46gOwvR1LN77
sVK6U1RbUuXmwKCbA35AMaA3uFehPaGBubFyya9LVkcMfmacaiYVDLulVN/uWwYa
eLT8IZA7L2bOjtDDRWVyDvtyNp9d9m3+h2oBjtJok6w5Gg+cguNiM0KdWYkS+vId
CxvnuwBnQl6jGRCxtwAp9A3Yvgkck0c=
-----END CERTIFICATE-----
Generated at Sat May 10 13:36:44 2025 by rpki-client