Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d519d5cc-57e6-3886-b7cc-9f32b30cc3b6.roa
File: d519d5cc-57e6-3886-b7cc-9f32b30cc3b6.roa (raw, json)
Hash identifier: tSQxxmG1Fy7+UuLymqqA87aFQhd+UD4p5tjXZesTzEo=
Subject key identifier: CF:63:79:73:8E:FF:E2:1E:88:FF:58:A5:47:23:9F:8B:73:A9:82:4B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A06F3DE5A3F127584F3C680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d519d5cc-57e6-3886-b7cc-9f32b30cc3b6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 35.220.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:06:f3:de:5a:3f:12:75:84:f3:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=35e423b0-128a-4b75-bf0b-b5ba5322e3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:a6:85:64:cf:aa:5b:3e:e5:0b:79:49:8b:
e6:3c:8c:2b:31:e4:38:40:c2:18:42:5d:4e:0b:9c:
b5:fe:2f:f6:3b:f2:b2:03:8d:dc:27:2f:b6:25:8d:
54:4d:f5:05:00:bf:1a:1b:50:e0:4b:96:e4:b4:81:
0b:7d:f1:fa:4c:58:ab:12:d6:5f:a7:0f:b9:40:55:
63:b7:05:54:7d:91:00:aa:6d:a7:6a:fd:ec:fe:55:
69:46:65:e2:35:2c:01:b8:a1:0f:f2:ea:25:5f:32:
5f:26:68:6b:d9:13:8c:fc:fe:bb:ce:f8:bc:ef:68:
80:b7:5f:c2:2e:47:80:01:15:63:61:e1:ed:aa:80:
62:7b:2f:1d:da:85:19:f3:76:e1:4b:6d:87:76:7c:
34:7d:7a:be:de:cb:f7:8f:39:fd:a7:55:45:76:b3:
ca:33:3c:5a:a6:a9:36:6a:fe:86:fc:3e:06:e7:68:
db:66:d8:f5:05:e4:a2:a3:9f:27:f8:e2:0e:61:e5:
d4:de:8f:b5:b6:e5:78:80:76:57:21:df:85:67:0e:
45:df:eb:be:19:c8:79:01:1b:e2:a3:2f:77:1f:30:
b1:b4:32:e6:a5:bb:2e:4a:d6:84:96:52:cb:bb:1f:
39:ac:b8:42:2d:7b:06:d0:00:28:dc:fb:7c:8b:d7:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:63:79:73:8E:FF:E2:1E:88:FF:58:A5:47:23:9F:8B:73:A9:82:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d519d5cc-57e6-3886-b7cc-9f32b30cc3b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.220.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:17:fa:03:89:28:8a:90:2a:16:aa:a5:47:e1:f1:4f:86:9e:
2f:0a:b1:4a:92:45:58:8e:42:0e:d0:41:e3:69:20:60:c4:50:
6e:8b:79:78:b9:ef:2f:cd:5d:f1:0d:85:a0:e5:3e:13:82:d1:
66:48:d8:f2:65:b8:f7:33:f5:19:f1:6c:48:41:f1:a5:26:1c:
59:91:37:90:25:6f:fc:11:3f:70:44:96:25:00:ec:ca:d7:3c:
e9:0a:e8:9c:03:bd:dc:db:ab:29:ac:87:37:cc:c6:aa:cf:3b:
dd:33:b1:ec:bc:79:eb:48:a7:e0:6d:16:bf:61:54:ff:6c:1e:
e3:62:c8:90:b3:80:f3:54:57:fd:b6:74:f7:cc:4d:48:6d:25:
3c:be:84:01:2d:74:c3:dd:98:f8:52:b2:59:bc:45:9d:cd:9c:
95:3a:90:03:05:21:e2:36:eb:36:d2:87:0e:2c:2d:cb:b9:d0:
3d:e4:d0:1d:b0:55:b1:8a:84:37:51:ed:ed:ee:91:8d:ab:fe:
6c:98:13:cb:ae:16:28:90:0e:0e:3f:47:e0:83:a3:52:c6:48:
4b:48:75:f8:27:a7:c1:5c:9c:b4:a2:94:52:84:4b:c2:20:65:
0b:6e:66:c0:49:46:30:c6:1c:e3:b2:e6:6f:eb:e6:26:7c:2e:
06:7a:af:cc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEMKBvPeWj8SdYTzxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MzVlNDIzYjAtMTI4YS00Yjc1LWJmMGItYjViYTUzMjJlM2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYOmhWTPqls+5Qt5SYvmPIwrMeQ4QMIYQl1O
C5y1/i/2O/KyA43cJy+2JY1UTfUFAL8aG1DgS5bktIELffH6TFirEtZfpw+5QFVj
twVUfZEAqm2nav3s/lVpRmXiNSwBuKEP8uolXzJfJmhr2ROM/P67zvi872iAt1/C
LkeAARVjYeHtqoBiey8d2oUZ83bhS22Hdnw0fXq+3sv3jzn9p1VFdrPKMzxapqk2
av6G/D4G52jbZtj1BeSio58n+OIOYeXU3o+1tuV4gHZXId+FZw5F3+u+Gch5ARvi
oy93HzCxtDLmpbsuStaEllLLux85rLhCLXsG0AAo3Pt8i9f0OwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM9jeXOO/+IeiP9YpUcjn4tzqYJLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDUxOWQ1Y2MtNTdlNi0z
ODg2LWI3Y2MtOWYzMmIzMGNjM2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCI9wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZxf6A4koipAqFqqlR+HxT4aeLwqxSpJFWI5CDtBB42kgYMRQbot5eLnv
L81d8Q2FoOU+E4LRZkjY8mW49zP1GfFsSEHxpSYcWZE3kCVv/BE/cESWJQDsytc8
6QronAO93NurKayHN8zGqs873TOx7Lx560in4G0Wv2FU/2we42LIkLOA81RX/bZ0
98xNSG0lPL6EAS10w92Y+FKyWbxFnc2clTqQAwUh4jbrNtKHDiwty7nQPeTQHbBV
sYqEN1Ht7e6Rjav+bJgTy64WKJAODj9H4IOjUsZIS0h1+CenwVyctKKUUoRLwiBl
C25mwElGMMYc47Lmb+vmJnwuBnqvzA==
-----END CERTIFICATE-----
Generated at Sat May 10 11:54:09 2025 by rpki-client