Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd452371-5c3d-3310-a6cf-f3aa51af378c.roa
File: dd452371-5c3d-3310-a6cf-f3aa51af378c.roa (raw, json)
Hash identifier: P1oNpz4Pu3K0KBjcjNYjkP4TuK6IRUReADT6ANYtZIY=
Subject key identifier: 13:58:CE:7D:DE:A6:8A:E5:73:48:AF:AE:B4:93:A3:64:FB:83:02:9E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F405D83C06DDD9831C1FD0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd452371-5c3d-3310-a6cf-f3aa51af378c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.193.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:05:d8:3c:06:dd:d9:83:1c:1f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=bea09379-4145-44f5-9a09-9199caa064cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:82:76:9e:ae:51:d9:35:d3:20:57:de:49:
54:f8:d4:7d:db:5f:c6:20:a1:62:5e:64:75:45:f0:
16:fb:c9:63:24:20:55:fc:40:62:88:78:b5:39:40:
4f:22:b5:43:b0:2e:f7:7d:f6:c4:90:46:ff:3e:49:
4a:8c:39:e8:76:79:df:3a:87:ee:94:a6:ee:36:3c:
ab:cc:00:aa:12:24:78:cc:d7:3d:2e:ac:4f:f3:c1:
8d:bb:1a:08:1e:01:2c:d0:24:52:72:a1:fd:52:b5:
bf:79:65:72:65:d9:29:4e:1c:5b:90:9f:13:b7:4f:
b3:d3:fa:7f:e8:99:58:a8:96:9c:97:16:4e:e9:71:
95:5a:a6:90:7a:f9:f2:11:7c:27:2b:19:f7:58:23:
14:5e:1e:28:30:b9:11:43:f3:53:6f:5d:da:a0:7b:
37:0c:6c:ea:b6:0d:5f:e4:1c:b1:7b:8f:a8:48:61:
33:4b:f1:eb:0f:63:e3:6a:76:f0:7e:99:62:36:25:
87:d1:b8:be:e1:7d:f7:1a:9a:51:28:29:ec:42:da:
e2:fd:ea:7a:90:e6:3f:cc:d8:63:dd:c5:ca:37:3c:
6a:b1:c1:32:23:80:ee:4f:ad:2c:79:29:0b:4e:63:
4c:5f:01:ac:06:f1:6b:d4:4e:90:77:0b:dd:52:39:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:58:CE:7D:DE:A6:8A:E5:73:48:AF:AE:B4:93:A3:64:FB:83:02:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd452371-5c3d-3310-a6cf-f3aa51af378c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.193.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:ab:b1:5d:a1:f7:fc:59:be:7e:26:aa:0c:35:3c:53:ed:60:
a4:a5:ba:ef:30:78:df:c4:cf:c4:43:f9:58:37:1c:e2:ff:39:
28:2a:ff:ed:34:55:ac:15:d4:87:cf:f3:f4:8c:3c:7d:35:e1:
67:e8:60:c0:b3:c4:f8:15:1d:6b:3c:50:cc:a5:e8:16:9b:8e:
bc:7a:55:0a:16:f5:1b:e6:69:84:df:16:74:26:c4:6c:62:3d:
75:e0:fb:eb:25:67:63:89:35:9b:49:ec:c2:3d:e9:1a:b1:d9:
b3:72:88:cc:14:33:e0:ec:74:55:f0:ca:f0:f9:62:27:c9:a3:
e1:8e:1a:53:01:d7:fa:f8:4d:7f:41:68:82:16:05:de:cc:fd:
a0:2e:98:e4:87:de:29:06:5b:1a:a4:11:fa:90:73:43:bf:63:
dc:eb:da:d7:d3:9e:2f:ec:20:7c:8c:1d:3e:36:bb:a5:e3:a7:
70:81:8f:f4:5b:a3:cf:07:3e:df:0d:12:21:4d:12:47:8c:2c:
d8:c8:45:1e:65:08:c0:7a:df:0f:71:80:86:2c:51:0a:a6:bf:
fb:07:6a:bc:2d:f7:11:a2:ed:6c:af:91:3e:43:98:9d:e7:43:
c4:43:a7:ef:c3:8e:e5:49:7a:0e:3a:06:54:4a:60:26:52:a0:
8a:40:80:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ9AXYPAbd2YMcH9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YmVhMDkzNzktNDE0NS00NGY1LTlhMDktOTE5OWNhYTA2NGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP6Cdp6uUdk10yBX3klU+NR921/GIKFiXmR1
RfAW+8ljJCBV/EBiiHi1OUBPIrVDsC73ffbEkEb/PklKjDnodnnfOofulKbuNjyr
zACqEiR4zNc9LqxP88GNuxoIHgEs0CRScqH9UrW/eWVyZdkpThxbkJ8Tt0+z0/p/
6JlYqJaclxZO6XGVWqaQevnyEXwnKxn3WCMUXh4oMLkRQ/NTb13aoHs3DGzqtg1f
5Byxe4+oSGEzS/HrD2PjanbwfpliNiWH0bi+4X33GppRKCnsQtri/ep6kOY/zNhj
3cXKNzxqscEyI4DuT60seSkLTmNMXwGsBvFr1E6QdwvdUjkV9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNYzn3eporlc0ivrrSTo2T7gwKeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQ0NTIzNzEtNWMzZC0z
MzEwLWE2Y2YtZjNhYTUxYWYzNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8FAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWrsV2h9/xZvn4mqgw1PFPtYKSluu8weN/Ez8RD+Vg3HOL/OSgq/+00
VawV1IfP8/SMPH014WfoYMCzxPgVHWs8UMyl6Babjrx6VQoW9RvmaYTfFnQmxGxi
PXXg++slZ2OJNZtJ7MI96Rqx2bNyiMwUM+DsdFXwyvD5YifJo+GOGlMB1/r4TX9B
aIIWBd7M/aAumOSH3ikGWxqkEfqQc0O/Y9zr2tfTni/sIHyMHT42u6Xjp3CBj/Rb
o88HPt8NEiFNEkeMLNjIRR5lCMB63w9xgIYsUQqmv/sHarwt9xGi7WyvkT5DmJ3n
Q8RDp+/DjuVJeg46BlRKYCZSoIpAgGI=
-----END CERTIFICATE-----
Generated at Sat May 10 15:00:44 2025 by rpki-client