Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df9e5deb-dd03-3f4f-a1e5-fecf6662da70.roa
File: df9e5deb-dd03-3f4f-a1e5-fecf6662da70.roa (raw, json)
Hash identifier: aWHeBKiTnHt53UGzKDu+/WB7WVXiqs8nKrFzvbTW96k=
Subject key identifier: 4A:62:FF:E0:15:60:65:98:D0:70:4B:23:71:F3:69:EA:0A:6D:7D:14
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7C41AD43FD832AA3F00BAC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df9e5deb-dd03-3f4f-a1e5-fecf6662da70.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.226.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c4:1a:d4:3f:d8:32:aa:3f:00:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=58e7af8a-fa5c-436e-9236-e00c35d1f7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:7c:0c:af:ea:2e:f2:01:df:7a:36:a8:85:
7c:a4:ee:8a:3e:9e:c4:1b:e5:32:d7:59:6d:a6:bc:
6e:84:be:f8:d4:51:2a:2b:5d:6f:ee:3a:07:84:47:
22:72:14:a0:b5:1b:16:22:13:fc:ed:d6:b0:f3:e5:
96:84:e7:cb:e1:4b:d0:d7:07:f1:c0:ed:9a:2e:74:
34:b6:8a:29:38:c4:69:14:0d:e2:b9:54:51:32:6d:
32:78:44:70:40:22:09:df:fd:40:c1:50:aa:96:eb:
02:4e:a5:e1:32:43:03:de:6d:cb:2e:11:f1:30:b2:
fc:e2:a5:c0:3f:6e:47:f5:74:73:4b:36:4a:eb:07:
12:f6:4e:83:7b:f4:9e:6c:b7:4f:4b:a2:62:6f:77:
59:40:25:43:67:cb:a0:53:87:63:73:71:41:b0:ac:
52:ea:82:f6:91:a1:4c:6f:b0:b8:d2:04:f5:88:49:
39:f5:42:65:76:96:06:b5:1c:ca:d9:ab:09:5e:3a:
9a:c2:7c:19:f1:24:10:26:90:aa:8c:7e:df:f4:bb:
17:fb:5b:2b:63:2b:6b:c4:9f:c6:65:22:fc:25:4a:
10:c1:6a:f1:01:34:d1:6f:81:5d:25:c8:0a:ab:7c:
f7:aa:4c:4d:00:5a:ab:dc:67:72:3a:38:ad:7b:4a:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:62:FF:E0:15:60:65:98:D0:70:4B:23:71:F3:69:EA:0A:6D:7D:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df9e5deb-dd03-3f4f-a1e5-fecf6662da70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.226.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:51:3c:3a:33:f2:d3:39:e8:6f:d2:42:32:5a:1b:b4:e0:c9:
8e:56:64:8b:2b:37:a3:a4:d4:6b:1d:0c:71:5d:a2:77:80:46:
e5:71:f1:2b:5d:5c:04:3d:3c:3e:7b:81:d0:54:b0:7b:14:b2:
94:e0:16:1a:dc:a8:c6:c3:95:95:d3:c1:1d:86:81:26:ac:4b:
34:50:28:51:08:17:e8:61:63:37:fe:87:76:47:7a:ee:87:7e:
41:25:e9:84:7f:d2:4a:e4:80:64:39:2e:9e:62:99:48:bd:1e:
14:5b:5f:bb:4c:3b:a2:1c:97:e0:05:dd:57:19:38:37:94:dd:
a8:64:e0:40:73:28:89:6b:69:9d:21:0e:f4:cc:11:27:01:f2:
e9:f5:e8:e7:ab:fa:5e:3f:e5:ef:d2:a9:23:91:ec:1a:c4:24:
b7:27:cb:da:7e:66:b1:bd:a7:39:15:7f:17:45:af:79:ed:df:
a8:7b:8a:ff:d4:36:c7:56:c9:e4:76:1c:4a:fe:65:8a:ab:f3:
db:2d:16:b7:31:a1:16:88:94:04:4f:68:92:0c:da:95:da:df:
8c:56:60:cc:01:d9:7d:74:ef:7f:4d:0e:22:7f:34:93:e1:c9:
13:2c:19:bb:d8:62:7a:a5:df:97:15:32:bf:91:06:4d:9c:66:
6e:5c:b0:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnxBrUP9gyqj8AusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NThlN2FmOGEtZmE1Yy00MzZlLTkyMzYtZTAwYzM1ZDFmN2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh18DK/qLvIB33o2qIV8pO6KPp7EG+Uy11lt
prxuhL741FEqK11v7joHhEcichSgtRsWIhP87daw8+WWhOfL4UvQ1wfxwO2aLnQ0
toopOMRpFA3iuVRRMm0yeERwQCIJ3/1AwVCqlusCTqXhMkMD3m3LLhHxMLL84qXA
P25H9XRzSzZK6wcS9k6De/SebLdPS6Jib3dZQCVDZ8ugU4djc3FBsKxS6oL2kaFM
b7C40gT1iEk59UJldpYGtRzK2asJXjqawnwZ8SQQJpCqjH7f9LsX+1srYytrxJ/G
ZSL8JUoQwWrxATTRb4FdJcgKq3z3qkxNAFqr3GdyOjite0oCIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEpi/+AVYGWY0HBLI3HzaeoKbX0UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGY5ZTVkZWItZGQwMy0z
ZjRmLWExZTUtZmVjZjY2NjJkYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+IQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJRPDoz8tM56G/SQjJaG7TgyY5WZIsrN6Ok1GsdDHFdoneARuVx8Std
XAQ9PD57gdBUsHsUspTgFhrcqMbDlZXTwR2GgSasSzRQKFEIF+hhYzf+h3ZHeu6H
fkEl6YR/0krkgGQ5Lp5imUi9HhRbX7tMO6Icl+AF3VcZODeU3ahk4EBzKIlraZ0h
DvTMEScB8un16Oer+l4/5e/SqSOR7BrEJLcny9p+ZrG9pzkVfxdFr3nt36h7iv/U
NsdWyeR2HEr+ZYqr89stFrcxoRaIlARPaJIM2pXa34xWYMwB2X10739NDiJ/NJPh
yRMsGbvYYnql35cVMr+RBk2cZm5csKc=
-----END CERTIFICATE-----
Generated at Sat May 10 11:39:52 2025 by rpki-client