Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3fb4699-e573-30e8-a545-206549b0c25a.roa
File: e3fb4699-e573-30e8-a545-206549b0c25a.roa (raw, json)
Hash identifier: WUJmMOhfKoBg5QiWIZI6uUijEsd6tnqjpCTddK9KIK4=
Subject key identifier: 92:18:F7:9C:D8:BA:93:9F:EC:BA:B3:B9:D8:59:E0:8B:17:33:F6:C4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A1A157F6A89C504E57CB280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3fb4699-e573-30e8-a545-206549b0c25a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.188.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1a:15:7f:6a:89:c5:04:e5:7c:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8ef1a935-95f5-4f38-8303-e940d109d784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:2f:f4:a1:ca:14:32:b3:43:da:96:9e:e9:
64:5c:5b:4b:61:a2:27:dc:7e:7d:71:cf:ba:57:ea:
5e:53:4b:fe:99:d0:71:a0:74:80:07:51:37:aa:d8:
89:39:30:09:19:4d:5d:2d:8a:ad:a4:ac:7c:10:25:
97:ea:10:4f:88:1b:ea:fb:a3:da:73:d1:01:99:b4:
73:3d:19:ea:61:9c:4e:76:67:25:5e:95:1a:42:e6:
15:63:53:6e:5b:34:5d:ea:5f:12:5c:bb:bf:80:4e:
09:de:d1:45:bf:50:aa:c5:f8:ef:47:af:01:04:f0:
0b:f0:f5:24:d7:b0:06:38:ff:94:87:f1:ff:c6:05:
a6:c3:c2:c1:b3:bf:c8:fc:83:72:ef:b6:c1:34:b5:
34:af:e4:7f:8e:59:d5:6e:f3:f2:0a:22:67:6f:d0:
f7:3b:40:aa:6b:4d:9d:da:e1:ab:5f:95:4c:ce:a7:
c8:b6:0e:74:06:78:11:a1:bc:8c:0b:13:76:7a:38:
c6:36:c1:d2:20:2a:4f:93:05:6c:e5:b5:37:f1:e0:
e7:f4:03:a0:6d:22:4e:0f:5c:31:6c:36:2c:59:d5:
a0:c0:b5:28:2e:b8:70:9c:4d:be:34:e8:f4:8b:7b:
74:5f:11:15:51:09:14:81:af:c2:01:00:8c:a3:82:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:18:F7:9C:D8:BA:93:9F:EC:BA:B3:B9:D8:59:E0:8B:17:33:F6:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3fb4699-e573-30e8-a545-206549b0c25a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:00:46:e5:63:d7:e7:70:b1:9e:45:6d:57:b9:57:12:0d:22:
4e:e2:8e:ca:df:b2:2e:c1:6d:87:97:8c:2d:2b:b4:6a:3e:b1:
a6:d4:6b:a8:9d:1b:b5:88:25:ce:36:4d:af:68:9b:02:fc:0c:
39:27:54:a2:87:17:5f:47:9e:f4:f0:ac:96:f2:04:01:ee:b8:
b5:18:69:ff:1e:b5:5f:f7:84:cd:df:fd:9a:ec:c9:3b:b5:46:
27:70:fc:d3:f1:df:91:38:62:cb:5a:a1:a0:bd:b0:9e:70:c6:
52:34:86:ff:c3:e2:db:58:52:38:27:d9:74:f8:60:ce:18:3c:
9b:ef:d1:ca:18:5c:08:ef:58:c7:35:a8:c8:a3:08:de:78:2d:
ee:74:a7:2c:1b:80:f1:dc:a0:3d:89:35:ab:25:d0:77:e6:7b:
e8:62:e4:79:e8:f9:e6:f2:ff:a0:cf:c8:9a:fd:88:8b:2a:cf:
63:20:26:4f:a2:c1:3b:99:ea:1c:56:b9:df:ce:d1:69:4e:d3:
ff:39:5b:24:81:79:2e:2c:fd:af:5b:f2:9d:d3:6a:90:51:24:
f9:e1:72:84:4f:73:6e:8a:51:03:b8:74:d4:10:4a:c5:6a:b6:
8e:b4:3a:c9:26:0b:e3:29:6d:cd:9f:fa:78:74:68:e4:d9:64:
e3:1c:79:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGhV/aonFBOV8soAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OGVmMWE5MzUtOTVmNS00ZjM4LTgzMDMtZTk0MGQxMDlkNzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwIv9KHKFDKzQ9qWnulkXFtLYaIn3H59cc+6
V+peU0v+mdBxoHSAB1E3qtiJOTAJGU1dLYqtpKx8ECWX6hBPiBvq+6Pac9EBmbRz
PRnqYZxOdmclXpUaQuYVY1NuWzRd6l8SXLu/gE4J3tFFv1CqxfjvR68BBPAL8PUk
17AGOP+Uh/H/xgWmw8LBs7/I/INy77bBNLU0r+R/jlnVbvPyCiJnb9D3O0Cqa02d
2uGrX5VMzqfItg50BngRobyMCxN2ejjGNsHSICpPkwVs5bU38eDn9AOgbSJOD1wx
bDYsWdWgwLUoLrhwnE2+NOj0i3t0XxEVUQkUga/CAQCMo4KwAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIY95zYupOf7LqzudhZ4IsXM/bEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTNmYjQ2OTktZTU3My0z
MGU4LWE1NDUtMjA2NTQ5YjBjMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7zAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKEARuVj1+dwsZ5FbVe5VxINIk7ijsrfsi7BbYeXjC0rtGo+sabUa6id
G7WIJc42Ta9omwL8DDknVKKHF19HnvTwrJbyBAHuuLUYaf8etV/3hM3f/ZrsyTu1
Ridw/NPx35E4YstaoaC9sJ5wxlI0hv/D4ttYUjgn2XT4YM4YPJvv0coYXAjvWMc1
qMijCN54Le50pywbgPHcoD2JNasl0Hfme+hi5Hno+eby/6DPyJr9iIsqz2MgJk+i
wTuZ6hxWud/O0WlO0/85WySBeS4s/a9b8p3TapBRJPnhcoRPc26KUQO4dNQQSsVq
to60OskmC+Mpbc2f+nh0aOTZZOMcecA=
-----END CERTIFICATE-----
Generated at Sat May 10 14:47:44 2025 by rpki-client