Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ecd14384-a1c2-3f91-9a1e-31b4d337f1ae.roa
File: ecd14384-a1c2-3f91-9a1e-31b4d337f1ae.roa (raw, json)
Hash identifier: uX0+DUEkvAon2DDMnoUudqczKghOlk1OQvXmPLbmZVE=
Subject key identifier: 0D:8B:40:DC:0C:CD:6F:04:20:A4:99:42:16:8E:64:B2:31:78:79:D7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0A0A6922BFAC53636A7D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ecd14384-a1c2-3f91-9a1e-31b4d337f1ae.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.241.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0a:0a:69:22:bf:ac:53:63:6a:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=93fc5b87-3c87-4741-9305-b45d81d0a475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:fe:c0:0c:3f:b9:ea:76:02:eb:fe:63:df:
89:73:05:b7:4f:6c:2e:65:97:43:82:fa:4f:55:e5:
09:4e:ec:53:1e:e7:5e:f4:32:ae:7b:4d:fa:65:47:
a5:ed:63:32:8c:4e:70:22:75:e4:43:94:27:9f:8a:
28:1d:7c:3b:dd:d0:d5:64:28:65:da:f0:08:c0:79:
73:32:02:d9:95:70:27:4d:82:fb:40:fc:98:11:0a:
88:1c:42:47:9b:57:9b:97:48:68:57:b7:4f:fb:d3:
1d:8c:f4:44:ed:a6:e3:80:3d:66:86:b0:79:80:45:
59:d0:63:67:79:3e:b5:7e:00:42:8d:62:c4:25:13:
c7:b8:2d:93:dd:e3:5d:f9:31:90:4e:f7:a6:57:8b:
9f:57:91:3b:b3:62:f4:d0:d8:ce:11:59:e1:aa:24:
0a:1d:54:ef:0c:f1:77:11:37:e9:58:4b:6b:78:7b:
86:34:91:5c:77:47:06:e3:eb:49:10:3b:9a:05:55:
0d:ff:1d:8b:b3:90:a4:bb:25:1e:c5:bb:c9:c8:1e:
7f:d1:65:df:20:c0:89:59:74:f0:67:1b:63:78:45:
0f:47:08:8d:ef:9d:4f:88:81:4f:ab:40:ac:23:97:
32:a8:38:6a:32:f2:8b:8e:2e:00:92:76:08:f4:ca:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8B:40:DC:0C:CD:6F:04:20:A4:99:42:16:8E:64:B2:31:78:79:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ecd14384-a1c2-3f91-9a1e-31b4d337f1ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.241.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:17:a2:64:94:dc:e0:37:ab:13:8b:89:b6:2e:65:2b:9d:2a:
60:77:8a:55:5e:38:f6:c8:e4:2a:e0:08:2e:19:e5:fc:4c:05:
d6:15:18:56:60:b0:a7:10:95:93:6b:b9:e4:b8:e2:59:67:59:
7f:d7:64:cc:20:19:32:6c:e8:c2:e7:e6:40:18:cb:be:d3:96:
b8:24:2f:18:f0:25:c9:97:35:50:c5:a8:98:d4:77:ee:66:8e:
0b:ec:dc:c6:c5:25:f4:4a:bd:95:d7:11:21:c0:e5:78:aa:74:
5c:64:f6:69:07:a3:7b:06:b4:98:71:58:70:f8:5e:b1:92:be:
60:46:07:dd:4d:02:0b:77:4c:69:78:07:a1:88:6c:31:c4:ce:
31:8e:00:cb:08:81:89:14:d9:74:d2:eb:8a:ef:e5:0e:ac:4f:
0d:a7:5f:22:3e:b0:bb:dc:08:0f:5d:9f:d5:f1:3f:77:04:3c:
71:b6:07:da:23:92:f4:8e:bf:44:06:f5:19:5e:6f:b8:69:da:
7b:ce:43:66:9a:02:57:c8:d0:79:55:b6:f7:16:8e:19:5a:dd:
9f:09:9b:a8:bd:94:34:31:d8:ca:85:de:a8:a5:9d:2d:89:76:
d6:5e:55:f9:c4:89:93:37:b5:fc:63:e2:d0:4e:6c:a0:af:e2:
d3:cd:c2:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKCgppIr+sU2NqfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OTNmYzViODctM2M4Ny00NzQxLTkzMDUtYjQ1ZDgxZDBhNDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuD+wAw/uep2Auv+Y9+JcwW3T2wuZZdDgvpP
VeUJTuxTHude9DKue036ZUel7WMyjE5wInXkQ5Qnn4ooHXw73dDVZChl2vAIwHlz
MgLZlXAnTYL7QPyYEQqIHEJHm1ebl0hoV7dP+9MdjPRE7abjgD1mhrB5gEVZ0GNn
eT61fgBCjWLEJRPHuC2T3eNd+TGQTvemV4ufV5E7s2L00NjOEVnhqiQKHVTvDPF3
ETfpWEtreHuGNJFcd0cG4+tJEDuaBVUN/x2Ls5CkuyUexbvJyB5/0WXfIMCJWXTw
ZxtjeEUPRwiN751PiIFPq0CsI5cyqDhqMvKLji4AknYI9MoIBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2LQNwMzW8EIKSZQhaOZLIxeHnXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWNkMTQzODQtYTFjMi0z
ZjkxLTlhMWUtMzFiNGQzMzdmMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/GgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4XomSU3OA3qxOLibYuZSudKmB3ilVeOPbI5CrgCC4Z5fxMBdYVGFZg
sKcQlZNrueS44llnWX/XZMwgGTJs6MLn5kAYy77TlrgkLxjwJcmXNVDFqJjUd+5m
jgvs3MbFJfRKvZXXESHA5XiqdFxk9mkHo3sGtJhxWHD4XrGSvmBGB91NAgt3TGl4
B6GIbDHEzjGOAMsIgYkU2XTS64rv5Q6sTw2nXyI+sLvcCA9dn9XxP3cEPHG2B9oj
kvSOv0QG9Rleb7hp2nvOQ2aaAlfI0HlVtvcWjhla3Z8Jm6i9lDQx2MqF3qilnS2J
dtZeVfnEiZM3tfxj4tBObKCv4tPNwu4=
-----END CERTIFICATE-----
Generated at Sat May 10 12:50:06 2025 by rpki-client