Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef94acfd-cbe0-3322-986d-061b7fb9b5fd.roa
File: ef94acfd-cbe0-3322-986d-061b7fb9b5fd.roa (raw, json)
Hash identifier: EIk6Y1KYLfwX3eFqjOJH6mASQl0MXdD7cZn9UxglDPU=
Subject key identifier: 2A:8F:4D:45:DD:E8:59:2B:34:70:95:7F:23:17:F8:04:BA:9F:7F:CC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7BD1632B2A441D644F20CE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef94acfd-cbe0-3322-986d-061b7fb9b5fd.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.222.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bd:16:32:b2:a4:41:d6:44:f2:0c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=3749fc93-5550-469d-bbf3-c4ca5416c34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:77:57:d5:ef:98:83:c1:55:81:a6:f4:7e:
e2:a9:e7:4c:6c:30:7c:33:f9:be:af:2c:d1:d1:e8:
84:0d:bc:d7:b2:43:5c:20:9d:b7:6d:a2:a3:81:e1:
d3:3f:e4:d8:af:c5:7b:c1:9f:e8:81:19:c1:62:37:
14:f9:36:7b:ba:1b:18:64:45:43:55:f2:b5:c2:bf:
92:2b:0d:22:3a:bb:18:2b:12:bc:e1:d3:03:e9:ab:
2d:c3:75:3a:40:0c:1f:44:21:87:62:a6:69:ca:d0:
5b:2e:ff:3a:0e:d9:f2:4d:cf:21:f4:9b:c6:27:05:
9b:33:4b:0b:68:d0:cc:49:c2:a1:61:3c:7f:fe:9d:
88:9d:98:ec:3b:a7:1f:5f:cb:f2:ba:a8:29:39:ab:
be:87:d2:90:0d:4e:1f:26:a5:08:f3:80:9b:52:ab:
6e:85:ef:f3:57:01:21:8f:c7:e4:8a:c1:b9:90:20:
43:eb:b8:bf:5a:41:eb:9c:e0:a6:5b:b2:c0:98:27:
23:8c:a8:1f:c5:49:90:38:b7:8f:30:9e:ae:00:18:
80:cf:b2:ce:63:39:8d:ea:b3:eb:44:e3:37:27:7e:
c9:44:b2:60:64:10:bf:1a:48:a7:d9:11:f5:ad:1b:
de:9b:7c:5d:ef:23:22:6d:dd:ba:3a:21:f9:80:f3:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8F:4D:45:DD:E8:59:2B:34:70:95:7F:23:17:F8:04:BA:9F:7F:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef94acfd-cbe0-3322-986d-061b7fb9b5fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:88:76:8e:93:26:94:95:ab:2f:ef:73:4a:92:f5:d6:38:16:
7c:90:1f:96:73:6c:58:b5:d9:b9:9b:11:7e:43:76:7a:69:63:
7b:7e:b2:24:6c:ca:13:6f:1f:17:17:7a:2c:75:b5:a2:28:66:
f6:92:35:28:3b:be:92:25:3a:37:d8:e3:29:6a:58:e1:db:3d:
21:eb:61:21:34:8f:a6:70:f2:70:f2:3a:0e:7b:5a:fc:7d:b2:
d8:c4:ff:fe:b4:02:93:dc:e4:6d:9e:73:f4:c2:ae:89:09:e9:
1d:2e:8b:ee:6e:59:00:72:a8:39:51:c3:cc:5e:b9:7d:39:74:
1e:65:73:3c:d4:b7:11:6f:2e:e8:84:98:78:ee:97:e7:c5:b8:
b5:9d:36:62:d4:cf:83:48:ad:ff:bf:c2:37:fa:b2:44:74:6b:
da:c5:ac:09:d5:76:5b:87:f5:1e:70:6b:71:84:0d:bf:cc:9a:
d8:03:7f:7b:60:14:cd:f8:ba:2b:04:8b:6a:57:bb:ad:c2:4e:
34:60:60:cd:b5:e3:1e:09:d8:96:b8:a0:8a:d6:3d:3a:32:f2:
e7:72:a5:73:6c:d0:ab:ea:8e:22:ee:e4:21:85:37:f1:13:0d:
3a:2c:e3:a8:32:63:d3:90:6b:7b:ab:98:78:41:65:e8:4f:12:
d3:51:82:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnvRYysqRB1kTyDOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
Mzc0OWZjOTMtNTU1MC00NjlkLWJiZjMtYzRjYTU0MTZjMzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy93V9XvmIPBVYGm9H7iqedMbDB8M/m+ryzR
0eiEDbzXskNcIJ23baKjgeHTP+TYr8V7wZ/ogRnBYjcU+TZ7uhsYZEVDVfK1wr+S
Kw0iOrsYKxK84dMD6astw3U6QAwfRCGHYqZpytBbLv86DtnyTc8h9JvGJwWbM0sL
aNDMScKhYTx//p2InZjsO6cfX8vyuqgpOau+h9KQDU4fJqUI84CbUqtuhe/zVwEh
j8fkisG5kCBD67i/WkHrnOCmW7LAmCcjjKgfxUmQOLePMJ6uABiAz7LOYzmN6rPr
ROM3J37JRLJgZBC/Gkin2RH1rRvem3xd7yMibd26OiH5gPP4KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCqPTUXd6FkrNHCVfyMX+AS6n3/MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWY5NGFjZmQtY2JlMC0z
MzIyLTk4NmQtMDYxYjdmYjliNWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI95oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKIdo6TJpSVqy/vc0qS9dY4FnyQH5ZzbFi12bmbEX5DdnppY3t+siRs
yhNvHxcXeix1taIoZvaSNSg7vpIlOjfY4ylqWOHbPSHrYSE0j6Zw8nDyOg57Wvx9
stjE//60ApPc5G2ec/TCrokJ6R0ui+5uWQByqDlRw8xeuX05dB5lczzUtxFvLuiE
mHjul+fFuLWdNmLUz4NIrf+/wjf6skR0a9rFrAnVdluH9R5wa3GEDb/MmtgDf3tg
FM34uisEi2pXu63CTjRgYM214x4J2Ja4oIrWPToy8udypXNs0KvqjiLu5CGFN/ET
DTos46gyY9OQa3urmHhBZehPEtNRgjs=
-----END CERTIFICATE-----
Generated at Sat May 10 13:11:56 2025 by rpki-client