Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7839989-4d9b-32f0-ba54-10b378bc640f.roa
File: f7839989-4d9b-32f0-ba54-10b378bc640f.roa (raw, json)
Hash identifier: nP3ovxdihEs6q1mKnGSXcRvP2KNrYbLtdA+IvxDXe+c=
Subject key identifier: D5:72:1A:FE:1E:E7:C3:99:FE:AC:5C:38:53:56:88:4A:1E:BD:08:D7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A18B92485D05F7FC4B59B40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7839989-4d9b-32f0-ba54-10b378bc640f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.202.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:b9:24:85:d0:5f:7f:c4:b5:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e7d23c7d-e306-4f61-9958-6576580a1dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:6e:44:b1:18:48:b0:15:3f:b7:5b:1e:f2:
09:1c:49:53:da:e6:55:e3:97:86:bf:60:be:65:d1:
cb:58:c7:aa:92:65:81:24:20:f9:2d:84:aa:2a:2f:
93:64:d9:0e:7f:66:22:89:89:67:d7:1a:2c:03:ce:
bc:fe:55:a4:fc:2e:84:2b:3b:03:c2:d4:61:bd:13:
7e:39:95:12:c1:19:00:45:d1:13:57:1e:62:94:b6:
de:14:12:18:29:86:5f:02:45:38:a5:16:f7:49:a7:
5c:de:00:46:1a:c7:fc:3f:bc:b4:7a:08:b9:49:75:
07:67:17:98:c1:06:e5:33:3d:9e:be:d4:2b:fe:a1:
4b:e4:fd:7f:3e:fa:77:65:04:9e:88:cd:df:9d:ab:
6f:f6:a4:b0:97:27:80:06:26:0a:64:00:28:ba:1f:
b6:92:fd:28:06:53:88:44:1d:a0:39:b8:8b:d7:00:
33:d1:10:f0:6e:f5:1f:cb:4f:f9:aa:b8:29:cc:b4:
ee:91:c4:56:e2:df:7a:be:5a:ec:22:01:42:e6:fd:
fc:3c:dd:08:6e:4c:2f:e1:ee:ff:53:a5:ab:cb:1b:
b9:b2:a8:ca:e1:37:8c:68:aa:32:9a:32:58:25:39:
f0:77:eb:0e:7e:45:28:03:1e:fc:9f:1c:db:8e:b7:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:72:1A:FE:1E:E7:C3:99:FE:AC:5C:38:53:56:88:4A:1E:BD:08:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7839989-4d9b-32f0-ba54-10b378bc640f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.202.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:6a:7b:3e:38:8f:89:32:3a:e0:4e:97:49:8a:24:bd:43:1f:
16:66:da:aa:a8:9c:5a:1b:c8:8f:5a:0a:4b:22:3d:9f:52:b4:
6d:1f:2f:53:3e:68:a1:25:c3:f5:9a:3a:b3:12:89:36:f3:e6:
4c:d0:9c:e9:a3:61:3d:72:f1:fc:e5:5c:66:23:57:e5:58:62:
9e:d9:ad:c9:68:bb:a2:88:80:c4:3c:43:36:fa:af:24:7d:11:
15:77:d6:e2:b1:56:72:55:4c:0e:8e:8a:79:06:95:44:91:f3:
64:95:9d:7e:4e:e6:3f:f9:3f:fb:67:08:b5:57:27:87:b2:89:
6d:8c:e1:36:4d:11:23:ac:1e:79:49:06:8e:9a:54:58:17:3e:
52:02:d5:1b:27:20:14:6f:62:da:d8:5a:67:35:7a:e7:98:ca:
b0:d3:c0:64:2c:94:94:7b:ab:55:41:91:79:3b:31:02:d7:18:
ff:94:59:a1:dd:aa:fa:57:60:a8:37:bb:1b:f9:77:13:44:2c:
68:b0:df:76:1a:6b:82:04:37:af:0e:ae:41:d2:a5:59:ee:ac:
5c:dd:f4:1d:bf:af:9a:76:cd:50:e6:84:9e:02:29:7a:3e:99:
af:ac:33:0b:bf:59:43:4f:1d:c6:40:95:1e:29:f3:68:6d:d8:
ab:d5:e8:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGLkkhdBff8S1m0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTdkMjNjN2QtZTMwNi00ZjYxLTk5NTgtNjU3NjU4MGExZGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUJuRLEYSLAVP7dbHvIJHElT2uZV45eGv2C+
ZdHLWMeqkmWBJCD5LYSqKi+TZNkOf2YiiYln1xosA868/lWk/C6EKzsDwtRhvRN+
OZUSwRkARdETVx5ilLbeFBIYKYZfAkU4pRb3Sadc3gBGGsf8P7y0egi5SXUHZxeY
wQblMz2evtQr/qFL5P1/Pvp3ZQSeiM3fnatv9qSwlyeABiYKZAAouh+2kv0oBlOI
RB2gObiL1wAz0RDwbvUfy0/5qrgpzLTukcRW4t96vlrsIgFC5v38PN0Ibkwv4e7/
U6Wryxu5sqjK4TeMaKoymjJYJTnwd+sOfkUoAx78nxzbjrdRmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVyGv4e58OZ/qxcOFNWiEoevQjXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjc4Mzk5ODktNGQ5Yi0z
MmYwLWJhNTQtMTBiMzc4YmM2NDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8rgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtqez44j4kyOuBOl0mKJL1DHxZm2qqonFobyI9aCksiPZ9StG0fL1M+
aKElw/WaOrMSiTbz5kzQnOmjYT1y8fzlXGYjV+VYYp7Zrclou6KIgMQ8Qzb6ryR9
ERV31uKxVnJVTA6OinkGlUSR82SVnX5O5j/5P/tnCLVXJ4eyiW2M4TZNESOsHnlJ
Bo6aVFgXPlIC1RsnIBRvYtrYWmc1eueYyrDTwGQslJR7q1VBkXk7MQLXGP+UWaHd
qvpXYKg3uxv5dxNELGiw33Yaa4IEN68OrkHSpVnurFzd9B2/r5p2zVDmhJ4CKXo+
ma+sMwu/WUNPHcZAlR4p82ht2KvV6Aw=
-----END CERTIFICATE-----
Generated at Sun May 11 15:34:45 2025 by rpki-client