Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e44a6a1-0442-3155-b35b-b99bf2b6f80f.roa
File: 0e44a6a1-0442-3155-b35b-b99bf2b6f80f.roa (raw, json)
Hash identifier: YIij+ShUkClQZXSOZ97+HGscEipU9ip80WRjySvgphw=
Subject key identifier: C1:EA:B3:AB:CB:D8:BD:84:70:D7:34:04:E1:AA:0D:EE:8C:14:50:F9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7A65777019CCA5A64AA4D40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e44a6a1-0442-3155-b35b-b99bf2b6f80f.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.203.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a6:57:77:01:9c:ca:5a:64:aa:4d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=bdeec926-4047-4f98-a145-a6b4ee6a6251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:e4:a6:7b:ed:ac:23:49:12:36:22:10:f2:
98:80:4b:26:66:61:52:04:d1:6c:25:fa:93:f3:e7:
ab:dc:2f:f3:1c:9e:8e:db:f9:ee:d7:cb:fc:ef:36:
c5:45:c9:5b:ab:d6:bd:df:b4:03:b5:98:18:28:16:
e6:a5:7e:c5:19:0d:27:20:57:32:fa:32:d8:3a:0a:
fb:b8:8d:f4:7d:dd:13:d6:0e:df:26:5b:18:0b:8f:
98:90:31:d1:a4:0d:0d:d4:5a:51:40:36:a5:36:97:
78:34:02:8f:23:f9:7b:b2:b3:3a:2a:95:c0:b9:2f:
7e:b1:46:63:b7:0a:39:c9:1c:81:96:47:a3:47:0d:
84:3a:a4:a7:fc:e8:61:9a:7d:25:0a:15:8f:a9:26:
0f:f1:a6:c9:44:9e:83:0e:c1:42:97:4a:af:8e:1d:
cc:70:62:91:8b:dc:3a:75:b3:33:5a:ca:5c:4d:b1:
d1:16:cb:21:98:ff:cd:9e:d4:6c:25:70:56:ad:d8:
9c:99:a6:17:80:88:ac:0e:ba:7a:da:c0:4d:b0:92:
25:d3:89:1c:ee:40:29:47:9e:48:70:47:e4:eb:43:
13:3a:77:7d:c7:ed:5a:1e:df:bd:f0:96:3e:ce:f0:
37:ec:df:6e:99:1c:2f:46:4e:fd:8e:80:82:5a:88:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EA:B3:AB:CB:D8:BD:84:70:D7:34:04:E1:AA:0D:EE:8C:14:50:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e44a6a1-0442-3155-b35b-b99bf2b6f80f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:4a:ef:8c:84:b9:08:98:33:f2:f0:3d:db:03:ae:fb:40:35:
92:63:e2:86:6c:e6:c6:e9:9a:e6:c2:26:b6:2c:ce:c1:47:70:
79:ab:6b:d5:f9:92:59:19:af:63:07:60:be:eb:dc:b9:89:d3:
93:d3:7e:48:e9:ee:23:c7:bb:b7:f3:2a:5c:bc:32:31:35:5e:
b9:76:b5:29:1a:05:db:96:14:b1:a6:c9:31:05:18:c3:dd:e7:
df:3b:b3:21:fd:c7:54:f8:42:5c:64:29:3c:92:59:e7:9c:d8:
92:a7:b9:bd:07:d5:84:b5:9c:9e:08:88:7e:fb:20:e5:78:48:
f2:62:66:b5:17:4d:02:0c:a0:b9:7c:22:3c:e8:60:22:13:0f:
80:36:f8:a2:9f:5a:6e:20:9d:b6:69:11:20:d5:a4:0b:e2:d5:
7f:68:0f:2d:60:be:9b:f6:e0:a4:7a:92:a8:c5:f1:db:49:ab:
f5:10:f8:df:15:23:f2:5d:c6:fc:29:16:24:79:08:c1:75:c6:
9a:0f:2e:b4:1d:3d:fd:95:b5:bf:28:16:b3:b5:e3:93:93:98:
b6:3c:6e:a4:03:2b:62:fe:ca:58:bf:0c:f8:75:01:f0:0b:99:
00:0c:34:54:e1:17:39:72:7a:48:4d:df:6c:dc:4c:02:fe:be:
19:f9:44:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnpld3AZzKWmSqTUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YmRlZWM5MjYtNDA0Ny00Zjk4LWExNDUtYTZiNGVlNmE2MjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1/kpnvtrCNJEjYiEPKYgEsmZmFSBNFsJfqT
8+er3C/zHJ6O2/nu18v87zbFRclbq9a937QDtZgYKBbmpX7FGQ0nIFcy+jLYOgr7
uI30fd0T1g7fJlsYC4+YkDHRpA0N1FpRQDalNpd4NAKPI/l7srM6KpXAuS9+sUZj
two5yRyBlkejRw2EOqSn/Ohhmn0lChWPqSYP8abJRJ6DDsFCl0qvjh3McGKRi9w6
dbMzWspcTbHRFsshmP/NntRsJXBWrdicmaYXgIisDrp62sBNsJIl04kc7kApR55I
cEfk60MTOnd9x+1aHt+98JY+zvA37N9umRwvRk79joCCWohcgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHqs6vL2L2EcNc0BOGqDe6MFFD5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGU0NGE2YTEtMDQ0Mi0z
MTU1LWIzNWItYjk5YmYyYjZmODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKdK74yEuQiYM/LwPdsDrvtANZJj4oZs5sbpmubCJrYszsFHcHmra9X5
klkZr2MHYL7r3LmJ05PTfkjp7iPHu7fzKly8MjE1Xrl2tSkaBduWFLGmyTEFGMPd
5987syH9x1T4QlxkKTySWeec2JKnub0H1YS1nJ4IiH77IOV4SPJiZrUXTQIMoLl8
IjzoYCITD4A2+KKfWm4gnbZpESDVpAvi1X9oDy1gvpv24KR6kqjF8dtJq/UQ+N8V
I/JdxvwpFiR5CMF1xpoPLrQdPf2Vtb8oFrO145OTmLY8bqQDK2L+yli/DPh1AfAL
mQAMNFThFzlyekhN32zcTAL+vhn5RBE=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:40 2023 by rpki-client on console-fra.rpki-client.org