Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dffd4cc-1964-3df3-ba5c-beead84ab914.roa
File: 3dffd4cc-1964-3df3-ba5c-beead84ab914.roa (raw, json)
Hash identifier: NMSLidwJUFthj4jz/ecjuSXiH4Hytp+KDxFRt4Z2ZCI=
Subject key identifier: 88:30:FA:B5:E3:51:76:79:75:26:9D:D1:5B:41:7F:BC:16:D4:EC:0A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583AA7B65243784632849E5EC600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dffd4cc-1964-3df3-ba5c-beead84ab914.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 35.221.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b6:52:43:78:46:32:84:9e:5e:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=8cc98180-c428-4e52-91ab-a7e97e0e03a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:13:05:5d:59:d9:4b:12:76:57:e3:d6:85:
29:0e:91:3d:bf:20:31:c8:84:58:7e:0d:e4:20:2c:
c9:14:82:85:af:24:08:61:18:24:31:e3:a6:de:3a:
b2:f7:78:01:2d:98:df:44:ff:1b:7d:e8:e7:f1:d3:
b7:0b:fd:a5:b3:95:a0:ce:0b:76:4d:08:e6:ba:78:
59:0c:8f:31:63:28:08:23:5d:32:d5:00:ed:cd:4d:
50:17:c9:20:94:9b:2b:b1:ba:24:47:9f:53:f0:93:
55:c8:a4:3f:35:cd:b8:89:c0:d7:ac:70:90:0b:e3:
79:16:1b:66:0b:4b:b7:16:11:6d:1a:7c:42:53:de:
c6:44:b5:b3:77:90:3a:52:d7:ea:fe:d9:29:8f:e3:
f6:94:e2:eb:c1:56:5d:bc:7f:ac:b8:a6:5e:af:fe:
26:c6:7f:d3:34:6e:9d:e3:33:fc:4c:e1:79:4a:8f:
f8:fb:0d:06:b5:a5:d1:ca:81:c1:c1:96:90:22:65:
ba:cf:01:02:49:10:a4:f8:6b:5b:9d:86:4e:7e:7f:
fa:a3:60:cf:2c:74:38:2b:c5:17:17:e2:a6:1b:05:
ac:83:9b:da:9a:0f:56:74:47:88:d9:7d:80:99:13:
57:26:00:93:2d:48:e2:9b:97:c9:6f:95:6b:7e:01:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:30:FA:B5:E3:51:76:79:75:26:9D:D1:5B:41:7F:BC:16:D4:EC:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dffd4cc-1964-3df3-ba5c-beead84ab914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.221.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:e6:88:d0:c6:43:fe:d7:a1:38:07:8f:7e:3c:f2:bb:41:9f:
88:54:fe:d9:df:14:ea:c4:5c:ea:b6:9e:9d:a6:de:1c:39:3b:
0b:a8:28:1c:02:4c:fb:82:04:95:33:0f:c3:9a:6b:9a:ee:b2:
06:85:29:82:28:16:ab:17:f3:6c:7e:98:30:c1:f1:32:09:16:
cd:88:6e:ca:33:36:ab:f3:5d:e6:28:d5:1b:ab:8a:4c:29:7d:
ee:20:18:99:bb:76:09:c6:87:64:05:cc:9c:3b:f9:c8:5b:8d:
b0:cc:05:93:dd:05:25:fc:e2:87:5c:15:1e:53:63:26:1b:1b:
da:ca:96:45:3f:5d:20:33:03:bb:6a:fe:50:19:7f:8e:7b:05:
ad:a6:4e:09:18:7d:9b:ff:00:45:4a:45:98:31:7b:a5:c8:68:
b7:1b:b8:eb:61:23:36:1c:df:64:d2:72:fd:66:e9:e1:f4:37:
c5:2d:de:20:1f:1f:c0:70:04:e8:0c:ec:3d:77:83:82:9a:85:
57:ab:98:f0:b9:79:fb:95:d0:19:0e:4f:f0:9e:86:72:75:e3:
14:93:32:1d:80:a9:ac:77:3f:1a:49:ed:ac:44:da:0b:f3:a3:
4a:b5:9a:34:26:3b:a2:db:a8:25:25:77:87:e3:15:7d:a9:40:
54:85:48:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqntlJDeEYyhJ5exgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
OGNjOTgxODAtYzQyOC00ZTUyLTkxYWItYTdlOTdlMGUwM2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9kTBV1Z2UsSdlfj1oUpDpE9vyAxyIRYfg3k
ICzJFIKFryQIYRgkMeOm3jqy93gBLZjfRP8bfejn8dO3C/2ls5Wgzgt2TQjmunhZ
DI8xYygII10y1QDtzU1QF8kglJsrsbokR59T8JNVyKQ/Nc24icDXrHCQC+N5Fhtm
C0u3FhFtGnxCU97GRLWzd5A6Utfq/tkpj+P2lOLrwVZdvH+suKZer/4mxn/TNG6d
4zP8TOF5So/4+w0GtaXRyoHBwZaQImW6zwECSRCk+GtbnYZOfn/6o2DPLHQ4K8UX
F+KmGwWsg5vamg9WdEeI2X2AmRNXJgCTLUjim5fJb5VrfgFyCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIgw+rXjUXZ5dSad0VtBf7wW1OwKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2RmZmQ0Y2MtMTk2NC0z
ZGYzLWJhNWMtYmVlYWQ4NGFiOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI90wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrmiNDGQ/7XoTgHj3488rtBn4hU/tnfFOrEXOq2np2m3hw5OwuoKBwC
TPuCBJUzD8Oaa5rusgaFKYIoFqsX82x+mDDB8TIJFs2IbsozNqvzXeYo1Rurikwp
fe4gGJm7dgnGh2QFzJw7+chbjbDMBZPdBSX84odcFR5TYyYbG9rKlkU/XSAzA7tq
/lAZf457Ba2mTgkYfZv/AEVKRZgxe6XIaLcbuOthIzYc32TScv1m6eH0N8Ut3iAf
H8BwBOgM7D13g4KahVermPC5efuV0BkOT/CehnJ14xSTMh2Aqax3PxpJ7axE2gvz
o0q1mjQmO6LbqCUld4fjFX2pQFSFSNw=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:41 2023 by rpki-client on console-fra.rpki-client.org