Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/04a7ec94-afd9-3c18-a948-35b37722921a.roa
File: 04a7ec94-afd9-3c18-a948-35b37722921a.roa (raw, json)
Hash identifier: 3j5nnyqIUH1mnlBouW4SRy1RomUJrzpBg1SZ5jFgnhU=
Subject key identifier: A5:FB:65:41:02:E7:37:37:6A:D2:59:98:5D:4E:33:4F:7D:8B:96:C6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B3253B99BAC93D2A52500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/04a7ec94-afd9-3c18-a948-35b37722921a.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 63949
IP address blocks: 64.62.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:32:53:b9:9b:ac:93:d2:a5:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=fd33267f-901e-4708-a93e-5e63281403e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:3c:9e:15:9c:ff:c9:e1:58:a3:e4:a6:7d:
a7:4a:0a:0f:84:2c:b6:ef:7f:d0:33:bc:68:55:43:
04:08:10:ac:26:b5:90:f5:47:a8:c1:b8:81:21:cc:
1c:ed:ff:7a:7b:3a:6b:05:ea:17:fd:2d:5c:9f:13:
5f:84:44:34:67:f5:ac:fc:66:a2:d0:93:8b:66:33:
15:0d:15:9d:40:98:8a:c6:70:a2:90:c6:6d:9e:e3:
bb:d0:4a:82:6b:7f:33:0c:2a:a1:71:fa:9f:38:f4:
9e:93:66:58:eb:c2:ff:f6:2f:a7:03:b1:14:ce:fd:
dc:34:60:e1:d1:85:69:aa:b2:51:30:79:01:5a:e6:
85:6d:22:9e:7b:3e:9d:58:fa:5f:41:36:4b:a3:8e:
fa:6c:52:0f:41:79:4c:23:32:6b:3d:8d:58:9d:a9:
d2:e2:f4:7c:ed:32:95:f6:71:20:95:0a:93:51:eb:
c0:94:1f:ce:03:23:ee:37:29:44:47:1d:20:ed:27:
6c:f3:3c:0c:81:92:84:f7:a9:d5:44:70:2e:1f:73:
90:51:26:22:f5:47:44:91:0d:57:88:7f:46:a8:07:
35:7b:9d:9d:60:5a:8b:70:38:ae:bf:42:b6:f1:80:
a0:c7:48:11:42:22:7e:a1:4c:8c:2f:32:9c:8b:f7:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FB:65:41:02:E7:37:37:6A:D2:59:98:5D:4E:33:4F:7D:8B:96:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/04a7ec94-afd9-3c18-a948-35b37722921a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:7b:f1:39:51:fe:51:0c:9a:cf:1a:09:f8:ed:42:1d:12:7e:
7d:93:34:69:9b:c6:0e:cd:92:7f:cb:9a:d0:1e:d4:0f:5a:62:
fa:57:fb:db:e5:04:23:b8:2d:a7:e5:9a:75:88:d7:9d:2a:3d:
91:6e:53:aa:58:eb:e5:a6:da:1b:77:0f:03:ac:eb:fd:cd:c7:
31:75:8a:7d:03:e2:11:89:c5:86:97:37:f2:86:9b:f2:b8:fa:
60:52:3b:1d:79:67:d5:2d:19:ce:31:5a:72:26:83:5a:d1:8e:
17:58:06:90:2e:1f:9e:03:c6:a4:14:00:37:7e:f8:c2:15:db:
55:e0:92:f5:43:68:0d:66:2a:3e:ea:89:e7:c1:22:98:32:09:
c2:ce:da:40:4a:6c:a9:cc:46:0f:e3:98:21:fc:be:2e:d7:d3:
4e:ac:e8:07:0a:65:92:0d:77:5b:e5:2a:b3:ff:a4:22:cf:1e:
3a:3c:0e:35:5d:f7:23:9e:c0:74:3a:ec:36:87:63:89:f9:30:
c0:1d:e8:b8:a4:f5:2b:a2:75:22:a7:12:95:b3:ca:4e:3d:0d:
1b:bd:24:9d:c6:13:e2:f7:cd:64:a1:50:9c:0f:ff:a3:76:2d:
6e:50:82:0f:1e:08:02:86:21:7a:9b:fa:14:c3:80:49:d0:7e:
59:06:b8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:43:17 2025 by rpki-client