Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0bd7b197-202c-3f8b-a64f-d7abbae540ca.roa
File: 0bd7b197-202c-3f8b-a64f-d7abbae540ca.roa (raw, json)
Hash identifier: pDrpzfJTufXYRKtJ6uArVL4fhR6NCOu3Ndfz3Qn6Lok=
Subject key identifier: BA:D5:6A:0D:5B:27:2A:D1:79:8B:7F:61:C1:50:56:9A:A5:34:A5:D0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845F253ECAD10587DF10EBD2F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0bd7b197-202c-3f8b-a64f-d7abbae540ca.roa
Signing time: Tue 21 May 2024 13:00:34 +0000
ROA not before: Tue 21 May 2024 13:00:34 +0000
ROA not after: Mon 19 Aug 2024 13:00:34 +0000
asID: 27424
IP address blocks: 216.66.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f2:53:ec:ad:10:58:7d:f1:0e:bd:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 21 13:00:34 2024 GMT
Not After : Aug 19 13:00:34 2024 GMT
Subject: CN=61b7c38d-f5ce-486a-a048-91610e546287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e1:09:5d:4f:ff:7d:74:fa:04:34:f3:2b:d3:
89:d3:7c:db:6c:a5:54:17:5a:8c:22:81:1b:6a:bf:
65:6b:43:f2:76:0a:ed:91:dc:2e:22:78:28:df:83:
e0:af:48:3a:0c:ac:16:8b:9d:6d:05:8d:98:a0:87:
15:6a:ff:3a:52:1a:c4:44:ff:90:44:94:19:a4:4f:
ce:27:14:23:2f:60:32:ba:ee:1f:b0:2b:3b:17:bb:
21:e0:f0:2f:c3:f0:5f:a5:3a:85:69:45:cf:1e:7e:
ce:6f:ac:f2:c8:d0:67:9f:77:ba:89:2d:21:6e:8c:
3c:15:76:61:b6:a7:4c:f2:6e:c1:24:d6:34:39:4f:
3d:f0:b8:60:78:fe:c6:3d:12:29:c3:e3:0a:d2:a3:
ad:3f:07:b2:17:ec:40:42:61:a9:e5:68:8e:52:f2:
86:f9:1c:3b:e8:64:64:72:c5:69:85:89:bd:6a:55:
58:72:82:30:f0:e7:8e:9a:26:ff:e2:2d:6b:04:0c:
69:20:ff:e7:98:6d:b2:5a:d2:35:0b:5b:6e:61:64:
39:78:c9:37:05:e5:dd:2d:02:54:4e:9c:90:d8:79:
fc:53:2c:bd:a9:9b:38:89:1d:60:2e:34:8a:ae:04:
89:77:11:7a:81:51:2c:64:4d:51:96:ce:f7:dd:8d:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:6A:0D:5B:27:2A:D1:79:8B:7F:61:C1:50:56:9A:A5:34:A5:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0bd7b197-202c-3f8b-a64f-d7abbae540ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:98:8d:f8:47:df:4d:c3:c9:f2:4d:24:77:72:2a:e2:45:c9:
49:76:2d:19:47:06:da:5a:4f:2a:3f:77:01:30:8f:bc:ee:45:
a5:0b:24:76:4f:a4:9e:b4:1e:c0:52:09:4f:1d:2d:21:e9:60:
18:bb:9f:24:54:ef:8c:91:90:8d:58:d5:b8:8b:86:2d:86:75:
be:f8:20:02:97:13:71:49:8a:6a:16:ce:ab:2f:c8:82:d6:d6:
e9:38:bb:be:5b:71:2c:33:f3:54:aa:b0:85:2c:95:92:ff:71:
ea:15:de:34:ea:5d:07:47:44:a0:98:71:28:1b:de:78:41:16:
57:27:e2:2d:39:34:62:d4:a3:74:de:b6:64:04:7d:4c:52:5e:
fc:bb:1f:f9:4b:80:8f:4a:c8:75:02:03:b1:eb:99:92:34:f5:
dd:20:7e:48:e2:b0:91:9c:58:89:bf:6c:b1:12:67:a3:5e:11:
c8:5a:7e:dc:24:e9:20:85:91:5c:b1:30:7f:77:e3:e0:b9:0c:
8a:d4:90:15:f8:1b:18:a9:2b:c6:1f:e0:27:3b:e6:dd:18:12:
f9:e5:b8:8d:ca:f0:52:ca:9a:83:b7:4f:05:fa:3a:75:0f:9d:
0c:84:ad:63:8a:65:a2:fd:a4:f4:cb:3b:80:01:b4:de:c8:1a:
f2:8e:e4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:41:17 2025 by rpki-client