Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/18a1c8b4-7b7e-3c48-a032-be1782e853d9.roa
File: 18a1c8b4-7b7e-3c48-a032-be1782e853d9.roa (raw, json)
Hash identifier: 1FLZmyzNut9AlZ8A1C8O+1r0zd8EjUpSR9jl7JYWH0c=
Subject key identifier: 1C:5B:2B:8A:FD:2F:A6:99:20:AC:C2:95:FA:A8:4B:40:90:19:DF:76
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A51086824B376635FBBF180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/18a1c8b4-7b7e-3c48-a032-be1782e853d9.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 36103
IP address blocks: 65.49.90.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:08:68:24:b3:76:63:5f:bb:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=131bac24-f400-425b-9e17-b7b2796df974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:cd:da:c6:51:ab:42:d5:d9:81:95:0b:32:
e2:ed:65:7e:30:b8:ad:31:ba:43:88:8f:0c:c6:70:
0f:55:56:22:16:f7:51:0f:18:b7:33:68:d9:e3:74:
2a:57:ef:2f:57:ae:04:5a:d7:ec:ff:73:98:ae:21:
fe:85:7e:0f:7f:8b:96:44:95:18:a5:ec:42:12:66:
fd:af:cc:b2:b4:21:b6:bc:c1:02:ee:e3:67:f9:23:
ec:9e:65:3a:79:f3:0a:44:75:6a:7f:e4:d1:4f:67:
c3:37:b6:1a:8f:ab:ab:95:de:5e:82:f2:5c:d6:95:
f4:90:b3:75:d8:1d:df:5d:5f:3b:d3:9a:79:e5:ff:
f5:fe:f9:2e:d9:3c:e2:70:61:fb:96:65:af:b0:aa:
f4:29:bd:6e:1b:c4:1b:2e:9d:d2:ec:ee:2c:75:64:
9b:7d:ea:fa:51:47:c0:eb:4f:ff:21:9c:28:19:bf:
8e:b8:dc:4d:80:57:77:c1:f7:be:6e:6d:64:97:ae:
1d:b7:48:99:24:29:0a:60:a1:64:55:70:55:0d:d7:
5d:4c:32:17:d1:a3:99:94:ba:51:c9:13:1f:d8:6b:
7d:a1:0e:07:85:ff:56:f6:e7:33:66:84:0f:43:34:
b2:dc:99:76:f4:c4:10:3e:3d:1b:36:72:5a:dc:f9:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5B:2B:8A:FD:2F:A6:99:20:AC:C2:95:FA:A8:4B:40:90:19:DF:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/18a1c8b4-7b7e-3c48-a032-be1782e853d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:58:61:8b:9a:08:20:fb:d5:61:dc:fb:0d:dc:bd:89:af:69:
b6:1c:53:ef:ce:c8:ee:50:c9:f5:61:1e:e1:23:13:bd:cb:89:
93:54:1b:bb:af:59:0a:b2:26:8f:cd:1f:fe:e5:03:e1:18:58:
db:fe:e3:ba:d1:94:87:82:14:a1:9e:f2:d4:fb:a7:65:75:72:
94:2b:d5:b4:5c:ab:6c:2a:5b:0e:c2:e2:32:b9:37:d9:67:9f:
17:04:d6:58:4f:0d:54:ee:ab:79:58:b3:5a:f1:47:76:95:5f:
1e:a9:31:dc:de:10:6a:77:4c:88:a7:30:1c:15:2b:bb:ad:86:
bf:86:6c:3c:ea:b9:5b:bc:09:c8:87:bd:aa:d7:3a:cf:74:c5:
dc:29:f9:51:60:df:3a:13:87:70:99:49:4b:d5:5b:fa:cd:dc:
6b:74:21:67:3a:9b:0b:cf:c0:19:d2:b4:a6:38:8f:26:53:84:
00:c1:9e:a6:de:c3:3b:f1:e2:94:80:20:60:a3:ee:ad:db:03:
46:15:72:89:d8:87:d7:9f:50:28:ac:3e:d4:87:3c:34:e7:cc:
1a:46:7d:7e:44:00:37:96:91:57:1f:69:15:3e:a4:94:ce:f3:
3e:7e:c7:75:05:64:e3:0f:84:6c:72:b5:5f:2a:4a:cd:ee:47:
33:65:e4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:55:06 2025 by rpki-client