Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2890dd23-7c97-3525-b003-deee6b0606ca.roa
File: 2890dd23-7c97-3525-b003-deee6b0606ca.roa (raw, json)
Hash identifier: TovALemmAxyFI1/SGvsVYZh3wuDMfrg6Ng9BpKRtMvM=
Subject key identifier: 61:E2:71:01:3A:43:7B:11:17:D3:16:B3:30:1F:D2:30:7C:65:96:10
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A5117C9659E87E131969800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2890dd23-7c97-3525-b003-deee6b0606ca.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 6165
IP address blocks: 65.49.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:17:c9:65:9e:87:e1:31:96:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=8758ebfa-4f27-4f6e-a3b3-9ce62d692ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:94:3b:6a:fd:fb:89:03:74:70:92:68:88:
f5:3f:05:7c:cc:f5:1e:2e:ae:61:99:16:c7:31:35:
97:18:ff:d6:07:c1:24:39:56:78:f6:87:e4:1e:b5:
46:0d:5c:85:20:b9:26:31:d4:a5:c1:1f:72:1c:9d:
7e:bb:14:b1:62:8f:75:56:bc:52:6f:5f:17:9a:4f:
03:72:9a:5f:a2:b6:8c:77:1b:30:0f:96:26:08:39:
f0:41:bb:9d:ce:79:42:21:17:0a:66:42:95:0c:b2:
ec:8a:ea:28:64:ac:2d:9d:11:9f:fe:62:99:90:fa:
fd:77:af:d5:cb:8f:99:1e:77:98:56:c6:7e:7d:8f:
da:25:25:79:b9:3a:fc:b6:04:a0:c3:67:37:3f:5c:
97:61:c0:50:53:c3:ac:82:e2:b8:21:94:82:a2:62:
e7:1c:a2:31:c4:1f:b8:fa:61:4f:83:1b:30:92:28:
f1:85:4c:da:57:59:78:c6:65:f0:25:af:ba:f6:d1:
af:65:22:78:45:33:77:df:2b:d3:67:2e:f0:c6:88:
16:0e:a3:6f:1a:6a:a5:81:21:87:bd:b6:46:8a:20:
47:45:00:d2:f8:17:f1:de:eb:87:8b:b1:09:40:18:
86:fc:a7:9a:d5:33:c4:23:94:b7:59:df:ee:40:f3:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E2:71:01:3A:43:7B:11:17:D3:16:B3:30:1F:D2:30:7C:65:96:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2890dd23-7c97-3525-b003-deee6b0606ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:a4:a8:71:2e:13:1a:74:6b:04:a6:97:67:49:3d:cd:5e:a6:
c7:2e:30:6d:00:cb:fa:62:2a:9a:1d:0a:49:6f:86:67:24:65:
28:e2:b8:c3:48:97:79:14:68:75:c7:c3:17:8c:f3:7d:8d:d6:
f4:3a:27:ff:8a:f5:a1:eb:3a:43:03:73:ce:5f:3d:4b:9c:07:
c4:da:97:80:56:86:64:85:d6:d7:c8:d7:ad:06:62:0b:a3:ef:
37:4a:d3:9e:94:52:d1:9f:e1:ad:ee:10:56:02:4f:a7:d2:ba:
c3:6d:50:3d:79:ef:b4:a5:37:03:3e:15:ba:c5:00:42:e7:44:
36:ad:23:85:6f:81:13:f6:10:fd:18:75:85:54:82:c2:2b:f7:
bf:87:41:52:e8:5d:f2:f9:f5:3f:fd:25:92:25:3e:ed:d2:12:
9d:8b:45:6a:79:d3:f0:59:2f:0d:83:1b:50:3e:5e:5c:a2:89:
e7:c9:4d:3f:20:f7:99:87:fe:fa:f1:43:88:7b:c9:45:f4:59:
33:2e:96:bd:9d:ba:19:1e:fe:13:33:f7:b8:16:82:ae:ec:3e:
86:f6:96:ea:59:92:03:b9:58:66:a8:29:0b:54:01:c6:02:f0:
d8:6a:79:e9:56:18:57:e3:18:b0:71:6b:6f:0d:ee:72:a3:ff:
7c:e5:95:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKURfJZZ6H4TGWmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODc1OGViZmEtNGYyNy00ZjZlLWEzYjMtOWNlNjJkNjkyZWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH+UO2r9+4kDdHCSaIj1PwV8zPUeLq5hmRbH
MTWXGP/WB8EkOVZ49ofkHrVGDVyFILkmMdSlwR9yHJ1+uxSxYo91VrxSb18Xmk8D
cppforaMdxswD5YmCDnwQbudznlCIRcKZkKVDLLsiuooZKwtnRGf/mKZkPr9d6/V
y4+ZHneYVsZ+fY/aJSV5uTr8tgSgw2c3P1yXYcBQU8OsguK4IZSComLnHKIxxB+4
+mFPgxswkijxhUzaV1l4xmXwJa+69tGvZSJ4RTN33yvTZy7wxogWDqNvGmqlgSGH
vbZGiiBHRQDS+Bfx3uuHi7EJQBiG/Kea1TPEI5S3Wd/uQPNaqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHicQE6Q3sRF9MWszAf0jB8ZZYQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjg5MGRkMjMtN2M5Ny0z
NTI1LWIwMDMtZGVlZTZiMDYwNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWkqHEuExp0awSml2dJPc1epscuMG0Ay/piKpodCklvhmckZSjiuMNI
l3kUaHXHwxeM832N1vQ6J/+K9aHrOkMDc85fPUucB8Tal4BWhmSF1tfI160GYguj
7zdK056UUtGf4a3uEFYCT6fSusNtUD1577SlNwM+FbrFAELnRDatI4VvgRP2EP0Y
dYVUgsIr97+HQVLoXfL59T/9JZIlPu3SEp2LRWp50/BZLw2DG1A+XlyiiefJTT8g
95mH/vrxQ4h7yUX0WTMulr2duhke/hMz97gWgq7sPob2lupZkgO5WGaoKQtUAcYC
8NhqeelWGFfjGLBxa28N7nKj/3zllRI=
-----END CERTIFICATE-----
Generated at Sun May 11 04:25:39 2025 by rpki-client