Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/294f3bd3-1682-31d0-9a4e-b58eafd1a3ef.roa
File: 294f3bd3-1682-31d0-9a4e-b58eafd1a3ef.roa (raw, json)
Hash identifier: mZ/HcTzxh6jbWhEdYFtVeFaLkWCwMZ3jUetqKHDQAVg=
Subject key identifier: 59:28:DF:8B:DE:60:DD:50:18:99:39:74:88:6B:86:47:79:4C:D8:ED
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583CA956D2539203F2E0E8948280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/294f3bd3-1682-31d0-9a4e-b58eafd1a3ef.roa
Signing time: Thu 20 Jan 2022 05:00:00 +0000
ROA not before: Thu 20 Jan 2022 05:00:00 +0000
ROA not after: Wed 20 Jul 2022 04:00:00 +0000
asID: 398947
IP address blocks: 216.66.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a9:56:d2:53:92:03:f2:e0:e8:94:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 20 05:00:00 2022 GMT
Not After : Jul 20 04:00:00 2022 GMT
Subject: CN=805e7c77-6e30-49c7-8070-1e67f5187dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:7f:d8:1b:a0:f1:b2:1b:fd:96:2d:7b:b7:
07:50:27:ae:c4:27:1d:72:ce:9d:9e:2b:72:61:a3:
3a:a7:a6:6a:77:22:5a:61:80:2f:61:f8:ce:1c:ba:
95:32:0e:62:66:59:0d:31:19:ee:52:66:13:17:07:
57:37:a0:4a:c3:24:dc:f9:31:11:dc:68:d2:e4:87:
31:a2:a0:dc:ef:e5:27:fd:76:8e:75:94:da:1b:a1:
01:28:59:f5:d2:2c:fb:b4:fd:9c:5a:3a:59:f1:af:
48:fb:21:e9:7d:f7:65:2e:8a:1a:92:2b:f2:7c:6d:
0b:7f:e0:35:27:80:ce:2c:f9:f3:e3:15:37:40:c3:
9b:3a:a1:45:b8:c7:6b:c6:06:2f:12:1b:a0:be:08:
d6:a2:13:08:17:ef:dd:2c:eb:1f:49:fb:4a:6a:34:
95:77:1d:42:ed:ce:d3:00:2b:a8:bf:e7:c6:af:b9:
f7:ba:e2:4c:72:48:a7:bc:c3:90:cd:da:3f:34:33:
40:e1:8e:67:7f:20:28:d0:17:03:fe:d8:9a:10:81:
20:a1:2e:18:20:78:f5:4d:49:21:68:69:75:79:aa:
74:b7:53:66:1f:72:38:a6:51:56:1f:79:c8:c9:ba:
51:11:6e:14:9b:63:f2:da:c0:7b:d1:04:5e:58:90:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:28:DF:8B:DE:60:DD:50:18:99:39:74:88:6B:86:47:79:4C:D8:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/294f3bd3-1682-31d0-9a4e-b58eafd1a3ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:cc:bb:36:8d:a6:bd:97:70:60:a5:77:c3:c3:01:c9:dd:a5:
7f:f1:e3:36:79:90:9f:47:dc:a9:0c:95:59:43:d8:fb:05:0e:
0c:c2:47:7c:29:2a:66:c2:d0:f7:e1:6f:87:f1:5e:ce:4c:d2:
0d:85:fc:8c:0b:ea:00:a3:5b:f4:c3:7f:a3:82:05:49:14:8b:
8d:da:fe:3a:9e:56:7d:9b:b4:04:01:43:a3:be:3b:93:e2:3a:
d4:39:a1:01:8b:7a:05:de:8c:b7:1e:d2:a7:84:2c:9f:22:f8:
8d:c3:f0:f0:43:f5:89:ca:86:6f:3b:e7:b9:c4:aa:fa:af:42:
46:cb:50:7c:05:35:ba:78:2d:a2:dc:d4:ca:2e:9b:e6:6a:78:
1b:2c:17:5c:89:86:77:04:cc:24:a9:2a:41:84:62:78:2b:3a:
79:75:e0:31:6d:c7:d9:92:39:e4:21:31:7f:f6:85:77:99:39:
4a:06:f9:52:f2:62:79:cc:2a:f0:7f:0c:33:db:43:c1:cd:6d:
b9:bc:32:f7:77:14:12:eb:81:24:8d:c8:bb:c7:c5:bf:9e:d8:
f6:8b:bf:ac:48:53:f3:0d:ec:68:1a:af:c6:c6:09:71:b9:2c:
73:1f:72:08:df:08:ac:47:02:8f:7f:4d:3b:58:c2:32:a5:36:
ba:a9:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:40:14 2025 by rpki-client