Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/421084a0-a419-3b61-b5ce-7b4daaae41f0.roa
File: 421084a0-a419-3b61-b5ce-7b4daaae41f0.roa (raw, json)
Hash identifier: 60eO6+bva+F6fax4bWHPgcFJWJZ/qs+y47MKoL65RdU=
Subject key identifier: 64:7B:5A:8B:B5:C2:93:2B:A5:5A:88:87:4D:16:82:20:48:96:2F:D0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584589A31698973025AB310A9480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/421084a0-a419-3b61-b5ce-7b4daaae41f0.roa
Signing time: Sun 14 Apr 2024 01:00:24 +0000
ROA not before: Sun 14 Apr 2024 01:00:24 +0000
ROA not after: Sat 13 Jul 2024 01:00:24 +0000
asID: 397423
IP address blocks: 65.49.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:89:a3:16:98:97:30:25:ab:31:0a:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 14 01:00:24 2024 GMT
Not After : Jul 13 01:00:24 2024 GMT
Subject: CN=656fac27-17c1-42ec-9087-62bf51891f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:61:81:20:6a:06:46:be:c7:83:95:ee:99:d6:
82:81:87:ca:a8:09:db:b8:1b:de:c3:58:ae:43:3f:
93:bf:87:ab:85:80:5a:4c:34:54:f5:80:0a:e1:a9:
de:ac:6a:7e:f6:64:0f:6d:0a:45:5c:af:14:3b:39:
f3:99:72:da:e7:70:dc:bb:e3:56:ca:00:6a:92:56:
9f:95:e5:9d:fb:14:ff:bf:05:ae:e2:4d:fe:ca:6f:
94:4e:51:38:32:ce:0e:3b:c6:0b:bf:22:ec:6e:68:
2f:15:08:3d:08:84:0e:9e:87:aa:c7:38:b4:d9:9c:
9b:fc:e7:b3:ce:96:58:4d:a9:4b:b7:4a:b3:07:70:
2b:45:61:31:20:b0:d9:5f:03:ba:e7:28:e0:f8:8b:
88:54:a7:5e:e4:ae:29:b2:40:ef:a1:87:ce:81:19:
a9:eb:ec:ae:86:48:d8:9a:ae:59:7f:2a:65:07:7e:
86:cb:f7:2c:3f:d8:0d:f6:6a:7f:f0:8f:c7:1e:e6:
38:00:53:72:88:e2:11:97:04:c2:5b:31:45:33:86:
aa:95:32:65:38:4a:d3:5b:ab:d4:5a:a3:f8:7a:73:
f3:0d:65:b2:72:2a:e8:5c:46:98:57:86:44:03:e2:
2b:a0:1a:f5:f0:9e:0e:ee:50:3c:eb:f9:3e:c5:a9:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:5A:8B:B5:C2:93:2B:A5:5A:88:87:4D:16:82:20:48:96:2F:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/421084a0-a419-3b61-b5ce-7b4daaae41f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:33:74:ba:15:49:36:d4:f6:9c:b7:3f:5b:fd:fa:e6:fb:03:
aa:ae:60:5d:ad:16:c2:df:0f:e0:1f:bc:fa:02:d6:3f:a1:86:
98:f1:3c:b1:5b:dd:0b:15:62:08:92:8d:47:8a:25:9d:38:e5:
c2:f4:55:c4:0e:e4:2a:93:7b:72:ae:5d:6d:44:a7:54:1a:94:
88:0a:18:19:eb:70:3e:cd:52:dc:41:af:cd:49:6d:8d:bd:98:
98:47:72:31:24:ce:35:33:2a:e6:9b:9d:5d:0a:2e:46:e3:7c:
e4:99:90:9a:2e:17:e9:63:b5:c5:26:10:35:d2:e8:cf:2d:d0:
94:b4:24:59:83:91:b9:0f:75:0c:bd:9f:2a:2b:2e:8b:f5:a6:
f3:70:73:bd:9c:04:b4:71:31:3a:44:3c:ff:c1:43:04:42:b9:
51:a6:e9:aa:5d:04:19:8a:d3:76:62:3a:ff:8c:26:c2:4b:74:
9f:fb:0b:c1:6e:e6:d3:a7:6f:45:c8:c8:ec:85:27:d7:88:10:
f4:d3:d5:e0:c6:4a:c8:43:0e:fd:e7:a5:da:14:ca:72:dd:1d:
c4:b7:5f:7c:d8:82:1d:62:3d:62:5e:57:17:d2:ae:5c:b8:68:
66:20:fe:45:27:a1:7d:1f:81:3d:e7:ad:9b:c0:61:b2:f2:1c:
d1:99:f7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:08:45 2025 by rpki-client