Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/42da945c-b958-3897-92d8-e7d123eb336b.roa
File: 42da945c-b958-3897-92d8-e7d123eb336b.roa (raw, json)
Hash identifier: kw12kPJHL+JREXyfp2seaiI0UODdV5/D6v3pr7ncj2Y=
Subject key identifier: 52:88:CE:BA:B6:D5:B8:26:9A:56:0F:30:1A:4C:D7:37:65:21:88:AF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648E38C8D9273E018702C7F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/42da945c-b958-3897-92d8-e7d123eb336b.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 36791
IP address blocks: 65.49.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:38:c8:d9:27:3e:01:87:02:c7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=6d4b29a8-af51-41dd-84b4-c4a86832c2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:25:15:49:31:b2:c7:c2:99:af:2b:2c:9d:
2a:09:94:d9:ba:e6:d7:57:cb:f8:4c:6a:c8:5d:d1:
5b:36:d6:e2:e4:de:02:d7:a6:6e:34:07:33:d4:59:
c1:ff:86:18:4c:25:5c:6e:41:01:2f:71:49:9d:bb:
c9:95:28:99:60:d2:d4:4b:cd:a7:45:8c:43:25:46:
8b:2c:6a:22:3f:39:ad:06:47:fb:bb:11:67:8f:39:
bb:49:4b:ca:1b:40:b6:f1:28:52:ad:6b:47:05:cc:
f3:67:66:e0:9e:7f:5e:34:f3:4c:d7:bb:1e:57:79:
c2:62:91:8c:5b:22:df:60:8a:9a:4c:ba:32:f4:2e:
67:08:75:77:ef:71:49:4a:6d:6a:14:fc:fa:5a:7b:
0e:a8:f6:e0:0d:53:38:ea:bf:35:9c:55:45:16:4f:
25:e4:c8:c4:8c:5e:61:83:76:a5:41:4d:77:ec:98:
c5:be:eb:33:42:c8:2c:1c:ff:a8:20:64:9b:c4:3a:
ce:a4:a7:23:03:8a:4f:7d:37:1e:b3:e8:5e:93:a2:
3a:0b:ee:db:c2:8f:d6:2e:5d:ce:b8:9e:48:3a:36:
62:6b:79:63:c0:a4:0e:44:b8:14:9b:17:16:11:e9:
39:66:31:ef:f3:56:9f:7d:79:73:7a:94:f5:96:2d:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:88:CE:BA:B6:D5:B8:26:9A:56:0F:30:1A:4C:D7:37:65:21:88:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/42da945c-b958-3897-92d8-e7d123eb336b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:43:ff:29:80:35:c4:e2:a3:b8:87:86:9b:47:1b:81:ed:a9:
d1:a1:fd:5b:5b:d7:45:6e:43:2b:48:e1:ce:16:ff:a8:b5:0f:
58:eb:56:08:ce:37:4a:89:25:4f:a2:92:4e:9d:45:fd:21:f4:
44:c8:e3:5f:8d:e4:5e:bc:6a:98:0f:b8:b2:93:3f:18:93:5c:
a0:75:7b:05:15:ca:82:67:c7:29:a5:38:5c:78:46:7e:e5:30:
77:eb:2b:c5:91:2d:d5:54:c4:6a:00:27:6a:85:33:32:0b:04:
97:d0:c8:6f:2b:7d:e3:5a:0e:ae:61:eb:02:af:26:48:a4:3f:
a6:34:78:90:63:80:db:61:3d:71:28:66:c5:b3:33:ee:b5:2d:
c5:54:9a:fa:19:49:b2:b2:f4:14:f6:75:fc:06:15:d1:b0:74:
9f:2c:6a:16:aa:b6:14:d9:1a:dd:1b:f2:a1:c0:8f:3e:b4:50:
1a:0e:a8:69:f7:05:c4:6a:11:54:34:46:5b:18:86:59:f7:43:
45:7e:db:5c:ae:96:7a:d8:5e:69:41:0d:d5:f6:09:11:24:60:
8d:ae:85:13:30:60:c5:05:ac:97:ed:5b:a9:38:42:c9:71:89:
92:5f:f4:36:02:70:40:c6:5b:a7:10:6f:89:6d:1d:df:8f:fb:
1e:ad:62:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9kjjjI2Sc+AYcCx/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
NmQ0YjI5YTgtYWY1MS00MWRkLTg0YjQtYzRhODY4MzJjMmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj4lFUkxssfCma8rLJ0qCZTZuubXV8v4TGrI
XdFbNtbi5N4C16ZuNAcz1FnB/4YYTCVcbkEBL3FJnbvJlSiZYNLUS82nRYxDJUaL
LGoiPzmtBkf7uxFnjzm7SUvKG0C28ShSrWtHBczzZ2bgnn9eNPNM17seV3nCYpGM
WyLfYIqaTLoy9C5nCHV373FJSm1qFPz6WnsOqPbgDVM46r81nFVFFk8l5MjEjF5h
g3alQU137JjFvuszQsgsHP+oIGSbxDrOpKcjA4pPfTces+hek6I6C+7bwo/WLl3O
uJ5IOjZia3ljwKQORLgUmxcWEek5ZjHv81affXlzepT1li0Q5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKIzrq21bgmmlYPMBpM1zdlIYivMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDJkYTk0NWMtYjk1OC0z
ODk3LTkyZDgtZTdkMTIzZWIzMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALtD/ymANcTio7iHhptHG4HtqdGh/Vtb10VuQytI4c4W/6i1D1jrVgjO
N0qJJU+ikk6dRf0h9ETI41+N5F68apgPuLKTPxiTXKB1ewUVyoJnxymlOFx4Rn7l
MHfrK8WRLdVUxGoAJ2qFMzILBJfQyG8rfeNaDq5h6wKvJkikP6Y0eJBjgNthPXEo
ZsWzM+61LcVUmvoZSbKy9BT2dfwGFdGwdJ8sahaqthTZGt0b8qHAjz60UBoOqGn3
BcRqEVQ0RlsYhln3Q0V+21yulnrYXmlBDdX2CREkYI2uhRMwYMUFrJftW6k4Qslx
iZJf9DYCcEDGW6cQb4ltHd+P+x6tYik=
-----END CERTIFICATE-----
Generated at Wed May 7 13:42:26 2025 by rpki-client