Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44627b5a-9a1e-33dd-a5ba-aaba2050ff51.roa
File: 44627b5a-9a1e-33dd-a5ba-aaba2050ff51.roa (raw, json)
Hash identifier: VIwqfWq0pAK9ZwvFWIyyEyFPHn0mo/4jKk2UCoGVBNQ=
Subject key identifier: 26:23:9A:6D:78:D5:BF:2F:2B:D4:92:EC:CE:19:59:4D:44:1A:AE:89
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A5075FEBDCD6EBFDB317F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44627b5a-9a1e-33dd-a5ba-aaba2050ff51.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 394330
IP address blocks: 64.62.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:75:fe:bd:cd:6e:bf:db:31:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=7e7edcda-1156-4de7-a590-32fa168d6526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:f9:e4:83:aa:91:b8:d2:a9:bf:66:55:71:
60:63:32:36:9f:b9:ae:bc:74:d4:51:4d:ce:bc:75:
fb:5c:48:eb:39:76:04:0f:37:37:59:e7:f6:87:f6:
d8:4c:08:09:72:3d:58:6b:c2:74:1b:51:c3:d7:3e:
aa:c5:92:ef:90:c2:04:52:2f:96:ec:a8:5d:ec:66:
59:c1:ee:1f:ab:af:44:45:0d:25:c2:33:e1:15:c8:
c5:e9:74:79:15:1e:1c:d1:be:08:aa:3f:51:4f:77:
3d:ab:70:b8:15:78:0e:7b:66:da:af:fb:2b:43:a2:
29:49:bb:10:74:8b:87:81:6b:ae:28:22:f3:c7:3e:
0a:89:89:03:8a:0c:4d:49:43:45:af:02:55:47:2f:
d5:ef:db:bf:20:35:2f:c1:7f:4d:7c:35:bc:92:58:
c1:92:02:2e:84:64:45:fd:c4:b9:db:8a:e1:f6:1e:
c2:2c:70:54:21:ae:88:27:df:95:9f:a9:69:e2:d7:
66:53:25:a7:fe:db:c1:73:5b:cc:07:56:7c:64:e5:
8b:01:27:42:8f:47:34:f1:3b:67:eb:55:64:2e:57:
c6:4f:bd:6f:0e:d3:45:fb:40:64:62:34:d6:51:f0:
da:ff:de:f6:28:87:19:96:5e:51:d6:3a:79:10:fd:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:23:9A:6D:78:D5:BF:2F:2B:D4:92:EC:CE:19:59:4D:44:1A:AE:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44627b5a-9a1e-33dd-a5ba-aaba2050ff51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:c6:a1:24:8f:28:39:5e:a5:b7:5d:fb:d5:23:a1:81:17:34:
df:86:b8:b1:4c:a8:b2:53:87:de:f8:31:43:09:58:0a:a7:35:
89:ce:5f:8e:4b:9c:6d:b7:ff:19:34:cb:db:3b:99:ad:02:8c:
60:e1:09:fa:6c:0c:08:64:d8:ac:94:8f:02:da:08:98:96:33:
24:13:29:0b:12:ec:47:45:e6:89:c1:3a:e0:02:bc:83:03:11:
e0:1b:77:e8:b3:d1:cc:72:25:9d:73:8b:70:ab:61:58:00:f3:
5b:1e:9b:e4:c4:f2:eb:1e:d9:73:74:29:8e:0d:20:13:ab:d4:
67:bc:81:37:c0:b7:cc:29:83:db:a3:f1:f9:da:89:02:e3:9c:
57:2b:bc:6c:ea:7d:94:7e:d6:ea:48:78:31:ac:41:1d:bc:b5:
ae:4e:7f:41:a4:ce:f1:d0:a0:f4:1b:57:28:9a:d7:bc:08:90:
b9:79:e5:78:a6:01:37:88:25:22:58:ff:6e:e7:ea:c0:1d:38:
2b:81:6f:b6:2f:ac:2c:8b:d7:8e:b6:38:44:09:d6:82:07:c2:
f8:aa:70:7e:3f:f1:c5:23:42:d0:0d:94:83:60:c2:52:d9:0a:
3f:2a:69:71:0f:15:f8:0a:76:ea:67:48:52:9c:82:4b:9a:9a:
d4:d6:80:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUHX+vc1uv9sxf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
N2U3ZWRjZGEtMTE1Ni00ZGU3LWE1OTAtMzJmYTE2OGQ2NTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgb55IOqkbjSqb9mVXFgYzI2n7muvHTUUU3O
vHX7XEjrOXYEDzc3Wef2h/bYTAgJcj1Ya8J0G1HD1z6qxZLvkMIEUi+W7Khd7GZZ
we4fq69ERQ0lwjPhFcjF6XR5FR4c0b4Iqj9RT3c9q3C4FXgOe2bar/srQ6IpSbsQ
dIuHgWuuKCLzxz4KiYkDigxNSUNFrwJVRy/V79u/IDUvwX9NfDW8kljBkgIuhGRF
/cS524rh9h7CLHBUIa6IJ9+Vn6lp4tdmUyWn/tvBc1vMB1Z8ZOWLASdCj0c08Ttn
61VkLlfGT71vDtNF+0BkYjTWUfDa/972KIcZll5R1jp5EP3NVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCYjmm141b8vK9SS7M4ZWU1EGq6JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDQ2MjdiNWEtOWExZS0z
M2RkLWE1YmEtYWFiYTIwNTBmZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD7uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfGoSSPKDlepbdd+9UjoYEXNN+GuLFMqLJTh974MUMJWAqnNYnOX45L
nG23/xk0y9s7ma0CjGDhCfpsDAhk2KyUjwLaCJiWMyQTKQsS7EdF5onBOuACvIMD
EeAbd+iz0cxyJZ1zi3CrYVgA81sem+TE8use2XN0KY4NIBOr1Ge8gTfAt8wpg9uj
8fnaiQLjnFcrvGzqfZR+1upIeDGsQR28ta5Of0GkzvHQoPQbVyia17wIkLl55Xim
ATeIJSJY/27n6sAdOCuBb7YvrCyL1462OEQJ1oIHwviqcH4/8cUjQtANlINgwlLZ
Cj8qaXEPFfgKdupnSFKcgkuamtTWgCc=
-----END CERTIFICATE-----
Generated at Wed May 7 08:30:10 2025 by rpki-client