Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ecefd43-1d04-3639-ba34-3e5fc67fac7f.roa
File: 4ecefd43-1d04-3639-ba34-3e5fc67fac7f.roa (raw, json)
Hash identifier: fV48HCd620DzzvNsopBqHEABvDnfRNwHGImUGyzm7IM=
Subject key identifier: 95:AE:27:B4:BC:12:2C:62:1B:ED:34:98:46:B5:BD:04:82:52:CD:D0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A509832BBF35A5FF48B5C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ecefd43-1d04-3639-ba34-3e5fc67fac7f.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 12247
IP address blocks: 74.82.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:98:32:bb:f3:5a:5f:f4:8b:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=80e6ff66-6d5c-46d1-8ccb-14027c5378b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:8f:7f:2f:2d:19:e5:a8:b8:93:3b:4e:65:
af:d4:ba:0d:d6:b5:5a:7f:89:17:b1:b9:44:0a:ac:
39:09:62:80:80:db:90:1b:87:28:76:5c:e3:78:94:
90:d0:23:b6:38:aa:de:5d:ad:c4:6e:3b:b4:34:65:
43:93:9e:cd:9c:d5:29:4b:e5:62:89:1f:18:76:1d:
e1:13:99:a7:8c:1c:44:f6:6b:31:ea:bb:66:b6:cc:
de:e0:5b:f7:05:75:c9:ec:6b:80:d8:f3:6c:00:9b:
43:6c:0c:3c:7b:a6:d9:ed:a9:8c:ad:9f:ee:4b:b2:
94:54:50:ea:1f:33:fc:48:ee:f7:6e:0c:29:fb:95:
00:2d:d4:62:20:1c:f9:53:79:50:03:f6:42:d0:91:
7f:71:84:8a:78:27:f2:4a:fc:f2:42:1c:9f:54:12:
d1:cf:6b:b4:a2:46:5c:fc:bb:ed:73:09:b0:3b:60:
9d:78:a4:3c:e7:ba:21:a1:eb:0f:e1:6d:87:e3:ce:
2c:56:77:a6:3e:bc:35:a5:f5:29:ca:52:9f:13:f0:
4b:5f:3f:49:33:70:7d:c0:37:4f:1f:af:c1:e9:8c:
4d:ed:1b:ab:93:cc:a0:35:0b:27:22:fb:b0:e3:ca:
25:88:ce:0f:2c:af:bf:7a:88:83:4a:b2:6d:03:c5:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AE:27:B4:BC:12:2C:62:1B:ED:34:98:46:B5:BD:04:82:52:CD:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ecefd43-1d04-3639-ba34-3e5fc67fac7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
74.82.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:e1:e9:20:cd:22:72:3f:b7:4e:69:fc:5d:bd:9c:fb:b9:0b:
9e:30:16:90:75:cf:aa:66:73:cf:36:51:b7:eb:63:78:f5:c4:
fa:ca:d4:3d:d0:35:51:71:a6:4e:70:8a:10:dd:f8:6b:83:8d:
9c:9a:39:02:d7:22:d1:aa:6d:fe:9e:b2:4c:38:fb:67:59:8a:
b2:16:4e:82:d1:08:24:e0:d8:cf:17:cd:74:71:15:dc:08:0d:
42:d1:fb:92:f1:4a:57:4c:3c:bd:da:1f:b0:66:a4:d7:79:35:
17:27:e9:06:d4:f3:71:dc:29:73:25:c5:cb:d0:c7:11:c6:ec:
44:00:cb:49:c9:a0:bb:25:27:36:69:25:fb:b4:95:8d:4c:aa:
d4:0a:d0:f6:58:21:75:9a:10:71:83:a8:cf:bd:71:ef:a4:97:
1a:ef:37:ef:81:2d:cf:e6:37:75:7b:54:00:0e:77:a5:3f:ba:
34:b7:81:cd:5e:d5:dd:7d:36:da:46:9c:82:6b:10:5b:8d:d6:
14:4f:d8:87:cb:66:5b:7e:fb:17:4b:42:f1:c6:9f:cd:49:76:
11:0a:c0:1f:33:26:aa:00:34:a4:f0:93:f6:89:56:cb:89:10:
05:d6:dc:52:d7:7b:a3:c3:e0:01:ff:5b:7d:eb:1f:cd:96:36:
b8:8b:b5:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUJgyu/NaX/SLXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODBlNmZmNjYtNmQ1Yy00NmQxLThjY2ItMTQwMjdjNTM3OGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDCPfy8tGeWouJM7TmWv1LoN1rVaf4kXsblE
Cqw5CWKAgNuQG4codlzjeJSQ0CO2OKreXa3Ebju0NGVDk57NnNUpS+ViiR8Ydh3h
E5mnjBxE9msx6rtmtsze4Fv3BXXJ7GuA2PNsAJtDbAw8e6bZ7amMrZ/uS7KUVFDq
HzP8SO73bgwp+5UALdRiIBz5U3lQA/ZC0JF/cYSKeCfySvzyQhyfVBLRz2u0okZc
/LvtcwmwO2CdeKQ857ohoesP4W2H484sVnemPrw1pfUpylKfE/BLXz9JM3B9wDdP
H6/B6YxN7Rurk8ygNQsnIvuw48oliM4PLK+/eoiDSrJtA8XajwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWuJ7S8EixiG+00mEa1vQSCUs3QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGVjZWZkNDMtMWQwNC0z
NjM5LWJhMzQtM2U1ZmM2N2ZhYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELh6SDNInI/t05p/F29nPu5C54wFpB1z6pmc882UbfrY3j1xPrK1D3Q
NVFxpk5wihDd+GuDjZyaOQLXItGqbf6eskw4+2dZirIWToLRCCTg2M8XzXRxFdwI
DULR+5LxSldMPL3aH7BmpNd5NRcn6QbU83HcKXMlxcvQxxHG7EQAy0nJoLslJzZp
Jfu0lY1MqtQK0PZYIXWaEHGDqM+9ce+klxrvN++BLc/mN3V7VAAOd6U/ujS3gc1e
1d19NtpGnIJrEFuN1hRP2IfLZlt++xdLQvHGn81JdhEKwB8zJqoANKTwk/aJVsuJ
EAXW3FLXe6PD4AH/W33rH82WNriLtbk=
-----END CERTIFICATE-----
Generated at Wed May 7 13:45:36 2025 by rpki-client