Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76722922-8dfa-382f-b93a-d1e0d108669f.roa
File: 76722922-8dfa-382f-b93a-d1e0d108669f.roa (raw, json)
Hash identifier: 5sEltJGwLknEVyWKtazV/SLIKm5nNHg8/uocAVpC2Iw=
Subject key identifier: 9D:7A:42:8C:89:CC:AE:7C:64:98:29:06:D9:8C:C3:C2:A2:86:06:38
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285844193E8EFCC513308E88496980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76722922-8dfa-382f-b93a-d1e0d108669f.roa
Signing time: Mon 04 Dec 2023 02:00:15 +0000
ROA not before: Mon 04 Dec 2023 02:00:15 +0000
ROA not after: Sun 03 Mar 2024 02:00:15 +0000
asID: 13650
IP address blocks: 64.62.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:19:3e:8e:fc:c5:13:30:8e:88:49:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 4 02:00:15 2023 GMT
Not After : Mar 3 02:00:15 2024 GMT
Subject: CN=ed22e6c2-0747-4dec-8efa-6ffca0ca935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fa:22:d1:d9:f5:ab:d0:6e:ca:5b:98:c4:9c:
cc:f3:c3:8a:3e:3f:27:44:69:51:31:40:e7:0a:27:
f3:55:8c:8a:86:3d:c2:17:ae:11:10:6b:81:35:01:
26:42:18:de:8a:9c:01:26:70:6a:a8:20:d7:79:56:
26:73:25:2a:fb:0a:70:6c:91:c3:24:a6:80:8d:94:
fb:fb:04:dd:2e:e2:56:cd:28:86:21:ae:86:07:a8:
83:76:12:14:45:c4:96:98:c0:bc:ad:01:80:b4:3c:
43:72:87:f1:ad:f9:0f:4b:da:ae:65:2c:d7:54:ae:
a1:dd:a4:44:45:3a:b0:0b:2e:b8:97:de:48:c6:ed:
51:3d:6e:88:6a:e6:00:74:2e:81:c0:84:9e:36:8b:
8e:a6:39:40:91:a2:8e:0b:28:a5:29:92:43:3a:00:
41:f7:b0:92:0b:cf:26:32:bd:e2:65:81:79:eb:fd:
7e:76:7c:95:e0:25:bf:64:0f:76:32:9d:dc:13:7d:
5c:f8:1f:ea:8a:55:2f:f5:03:e8:f5:30:da:8a:b3:
5f:ce:7e:5b:d4:e9:71:87:4e:5d:d7:bf:8c:1e:2f:
52:fc:db:cd:0a:c7:53:61:40:14:3f:3a:e2:c9:0c:
42:fe:03:28:f5:e0:d1:04:e2:30:ef:ab:84:02:c2:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7A:42:8C:89:CC:AE:7C:64:98:29:06:D9:8C:C3:C2:A2:86:06:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76722922-8dfa-382f-b93a-d1e0d108669f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:5e:93:55:f9:3c:e9:6c:75:90:42:5f:54:0a:8d:d7:9f:8f:
62:f4:e1:06:22:10:83:3a:eb:8c:0b:27:fe:30:2b:95:15:fd:
0a:31:63:6e:8d:8f:da:35:66:c8:14:75:33:4a:e9:b1:0c:d6:
1c:49:b5:ec:22:87:85:e8:33:aa:eb:a1:64:5f:58:c2:6d:d0:
e6:ee:29:2c:d7:0b:f0:bb:90:27:bc:d6:81:36:18:a7:a7:74:
31:44:f6:f1:36:18:c3:1f:5d:30:15:36:e5:98:ef:e0:63:0f:
46:97:de:a9:92:e7:40:12:8c:01:0e:81:54:22:d4:b7:84:8a:
c1:58:da:96:a4:db:fa:e6:2b:11:b5:0e:b2:5a:e8:07:5b:df:
55:cf:48:d4:18:1e:28:a5:7b:2e:1c:46:91:eb:e6:92:cb:57:
ba:db:34:24:f9:e7:53:2c:c3:e7:cd:52:cf:1d:1a:d3:ef:84:
2e:e0:ba:31:eb:b7:f7:cc:e8:73:b3:ef:5f:79:62:2d:53:95:
66:a2:ab:b8:d4:f2:1a:c9:05:27:28:19:3d:f7:91:32:1f:35:
5e:41:d3:64:e9:05:57:01:e6:a9:9d:34:27:5d:99:5e:14:13:
d5:42:0c:0c:67:1a:2e:01:be:98:fc:14:2a:d1:c1:c5:38:85:
57:06:6c:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQZPo78xRMwjohJaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMTIwNDAyMDAxNVoXDTI0MDMwMzAyMDAxNVowLzEtMCsGA1UEAxMk
ZWQyMmU2YzItMDc0Ny00ZGVjLThlZmEtNmZmY2EwY2E5MzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Poi0dn1q9BuyluYxJzM88OKPj8nRGlRMUDn
CifzVYyKhj3CF64REGuBNQEmQhjeipwBJnBqqCDXeVYmcyUq+wpwbJHDJKaAjZT7
+wTdLuJWzSiGIa6GB6iDdhIURcSWmMC8rQGAtDxDcofxrfkPS9quZSzXVK6h3aRE
RTqwCy64l95Ixu1RPW6IauYAdC6BwISeNouOpjlAkaKOCyilKZJDOgBB97CSC88m
Mr3iZYF56/1+dnyV4CW/ZA92Mp3cE31c+B/qilUv9QPo9TDairNfzn5b1Olxh05d
17+MHi9S/NvNCsdTYUAUPzriyQxC/gMo9eDRBOIw76uEAsIChwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ16QoyJzK58ZJgpBtmMw8KihgY4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzY3MjI5MjItOGRmYS0z
ODJmLWI5M2EtZDFlMGQxMDg2NjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD6cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1ek1X5POlsdZBCX1QKjdefj2L04QYiEIM664wLJ/4wK5UV/QoxY26N
j9o1ZsgUdTNK6bEM1hxJtewih4XoM6rroWRfWMJt0ObuKSzXC/C7kCe81oE2GKen
dDFE9vE2GMMfXTAVNuWY7+BjD0aX3qmS50ASjAEOgVQi1LeEisFY2pak2/rmKxG1
DrJa6Adb31XPSNQYHiiley4cRpHr5pLLV7rbNCT551Msw+fNUs8dGtPvhC7gujHr
t/fM6HOz7195Yi1TlWaiq7jU8hrJBScoGT33kTIfNV5B02TpBVcB5qmdNCddmV4U
E9VCDAxnGi4Bvpj8FCrRwcU4hVcGbOQ=
-----END CERTIFICATE-----
Generated at Thu May 8 16:45:48 2025 by rpki-client