Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa137657-7d82-34eb-bdeb-e68b30937b8d.roa
File: aa137657-7d82-34eb-bdeb-e68b30937b8d.roa (raw, json)
Hash identifier: 3c1q78TEVXmPxYtuN/pQkCMvhyu3ddwATv5LJWpdHqU=
Subject key identifier: 15:CA:CF:0D:FC:46:80:9F:0E:B9:DF:3D:D2:08:5D:EF:70:DE:38:88
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648E9EC360EC08C65DD65000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa137657-7d82-34eb-bdeb-e68b30937b8d.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 54288
IP address blocks: 72.52.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:9e:c3:60:ec:08:c6:5d:d6:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=bb479871-4ff5-4eda-9589-90ee546dc5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:55:0e:0a:c0:69:4f:b3:09:ee:a5:af:03:8d:
bb:35:ec:f4:dd:ad:5a:d0:44:2d:12:98:5a:71:57:
9b:99:71:d5:de:7a:a3:7c:f4:fe:e3:f7:8e:6e:26:
49:04:fb:62:11:87:d1:1f:88:e2:03:0d:75:02:f4:
38:19:85:20:44:69:25:8f:1f:c6:18:0e:cc:17:1c:
53:0f:2d:ca:6a:4d:4f:77:81:e6:25:13:6e:9b:e2:
09:34:fb:db:53:1b:47:1f:fc:a4:f5:16:32:2d:ea:
02:b6:23:a0:82:88:20:d8:f2:31:28:a7:ea:54:87:
c4:10:14:04:16:04:3c:52:59:3e:31:4b:1c:90:5e:
6c:12:f3:02:af:7a:ef:8e:c1:1b:6a:0a:4d:07:a4:
aa:93:4c:23:82:33:cb:4f:d6:d1:da:07:e1:1f:0c:
07:2a:da:48:d1:71:e1:56:fc:93:59:ce:f6:30:fc:
90:6e:05:fc:01:6c:eb:46:4f:27:4d:81:ed:a4:fc:
b8:68:24:e9:59:59:39:55:4e:46:5c:8c:96:5a:d5:
97:fc:2e:82:8e:2a:ce:ec:29:40:4b:fc:91:b8:60:
60:f1:09:5e:91:5d:6c:77:22:2e:e8:e7:20:4d:ec:
67:3d:0e:07:9c:5a:20:b0:66:8b:8c:cc:d5:db:cb:
89:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CA:CF:0D:FC:46:80:9F:0E:B9:DF:3D:D2:08:5D:EF:70:DE:38:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa137657-7d82-34eb-bdeb-e68b30937b8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
72.52.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:7b:98:08:5e:ae:ef:ac:69:52:cd:af:cd:aa:9c:10:fc:2a:
d6:52:0a:74:67:1a:c5:c6:b6:6d:a2:f8:26:14:24:e0:26:71:
48:9d:49:21:1e:0e:f9:91:d1:bd:3f:3a:db:52:0d:ff:68:8c:
77:0f:4e:8f:91:0e:77:6a:5e:df:f0:6d:95:73:de:62:d7:fc:
b5:eb:fa:77:33:10:6a:61:5a:1e:6e:cb:e0:8e:1f:25:6e:9e:
1d:20:7c:a6:b0:a3:32:79:48:ce:a4:7d:5b:09:4e:9b:ce:34:
89:e3:b1:70:a3:fd:52:fd:32:5b:8f:af:d4:9e:df:8a:1c:17:
7c:8c:b8:da:eb:01:44:a3:3a:e6:12:bb:a7:70:24:60:16:c5:
ad:96:c2:d3:3e:95:09:43:0d:f7:f8:15:8f:4f:a3:b5:19:98:
6d:05:ec:3c:01:a5:41:5c:3f:e8:8e:a6:a5:84:a8:f5:7e:08:
10:18:ac:43:0a:6b:ca:37:8b:87:a8:1f:92:f3:a9:7a:8d:35:
8a:b7:78:23:fe:d0:10:5e:bd:1f:8d:a0:a4:c6:2a:2f:86:27:
2d:9f:6a:41:6e:25:ff:97:41:bf:eb:3e:d7:2e:ef:82:80:5f:
34:33:ec:c6:ca:50:f9:90:02:92:0c:57:b2:35:26:d9:0c:f2:
78:da:b5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:43:22 2025 by rpki-client