Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cfd307c0-2049-3732-b51b-0ad8bd2337b0.roa
File: cfd307c0-2049-3732-b51b-0ad8bd2337b0.roa (raw, json)
Hash identifier: lFPZ9ood6WJA+hx54FHphz+bjHLw9SuSHmt+s0DwEKg=
Subject key identifier: 0D:E9:62:BF:49:6B:7C:25:A7:1D:66:62:05:65:3B:86:A9:0E:4D:D6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648E985473B6971F494F47D0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cfd307c0-2049-3732-b51b-0ad8bd2337b0.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 54288
IP address blocks: 66.220.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:98:54:73:b6:97:1f:49:4f:47:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=b93eb827-d6a1-49d8-b010-b773acdbe6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4e:1e:15:9b:1d:85:68:1d:b8:6d:58:53:d2:
85:3d:89:62:50:40:5d:44:13:f8:8c:72:30:04:2e:
70:c6:74:44:13:a2:49:9c:b6:3d:e1:8d:61:36:61:
35:65:ac:f5:27:66:23:7f:b1:e1:4a:08:87:35:2d:
b8:ba:50:d1:a4:c7:23:53:98:4f:ad:6c:6c:4f:7c:
31:76:ec:56:13:f9:6b:80:3e:64:e2:25:17:79:64:
85:e7:7d:6a:0d:03:4d:3c:34:56:9a:42:0c:bf:b2:
09:f4:ee:50:ab:de:d9:17:7d:1a:fe:b6:59:46:bd:
b1:a8:d3:ac:33:ea:32:68:6b:97:8b:91:9c:4c:49:
3f:73:75:0e:de:e5:9d:ac:11:34:5f:fd:ac:0f:68:
39:6c:af:14:2b:fc:50:7b:c9:31:cd:ea:60:e0:f8:
28:ae:57:82:76:38:3e:45:f8:58:88:9d:d9:ac:9c:
2f:97:f5:4e:ce:c6:95:4d:a6:96:0b:b0:bf:bb:b1:
28:4f:c9:02:7b:d8:23:1b:64:93:bf:9e:f0:22:83:
7b:f8:b1:2d:aa:a9:8f:0d:63:78:76:7f:89:87:62:
90:2c:ca:b6:0b:15:63:2d:34:ab:08:7e:9e:b8:c2:
32:12:c2:d0:c3:a6:07:08:6e:19:d9:be:d7:d2:22:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E9:62:BF:49:6B:7C:25:A7:1D:66:62:05:65:3B:86:A9:0E:4D:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cfd307c0-2049-3732-b51b-0ad8bd2337b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.220.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:3f:11:ce:e6:6d:a9:dc:69:6a:73:88:68:9d:5b:42:bb:60:
bf:40:6c:9b:da:74:c7:6e:be:99:d5:6f:0f:be:18:4c:e4:38:
f0:b3:11:ad:c2:b8:5d:41:08:0e:47:e1:1c:36:1f:12:18:3e:
25:50:78:48:92:9a:71:e4:49:c0:38:97:a4:93:0b:f2:e6:a9:
f4:76:15:76:56:bb:c3:35:86:08:9f:9b:df:bb:39:34:32:0e:
b4:5b:7f:04:6e:88:02:a9:fc:85:81:d2:f2:3b:43:9b:09:81:
33:6b:c0:4a:23:11:38:d4:fc:8b:2a:1c:b3:60:c6:dc:5e:c7:
3e:42:af:13:6e:6b:cb:7c:24:78:f3:b8:37:2d:f2:0d:05:0f:
1a:9c:d1:25:32:13:a2:07:94:ce:f4:ea:7f:8a:f6:7f:12:0f:
34:9b:e9:28:e8:99:b7:e2:7d:b6:c2:83:46:fb:1c:00:8f:e6:
31:b2:fd:18:08:31:a9:2f:e8:00:16:cc:3d:d7:de:c9:8f:a9:
d8:66:ae:c3:2e:ee:24:f1:62:3d:4b:83:68:ac:f4:88:6b:dd:
1e:3f:6b:56:d2:22:94:c9:f0:3d:1b:ab:e5:02:cf:d6:b9:f2:
10:e6:85:2b:5e:c5:44:c8:81:9b:01:02:1b:4d:35:3d:94:48:
ff:7b:d5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:12:30 2025 by rpki-client