Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2020b47c-15b6-363d-943e-8cbd7ef75cd2.roa
File: 2020b47c-15b6-363d-943e-8cbd7ef75cd2.roa (raw, json)
Hash identifier: 6F7iT/D3zLa3H75KMEATHNA8xtg083A8YaQeSvq1S64=
Subject key identifier: 8C:67:0C:15:B2:27:3E:D3:E0:3C:11:A2:BA:4E:D5:5E:9E:7F:A2:59
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858455332F4E27545DCE5BEFB8880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2020b47c-15b6-363d-943e-8cbd7ef75cd2.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 72.16.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:32:f4:e2:75:45:dc:e5:be:fb:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=396d524f-f1af-4f70-b0cd-931807c53eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dd:77:e8:5b:fe:77:d8:e9:e2:ea:69:bc:c0:
3f:5b:9d:1a:42:05:85:c3:05:75:fa:7d:9c:3d:6b:
2e:a8:12:ad:ea:53:88:72:f0:29:56:64:70:2a:80:
be:9a:d4:76:21:e5:16:8c:57:69:fe:ae:a8:61:37:
a7:2f:32:98:e1:aa:c3:71:05:08:6d:6e:79:f0:3f:
83:00:63:0e:22:3e:a5:12:c3:2a:73:10:cb:6a:4d:
e0:1e:35:53:0a:39:d1:c4:90:a0:ef:ab:c9:47:3c:
c4:ea:88:04:c8:cf:b0:ad:20:5d:f7:f8:27:5f:da:
6d:3b:a1:7c:89:24:00:7d:ab:5a:2a:53:fe:c8:0a:
54:0a:97:68:50:c7:b2:82:20:2d:58:1c:16:35:bb:
cc:b2:75:4c:29:36:c7:d9:a6:24:fe:c7:e8:ec:0b:
9f:d8:07:f1:52:93:38:87:a8:c5:eb:2b:b5:0d:c3:
c9:84:5d:5c:98:d4:ac:13:71:04:94:8d:ea:15:38:
42:42:8d:e3:49:cb:ea:d4:0c:1c:03:bc:64:6c:6b:
1e:3b:d8:5a:19:51:4e:a6:60:e5:81:86:f6:54:c5:
59:67:de:cd:84:75:a8:ff:ac:f4:92:b0:37:b4:50:
22:f5:34:47:45:9d:e6:ce:01:f3:1e:7a:b0:28:3a:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:67:0C:15:B2:27:3E:D3:E0:3C:11:A2:BA:4E:D5:5E:9E:7F:A2:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2020b47c-15b6-363d-943e-8cbd7ef75cd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.16.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:21:52:25:e1:6f:88:c4:25:aa:1d:97:77:d1:5c:d3:b5:fa:
05:d6:6e:9c:e1:e7:15:e5:d8:65:64:59:9e:8d:41:8c:7c:85:
69:6b:a3:32:75:a6:0c:f6:6b:82:00:c0:27:86:fa:ca:2b:9d:
95:1d:f6:51:6a:43:95:b3:70:68:37:b1:3f:c4:da:45:6d:9c:
6a:26:af:08:c3:0e:26:85:99:d7:f8:30:76:5b:e4:fd:a6:b0:
a6:b1:7a:19:8d:8b:e7:35:09:46:40:3d:84:b4:66:b5:d0:e7:
f5:33:32:c4:72:fc:fd:31:eb:ea:be:af:9e:6a:e3:c9:f7:9a:
51:22:d0:3c:b4:7e:47:3f:40:ab:01:51:e7:ac:71:31:e9:29:
01:c8:8c:fa:56:47:56:da:7e:f1:50:5f:6f:66:41:ec:dc:81:
bc:c3:0f:11:2a:a9:3c:6f:48:1d:5a:4f:9b:d1:e0:c0:b4:d0:
4f:a3:e1:8e:67:3b:00:65:da:61:ed:73:d9:04:d1:e2:21:9e:
72:12:e2:30:ce:ca:aa:42:6f:16:f5:11:5a:e1:f3:65:cf:1e:
0c:69:6f:88:69:35:5b:0f:44:a7:3f:b3:50:3d:76:42:1e:14:
54:44:5c:23:c8:68:cf:72:08:69:f0:13:d8:26:30:54:89:67:
41:b0:a1:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMvTidUXc5b77iIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk
Mzk2ZDUyNGYtZjFhZi00ZjcwLWIwY2QtOTMxODA3YzUzZWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN136Fv+d9jp4uppvMA/W50aQgWFwwV1+n2c
PWsuqBKt6lOIcvApVmRwKoC+mtR2IeUWjFdp/q6oYTenLzKY4arDcQUIbW558D+D
AGMOIj6lEsMqcxDLak3gHjVTCjnRxJCg76vJRzzE6ogEyM+wrSBd9/gnX9ptO6F8
iSQAfataKlP+yApUCpdoUMeygiAtWBwWNbvMsnVMKTbH2aYk/sfo7Auf2AfxUpM4
h6jF6yu1DcPJhF1cmNSsE3EElI3qFThCQo3jScvq1AwcA7xkbGseO9haGVFOpmDl
gYb2VMVZZ97NhHWo/6z0krA3tFAi9TRHRZ3mzgHzHnqwKDqE6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIxnDBWyJz7T4DwRorpO1V6ef6JZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjAyMGI0N2MtMTViNi0z
NjNkLTk0M2UtOGNiZDdlZjc1Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEhUiXhb4jEJaodl3fRXNO1+gXWbpzh5xXl2GVkWZ6NQYx8hWlrozJ1
pgz2a4IAwCeG+sornZUd9lFqQ5WzcGg3sT/E2kVtnGomrwjDDiaFmdf4MHZb5P2m
sKaxehmNi+c1CUZAPYS0ZrXQ5/UzMsRy/P0x6+q+r55q48n3mlEi0Dy0fkc/QKsB
UeescTHpKQHIjPpWR1bafvFQX29mQezcgbzDDxEqqTxvSB1aT5vR4MC00E+j4Y5n
OwBl2mHtc9kE0eIhnnIS4jDOyqpCbxb1EVrh82XPHgxpb4hpNVsPRKc/s1A9dkIe
FFREXCPIaM9yCGnwE9gmMFSJZ0GwobE=
-----END CERTIFICATE-----
Generated at Tue Apr 15 23:15:44 2025 by rpki-client