![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/da86012d-44d3-367e-89c0-d438ab5de59a.roa
File: da86012d-44d3-367e-89c0-d438ab5de59a.roa (raw, json)
Hash identifier: M9ERNWXxZo+QKv0o2/8ZhFfTTdr880GnLyhnCE7LxjQ=
Subject key identifier: DE:31:53:91:0D:C5:B9:F1:04:C0:FC:8C:54:59:84:4E:A1:A6:34:AE
Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial: 010D0C9F43285841E4477D9A803281D638B40980
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/da86012d-44d3-367e-89c0-d438ab5de59a.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Thu 10 Aug 2023 01:05:13 +0000
asID: 209043
IP address blocks: 65.110.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:47:7d:9a:80:32:81:d6:38:b4:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 10 01:05:13 2023 GMT
Subject: CN=2f58e094-1857-4c1a-abc5-3c361d8961f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:51:c2:c1:bf:03:90:a0:05:d7:0a:06:03:
22:66:fa:7d:60:be:fe:2e:ea:a4:74:b0:84:14:b4:
5a:a8:58:bb:f1:12:5d:51:74:cd:41:69:96:c3:9f:
51:83:e6:7c:ed:7c:2a:63:28:99:c6:03:ca:44:79:
b8:92:83:c1:73:b4:a6:95:d1:76:13:d2:70:41:25:
df:f7:e7:cb:f1:a7:13:18:18:ac:c8:1a:d2:5a:0b:
bc:53:17:36:00:f3:23:2e:78:fc:63:79:20:05:a2:
3e:69:24:d0:03:f8:a8:76:bd:5a:b6:b2:c3:05:57:
48:1b:82:56:c1:5a:dd:f1:b1:4f:6f:c7:83:d8:59:
5b:35:7e:32:d5:d1:b8:10:55:d8:0e:2f:07:94:9e:
a8:9d:7a:c5:ae:50:f1:03:00:35:4d:0f:98:15:72:
e7:17:95:c7:9d:c1:21:a1:84:16:41:b8:db:bc:22:
c6:d4:97:35:08:80:b0:88:70:14:45:10:7e:ca:63:
d2:34:5e:ac:97:70:a9:4f:dd:59:ce:a4:68:6f:38:
5c:6e:0b:ea:5d:4e:77:6a:ec:13:ac:7c:44:28:28:
78:cd:a1:be:1f:6e:c9:cd:45:12:92:0f:ee:cf:a2:
2a:7f:ec:11:4b:92:dd:e5:f5:f0:e4:a1:d9:3b:92:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:31:53:91:0D:C5:B9:F1:04:C0:FC:8C:54:59:84:4E:A1:A6:34:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/da86012d-44d3-367e-89c0-d438ab5de59a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
X509v3 Authority Key Identifier:
keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
sbgp-ipAddrBlock: critical
IPv4:
65.110.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c8:c3:33:c6:c3:05:ba:4c:fc:e8:76:74:96:43:ab:47:c1:
53:f2:5f:db:4c:c2:ed:1b:c5:8f:65:76:75:ce:77:77:fa:c3:
bf:82:f8:e7:fd:e8:df:6f:10:ef:66:81:f3:7f:7e:cc:df:8f:
cb:cd:1d:a2:f3:eb:d1:2f:84:6a:a1:29:47:1b:39:f9:80:9d:
14:f4:e3:e8:3c:8f:15:68:db:22:79:27:95:5f:3e:9b:6f:eb:
07:02:a2:c0:99:99:a0:02:94:72:67:24:9e:31:39:d1:84:66:
62:23:59:02:c4:da:ef:03:de:c4:ce:43:c1:b8:14:56:0c:2f:
c6:ad:bb:40:9a:dd:9c:40:82:69:c3:33:f5:4b:25:c1:68:05:
0a:b4:ea:d6:e6:f4:be:02:b0:51:cd:ed:3a:d3:e7:ae:20:30:
36:d2:7c:c2:61:bd:da:68:dd:ad:6d:13:7e:06:a5:a5:00:84:
20:54:ad:a8:97:51:12:8d:02:44:93:1f:a3:0b:c6:86:61:93:
3b:46:94:7c:1b:85:68:d1:1d:62:ab:fe:33:c6:69:88:0c:c5:
3b:3e:24:06:4b:93:d0:26:a0:ed:19:39:fc:5f:5c:88:bb:0b:
60:13:b2:f8:6c:0d:80:9d:2f:78:dd:77:41:a9:da:31:08:10:
56:e0:6f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:20 2025 by rpki-client