Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f/4f6434f9-e216-331a-823d-4c723c813d4f.roa
File: 4f6434f9-e216-331a-823d-4c723c813d4f.roa (raw, json)
Hash identifier: c82RUSQdS+UN/IVs/7ZOz+lEEtlReLslmPKu9DOw6ag=
Subject key identifier: 70:C7:CD:75:91:28:28:2E:60:FF:2F:B7:80:9C:A3:70:DB:C6:ED:EA
Certificate issuer: /CN=0eab06c6-217d-4d40-bf9c-9d1445ba8f3f
Certificate serial: 010D0C9F4328576D51CC73C042CFC169BBDB00A9
Authority key identifier: 5C:5B:BD:6A:74:85:2E:38:9F:5F:D9:36:69:AE:A9:19:78:44:51:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f/4f6434f9-e216-331a-823d-4c723c813d4f.roa
Signing time: Tue 26 Mar 2019 21:14:45 +0000
ROA not before: Tue 26 Mar 2019 04:00:00 +0000
ROA not after: Mon 26 Mar 2029 04:00:00 +0000
asID: 6465
IP address blocks: 204.10.72.0/22 maxlen: 24
2600:7f00::/28 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:69:bb:db:00:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eab06c6-217d-4d40-bf9c-9d1445ba8f3f
Validity
Not Before: Mar 26 04:00:00 2019 GMT
Not After : Mar 26 04:00:00 2029 GMT
Subject: CN=2f7bb278-2640-400d-8c15-047498fd6a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:1d:e3:08:b2:54:cd:eb:48:2d:89:1c:dd:
b0:ec:25:b4:e7:5f:8c:70:03:e3:4a:1f:53:f9:30:
f2:8b:86:53:7f:4b:ce:83:b5:8f:49:6d:41:e1:3b:
09:f3:00:52:9d:83:83:6c:9c:a4:27:e3:c5:85:77:
d5:1d:aa:b2:c3:d6:ad:7d:7f:a7:e4:19:ca:58:b2:
d0:dd:67:60:93:9b:c2:a6:49:ee:10:8d:9d:a8:54:
9f:67:b2:60:f5:69:a4:aa:a2:f3:4b:1f:d5:56:4f:
b9:c8:29:3d:87:29:fe:28:d0:d1:93:6c:92:29:43:
60:ed:d3:0d:c7:9f:56:3f:72:aa:76:b7:25:b6:17:
af:ab:d4:2e:c4:bf:39:d1:32:6b:0f:e0:ac:42:fc:
94:ba:39:22:52:03:ff:37:2f:65:2a:47:55:83:08:
cf:38:ba:d6:64:b8:8e:46:09:6e:9d:06:df:af:94:
03:6f:36:fa:95:17:e5:1d:fe:a5:69:62:4e:14:ab:
42:2b:1e:84:7d:f1:d6:8a:67:fc:28:3c:97:fb:1e:
69:fb:5c:d0:dd:6f:8c:a8:a5:18:b5:5d:82:e2:33:
65:b7:bf:87:0e:74:9c:27:cb:04:93:6c:70:6a:99:
2a:0c:ab:d6:0b:50:4a:bb:8b:f4:69:a3:d6:ef:a4:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C7:CD:75:91:28:28:2E:60:FF:2F:B7:80:9C:A3:70:DB:C6:ED:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f/4f6434f9-e216-331a-823d-4c723c813d4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f.crl
X509v3 Authority Key Identifier:
keyid:5C:5B:BD:6A:74:85:2E:38:9F:5F:D9:36:69:AE:A9:19:78:44:51:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eab06c6-217d-4d40-bf9c-9d1445ba8f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.10.72.0/22
IPv6:
2600:7f00::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:39:fc:74:f3:58:35:b2:9d:38:80:e0:30:22:0f:0f:5f:bc:
9b:8e:2a:19:38:02:2c:9f:40:dd:3f:3c:1f:91:be:c5:4a:47:
6c:8e:f9:3b:a8:53:4e:d6:5a:55:75:a6:d8:7f:b6:db:6f:08:
82:f2:fb:b7:e6:6b:1a:9f:03:40:26:aa:08:63:b7:0a:e0:de:
bc:94:ab:29:bd:e1:23:d9:c0:da:ad:4a:73:e9:e3:5f:b6:05:
06:2c:36:81:9a:46:16:58:5e:b3:81:e3:ae:96:a8:4d:92:e7:
64:04:76:13:10:be:ca:ae:9d:34:75:9d:24:87:21:df:98:66:
ee:01:67:91:8c:d8:8c:e0:43:ff:e4:c7:01:ab:bd:64:b2:63:
58:41:6d:65:f5:4b:ba:cb:db:ea:79:e3:2e:6b:71:4b:43:87:
7c:c4:8d:77:3c:a2:cd:a7:e0:a0:2c:24:45:10:9f:e9:bb:c0:
71:08:0a:8c:45:45:6b:ee:ba:8f:a3:16:f3:4e:e0:e6:af:ad:
e8:43:f1:70:da:c5:50:92:0b:35:31:5b:28:98:2e:19:6b:55:
ed:d4:62:33:83:6b:4c:d2:59:82:21:12:52:a1:82:3a:14:f2:
38:2e:e5:f9:5d:e4:8f:5c:78:d2:c8:55:8d:32:f9:fa:ef:2a:
67:a1:3c:57
-----BEGIN CERTIFICATE-----
MIIGTjCCBTigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BabvbAKkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDBlYWIwNmM2LTIxN2QtNGQ0MC1iZjljLTlkMTQ0NWJhOGYz
ZjAeFw0xOTAzMjYwNDAwMDBaFw0yOTAzMjYwNDAwMDBaMC8xLTArBgNVBAMTJDJm
N2JiMjc4LTI2NDAtNDAwZC04YzE1LTA0NzQ5OGZkNmE4NDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMODHeMIslTN60gtiRzdsOwltOdfjHAD40ofU/kw
8ouGU39LzoO1j0ltQeE7CfMAUp2Dg2ycpCfjxYV31R2qssPWrX1/p+QZyliy0N1n
YJObwqZJ7hCNnahUn2eyYPVppKqi80sf1VZPucgpPYcp/ijQ0ZNskilDYO3TDcef
Vj9yqna3JbYXr6vULsS/OdEyaw/grEL8lLo5IlID/zcvZSpHVYMIzzi61mS4jkYJ
bp0G36+UA282+pUX5R3+pWliThSrQisehH3x1opn/Cg8l/seaftc0N1vjKilGLVd
guIzZbe/hw50nCfLBJNscGqZKgyr1gtQSruL9Gmj1u+kGuMCAwEAAaOCA2QwggNg
MB0GA1UdDgQWBBRwx811kSgoLmD/L7eAnKNw28bt6jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGVhYjA2
YzYtMjE3ZC00ZDQwLWJmOWMtOWQxNDQ1YmE4ZjNmLzRmNjQzNGY5LWUyMTYtMzMx
YS04MjNkLTRjNzIzYzgxM2Q0Zi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzBlYWIwNmM2LTIxN2QtNGQ0MC1iZjlj
LTlkMTQ0NWJhOGYzZi8wZWFiMDZjNi0yMTdkLTRkNDAtYmY5Yy05ZDE0NDViYThm
M2YuY3JsMB8GA1UdIwQYMBaAFFxbvWp0hS44n1/ZNmmuqRl4RFF5MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMGVhYjA2YzYtMjE3ZC00ZDQwLWJmOWMtOWQxNDQ1
YmE4ZjNmLmNlcjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAswKSDANBAIA
AjAHAwUEJgB/ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MAsGCSqGSIb3DQEBCwOCAQEASDn8dPNYNbKdOIDgMCIPD1+8m44qGTgCLJ9A3T88
H5G+xUpHbI75O6hTTtZaVXWm2H+2228IgvL7t+ZrGp8DQCaqCGO3CuDevJSrKb3h
I9nA2q1Kc+njX7YFBiw2gZpGFlhes4HjrpaoTZLnZAR2ExC+yq6dNHWdJIch35hm
7gFnkYzYjOBD/+THAau9ZLJjWEFtZfVLusvb6nnjLmtxS0OHfMSNdzyizafgoCwk
RRCf6bvAcQgKjEVFa+66j6MW807g5q+t6EPxcNrFUJILNTFbKJguGWtV7dRiM4Nr
TNJZgiESUqGCOhTyOC7l+V3kj1x40shVjTL5+u8qZ6E8Vw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:28:57 2025 by rpki-client