Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1009d954-c76a-319f-a2e2-f915edf832c0.roa
File: 1009d954-c76a-319f-a2e2-f915edf832c0.roa (raw, json)
Hash identifier: 4Xe8V1cnUvvXErRNVLYLbmW3nIGugkcbkQCtgPCiZ1Y=
Subject key identifier: 86:54:E3:40:03:7D:3F:A0:54:C4:A1:17:A3:25:28:CE:19:3C:90:73
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D79365B4EF5DDE0AA39459C08
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1009d954-c76a-319f-a2e2-f915edf832c0.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 54288
IP address blocks: 66.220.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:36:5b:4e:f5:dd:e0:aa:39:45:9c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=4c5f9e56-e1f6-43d6-a930-1a02ae774a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:bb:0d:53:a7:32:05:0e:90:02:2d:1e:31:
3b:2c:9d:77:13:f2:1e:f9:98:d4:e0:c2:7a:34:7f:
d2:8b:da:3f:36:58:a9:86:61:2f:9f:23:52:1c:69:
6f:99:50:22:86:09:1b:c1:81:d8:b8:02:1f:8d:36:
71:6d:76:86:b3:1e:f1:d7:3f:80:84:0a:07:db:dc:
4b:18:e9:85:0a:e5:a0:a4:d8:f7:24:95:e3:46:5f:
42:05:4f:ea:18:27:e3:c8:cb:20:ac:9d:2a:8e:63:
5e:d2:b6:c5:d6:6e:5f:65:2c:15:53:23:20:bb:4a:
3a:f7:e7:ff:f9:cc:ac:22:2c:71:10:59:1c:90:c0:
19:e5:21:4d:be:45:24:f1:45:4d:26:d3:c3:a8:f2:
ff:8a:5e:52:4d:0c:a1:8e:d1:30:b0:f4:e7:62:56:
be:03:4a:8e:89:87:83:24:82:de:61:03:7e:8c:fe:
21:75:8f:79:5c:7e:88:93:ce:99:bf:20:ae:a1:a5:
5e:bb:ae:02:ff:9c:03:8c:9a:e2:44:03:fa:db:6e:
6f:78:67:02:51:c8:04:3d:db:df:76:61:e7:9f:ae:
ec:bc:19:ec:a0:65:ea:31:11:37:f2:92:4c:44:a7:
43:a0:94:83:b8:b8:70:67:d8:f4:84:e1:3e:42:52:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:54:E3:40:03:7D:3F:A0:54:C4:A1:17:A3:25:28:CE:19:3C:90:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1009d954-c76a-319f-a2e2-f915edf832c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.220.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:c6:af:e4:b2:b6:f7:46:10:bc:e7:6b:05:6b:6e:1c:5a:4c:
10:9f:2f:92:b1:1c:bb:82:8b:6c:a6:5a:92:77:af:8f:83:1c:
ed:e8:7d:50:18:c9:9b:62:45:5e:4d:43:74:40:0a:b4:41:bb:
78:06:59:1d:02:95:6d:60:de:bf:08:7b:57:1c:af:dd:11:70:
02:d5:31:86:a7:85:7a:d9:e5:5d:ef:9a:13:b8:d2:20:c4:6f:
1d:5b:04:c7:69:bd:3a:cb:e2:bc:21:7e:28:fd:9c:40:dd:a0:
28:b6:8d:53:0c:e3:4c:09:7f:da:70:d6:f0:df:10:a7:e0:ca:
30:5b:2e:66:61:7a:24:51:69:dc:4c:3d:87:9e:4b:ff:a1:b8:
b9:6f:0d:2b:bd:26:eb:30:83:e5:a6:a8:a1:ab:74:e3:dd:7c:
22:29:e0:b2:88:03:e8:6f:5f:cf:4a:91:c6:b0:73:d5:b7:5c:
38:5c:08:1c:40:37:e3:6f:89:3a:6a:4d:81:b9:3f:f7:d1:76:
7e:2d:b8:27:ae:ae:2f:be:21:19:6c:91:98:fd:67:70:e3:b7:
f5:35:6f:59:ba:fa:28:1d:8f:7a:08:4c:81:cf:72:d8:7a:1e:
25:eb:c8:88:ba:07:bd:92:3f:59:6a:69:d4:0a:53:0f:49:c2:
84:e4:82:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:31:08 2025 by rpki-client