Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20db1d25-075e-30b5-a878-df3cf8b7ef8d.roa
File: 20db1d25-075e-30b5-a878-df3cf8b7ef8d.roa (raw, json)
Hash identifier: oKe48ZoAthDz/WD+Sy48SW9WtgHPQbwTkOsHAL8/sSA=
Subject key identifier: CD:49:02:3B:3E:EB:E8:FB:30:E9:7D:37:DA:B3:A3:E6:86:0A:AF:FD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583C83A69A6C0051C42F46A55C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20db1d25-075e-30b5-a878-df3cf8b7ef8d.roa
Signing time: Fri 07 Jan 2022 05:00:00 +0000
ROA not before: Fri 07 Jan 2022 05:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 63186
IP address blocks: 216.66.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:83:a6:9a:6c:00:51:c4:2f:46:a5:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 7 05:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=79a07720-aaa6-4c32-a444-bbd702b3108c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:88:77:d6:1d:1a:e0:80:c5:f4:67:58:a5:8c:
24:41:1d:10:fc:61:aa:53:d9:79:41:6e:78:c9:88:
f6:76:08:37:eb:d0:76:49:99:c6:9b:4a:f6:2d:3b:
70:aa:7f:c5:50:c3:5a:e2:a7:24:00:be:c4:ca:9b:
87:3b:a7:2e:ed:54:d2:61:27:2f:1a:d3:72:ac:1a:
63:a7:b0:f6:eb:82:d9:72:af:ce:da:7d:83:d4:65:
2f:32:bb:6b:36:48:3c:12:ab:b3:53:9b:55:24:d1:
17:83:a7:43:07:f1:3c:48:44:94:fc:2e:bf:84:25:
ad:aa:b6:05:0a:d5:c9:3e:af:62:de:81:60:83:d3:
e6:38:25:eb:2c:38:db:46:49:54:25:a7:fc:1d:3b:
61:7e:3c:bb:f9:4b:63:50:e2:59:f5:2f:71:1f:d6:
f8:78:59:ec:e2:d0:41:60:55:00:a6:fb:10:f9:70:
f3:40:bf:9b:38:45:8f:c7:62:75:97:bd:99:7a:a3:
6b:c7:5b:73:bd:87:b7:0a:a9:9d:13:ed:95:f9:da:
06:0e:63:b2:ff:b3:52:89:55:64:15:d1:f3:ae:4a:
0e:4d:ce:3d:c9:46:aa:35:d1:01:9e:53:d4:24:1f:
45:75:a0:9c:6a:1b:f8:8b:e7:3b:41:55:2a:19:69:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:02:3B:3E:EB:E8:FB:30:E9:7D:37:DA:B3:A3:E6:86:0A:AF:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20db1d25-075e-30b5-a878-df3cf8b7ef8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:70:63:92:b3:50:79:4d:f0:15:d8:52:dc:9b:25:57:93:77:
83:52:e0:9f:ce:79:a7:df:24:4e:f9:66:19:be:13:03:bf:22:
90:c1:25:48:e3:be:42:60:54:9e:fb:d7:29:1a:6c:bc:9d:7f:
e5:0f:10:da:33:a2:3d:2c:2e:ec:b3:0b:1d:6d:8b:78:b4:4a:
6b:f6:fa:ae:20:43:50:3b:f9:1b:5a:5e:71:c0:a0:e5:14:88:
95:f9:53:1a:9b:06:d4:73:46:f7:0e:fc:2a:b3:b9:65:91:d0:
79:30:56:db:11:2f:c7:15:79:52:f3:27:91:97:ba:76:12:e0:
36:15:55:49:d6:ed:f4:4c:a7:2c:95:03:aa:9c:3a:22:99:a3:
e6:a7:ce:e5:5a:25:53:4e:97:a3:a5:15:03:ec:74:f4:19:4e:
17:d4:5c:68:c0:e9:ff:40:a2:93:84:e6:25:10:4c:56:ac:54:
65:56:29:32:83:4e:51:26:8a:53:85:a1:15:50:99:ef:be:d9:
d8:9a:4d:40:3a:f1:a6:4b:31:9d:74:1d:af:1e:42:25:ec:f2:
46:3c:a7:65:2b:cc:3b:a9:d4:02:8f:ab:a9:f6:fa:5f:fd:db:
12:66:a0:a7:91:ae:97:6b:3a:88:0f:78:74:0c:9e:e4:ce:d2:
48:b2:4a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:35:25 2025 by rpki-client