Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a1ad87-c8c5-3d78-a9db-96dbfc451073.roa
File: 23a1ad87-c8c5-3d78-a9db-96dbfc451073.roa (raw, json)
Hash identifier: E8BBXCAhkhxiisA1kMblN+nu4wOXcU+NarxPPXDw9Gs=
Subject key identifier: 92:A1:63:2C:F0:2B:90:88:CF:28:B8:5B:01:05:93:8C:32:13:24:C9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D793641AAB54E4AAF37B87900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a1ad87-c8c5-3d78-a9db-96dbfc451073.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 46278
IP address blocks: 65.49.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:36:41:aa:b5:4e:4a:af:37:b8:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=6b20d185-c16a-4d8d-aa8c-fbcac9e73d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6d:14:80:07:d5:fa:9b:6a:3e:05:54:a4:0c:
59:55:8c:82:41:55:1e:31:c3:84:76:b2:75:ae:45:
83:89:9b:ca:fe:a3:ce:0c:07:1b:2a:83:e3:24:f5:
d1:a6:e6:a6:7d:d0:f3:b1:0f:89:f6:3e:16:34:aa:
16:73:3d:56:d0:b7:57:43:bf:da:f1:30:db:35:27:
62:c8:76:34:a9:3c:c9:ee:dd:ae:aa:e5:ac:04:77:
37:5e:42:24:21:d7:10:54:97:c3:d5:d1:dd:f0:70:
9b:7d:aa:05:6c:21:35:85:d1:60:86:fb:2e:15:0d:
8d:e1:17:41:a7:36:ed:e2:05:1d:c8:21:41:e1:8c:
11:35:93:4a:3e:7e:5c:d5:12:cc:95:c1:e8:64:94:
7e:d9:d0:92:c1:d8:64:e0:ad:bc:1b:73:5f:fc:f8:
56:d9:d1:be:62:7f:ae:a4:b7:8f:77:6a:4e:f8:2d:
cc:ed:af:e9:97:43:19:ee:0b:26:9e:33:af:b7:1e:
b0:0d:48:ef:6c:93:0c:e0:7a:1a:85:6e:76:49:19:
3e:9a:99:48:c6:de:8e:7c:c5:19:ca:e6:93:06:07:
79:29:11:d5:05:6e:dc:4d:b4:68:24:d4:dc:e3:ae:
b1:b3:d3:9c:97:94:ac:60:6e:06:28:61:03:84:d0:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A1:63:2C:F0:2B:90:88:CF:28:B8:5B:01:05:93:8C:32:13:24:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a1ad87-c8c5-3d78-a9db-96dbfc451073.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:f7:3a:d6:4e:84:f6:f6:4b:7f:dd:3d:d8:6f:17:fc:01:7f:
51:ee:40:95:33:9a:a0:b3:11:3a:98:28:a5:fc:1b:9f:9a:8c:
a0:c9:a5:55:79:7b:ac:fd:0b:31:50:71:53:5c:eb:72:3b:e6:
3c:94:39:7f:a8:ff:69:0f:75:a1:40:b9:7d:4b:83:17:5f:40:
48:a2:ec:3c:cb:d5:a8:ef:a8:fa:56:af:f6:df:5a:6e:a4:af:
c3:0a:e6:f3:ca:9c:2d:12:16:6f:1e:1c:98:90:36:c3:17:b9:
85:23:f5:3e:e4:b6:22:da:94:b1:4b:13:dd:67:85:83:51:38:
a5:2b:ac:e4:b8:ef:06:bf:41:ea:48:e8:a0:30:07:7d:7d:3a:
48:e3:04:42:d2:0f:8a:80:87:37:3e:84:86:3d:68:ab:4f:ab:
e0:8a:4c:20:b7:4d:1c:77:a0:eb:65:97:ab:21:bd:25:c6:77:
23:ea:6d:b7:5e:bb:bd:6c:e3:2b:64:7f:27:39:ce:ed:af:b2:
1a:15:c8:87:af:ef:0c:fc:0c:e1:98:f9:d6:0e:0a:bc:02:c7:
5d:ee:97:3e:35:99:1f:29:60:2f:20:eb:dc:d8:7b:aa:bb:15:
32:00:2c:6b:6c:53:0c:eb:b4:1f:75:7e:a6:56:ed:5d:f1:88:
c8:d6:ec:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:57:31 2025 by rpki-client