Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23ab322e-1abf-3bab-b0b5-5be95c98d8a4.roa
File: 23ab322e-1abf-3bab-b0b5-5be95c98d8a4.roa (raw, json)
Hash identifier: y0Ckmtrm+wpdGs/8xJNEXNLO9eEmp4fLn6LWzlRywdg=
Subject key identifier: 83:E7:F2:61:76:01:77:26:D1:1C:C8:36:FC:BD:DC:36:76:0A:8D:15
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584046CC990B23C500F354F74840
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23ab322e-1abf-3bab-b0b5-5be95c98d8a4.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 18 Jun 2023 04:00:00 +0000
asID: 398947
IP address blocks: 216.66.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:cc:99:0b:23:c5:00:f3:54:f7:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jun 18 04:00:00 2023 GMT
Subject: CN=19066974-f8bc-40e0-9f8d-f139d7e8823d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ff:69:ef:e7:e0:ba:11:b6:b8:95:70:65:a6:
db:dc:cc:48:f8:67:29:d9:44:b1:90:89:01:a3:69:
50:f9:48:0a:43:9c:fb:1e:d4:a7:2d:e0:53:3d:2a:
4e:ed:b1:bf:58:b1:13:1d:dc:2c:da:0a:1a:46:44:
dd:1f:1f:4c:38:a7:dd:84:fc:b5:6d:48:27:cd:2c:
7b:ab:37:f9:08:c8:aa:ad:65:cf:85:89:6e:20:e4:
98:11:3a:c7:69:17:9a:fc:c9:2e:07:46:f5:d8:4f:
31:b5:98:05:d8:24:f7:78:f9:09:4d:d1:21:09:02:
cf:8e:10:a2:2d:9b:50:fe:84:fe:6b:38:5d:a3:1f:
14:49:65:2b:36:3e:4a:71:01:ef:87:c3:87:8a:66:
7a:c6:2c:bb:4a:47:53:0b:11:b1:e7:e5:09:cc:52:
e6:e6:a0:6e:06:0f:e5:62:38:bb:4d:5c:d0:7a:26:
98:d2:66:f0:20:ed:6f:8d:2b:a3:e0:2d:1d:1c:6b:
ef:f4:64:3c:47:67:5f:6d:88:7b:cd:e8:d8:a2:71:
aa:11:55:6c:3a:3b:ca:1d:ce:13:b5:06:f7:47:f0:
5e:8f:76:ec:3a:e2:d6:ea:3e:23:41:4e:a2:08:0b:
de:d3:f4:f3:92:91:c7:de:14:45:ba:00:83:06:49:
4e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E7:F2:61:76:01:77:26:D1:1C:C8:36:FC:BD:DC:36:76:0A:8D:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23ab322e-1abf-3bab-b0b5-5be95c98d8a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:83:15:4e:73:c1:5b:e3:2d:df:29:e7:81:8f:ea:bc:7d:22:
a0:ce:6b:c8:94:53:77:93:80:2f:2f:96:38:4d:da:f8:b4:58:
48:c3:df:3a:5a:b8:79:dd:0d:91:80:fe:e8:08:bf:38:b0:ad:
c1:d8:d6:5c:8e:ec:74:16:17:a9:33:34:0c:2d:d3:d2:c8:59:
f6:c7:8c:f9:75:bc:bb:8d:ed:1c:52:ed:30:2f:14:f9:ca:cb:
c3:a3:e1:2e:78:38:7d:ab:c7:28:26:ed:7f:99:bf:a7:ac:ec:
da:1b:eb:97:d8:b7:4d:52:ba:78:25:fe:68:ca:5f:f8:00:dc:
ba:4c:a1:25:0c:47:ce:a8:fa:d2:af:f5:67:03:13:91:fe:51:
0d:60:f1:9f:39:06:33:8e:46:67:cd:10:c6:4b:af:c4:31:8d:
ed:2e:07:83:31:b5:a7:e9:30:55:38:c1:64:e0:12:97:e1:6b:
21:df:30:0a:a1:44:cc:a9:1a:d3:4f:6f:cf:e5:e0:77:a0:c8:
43:36:38:fb:a8:79:4a:01:28:d0:f4:2e:a9:41:b0:7b:38:80:
5e:6c:ad:d3:1e:d9:3b:c2:24:ed:ba:f7:d2:ae:ef:78:47:2d:
18:ce:c5:1f:fa:47:63:25:60:5d:20:f9:a3:b0:89:7b:ed:a6:
6c:6c:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:34:19 2025 by rpki-client