Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32f11c52-7e56-35d5-adaf-b1e0730269cc.roa
File: 32f11c52-7e56-35d5-adaf-b1e0730269cc.roa (raw, json)
Hash identifier: lmP45qvfsOleX0ueif91XSyuoKSk5pGJjXVaEY6duls=
Subject key identifier: 44:D4:4D:CC:32:87:98:F0:5A:48:4D:A4:B0:C7:6E:30:17:2C:74:17
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D793661C9D00E59B2EF65B6C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32f11c52-7e56-35d5-adaf-b1e0730269cc.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 54288
IP address blocks: 216.218.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:36:61:c9:d0:0e:59:b2:ef:65:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=704ce2ca-5fc8-4d2b-83b3-47ef05ab9724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:5d:0a:6f:0e:94:7c:39:57:28:72:d9:82:
0d:10:fe:b9:d8:a9:ba:6e:65:40:13:d6:c4:aa:29:
8d:47:55:b8:0b:40:40:6b:57:84:03:e1:35:f6:71:
24:0e:90:b9:62:e1:cf:49:db:c8:58:3f:ba:a7:70:
5e:1e:64:43:f2:cd:bd:a0:42:d6:2b:a2:5b:db:91:
2f:7d:5d:86:1e:1e:5e:aa:0e:79:8d:54:2b:81:6c:
2f:ce:be:23:21:2e:6d:b1:22:8d:3a:6e:bc:36:24:
da:33:a3:20:a5:5a:e2:14:e4:f9:bf:55:b0:97:4c:
39:6b:71:57:72:f4:b4:57:ff:b3:07:55:67:a0:ff:
a8:ad:0c:52:b0:e7:15:04:c7:1e:e1:05:38:45:4b:
bb:af:b2:e5:c1:6e:45:64:2e:1f:a4:3e:e7:b9:5a:
58:f7:ef:18:8f:d1:26:12:9c:ca:3f:8f:67:58:78:
f3:6a:82:8e:97:96:a1:0b:5b:1b:de:95:0e:cf:0d:
da:d4:c3:d5:54:e6:fa:e3:65:de:43:ab:0d:99:5a:
b1:bd:0a:ea:f1:2f:1c:fe:8b:d1:e4:fc:2b:fc:a9:
20:64:00:0d:2a:66:61:d3:d2:f3:bd:fd:21:e9:84:
b5:62:e5:5f:46:da:75:62:b4:a5:ab:be:ac:13:56:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D4:4D:CC:32:87:98:F0:5A:48:4D:A4:B0:C7:6E:30:17:2C:74:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32f11c52-7e56-35d5-adaf-b1e0730269cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.218.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:ec:f0:50:a8:74:db:90:e1:1f:96:b9:aa:2b:f0:f3:1b:f4:
d0:14:c8:a1:c4:73:87:dd:a7:20:37:a1:e0:24:d5:5b:64:b2:
1e:6f:d7:f9:54:ad:30:a4:fa:e9:dc:5b:0d:f0:fd:44:9a:da:
76:dc:ff:91:fb:5e:2e:5c:5d:46:b9:73:04:68:a8:e1:ac:d3:
53:c3:99:b7:e8:2f:8e:6a:14:ba:13:94:3e:02:40:a4:6f:7e:
58:d6:04:95:ec:e6:af:68:8a:99:63:8f:5b:2c:05:6d:9c:23:
16:40:9b:e9:81:3e:e4:3b:6a:3c:1e:65:63:e1:7f:3e:cf:78:
12:de:4e:7d:fb:26:0d:0a:51:ad:cf:4c:3f:a1:10:ba:79:6a:
76:47:e6:31:dd:e8:3c:56:60:78:03:88:ea:27:33:83:fd:20:
91:da:77:ad:07:ea:a9:68:f3:01:60:8b:b9:10:73:0d:62:a2:
07:31:89:a6:f3:42:10:6a:fa:b5:91:fe:74:bd:2c:0c:dc:71:
0e:73:54:fd:a4:6d:23:c3:0c:fe:e8:7c:df:06:38:ff:b8:09:
9e:e1:58:06:f5:16:8d:fc:7e:62:bc:a6:14:3d:93:34:d4:2f:
d4:f1:d6:22:c2:e8:17:05:f8:ec:e4:dc:fe:95:f8:5e:49:38:
43:50:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:37:18 2025 by rpki-client