Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/34b9d76b-847e-3edb-bf33-9868305433f3.roa
File: 34b9d76b-847e-3edb-bf33-9868305433f3.roa (raw, json)
Hash identifier: 84XtIvvlNZEznBQXrnjxj+B7AlnWY4bW4tESldL4fpY=
Subject key identifier: E2:08:51:92:9D:6A:F2:C3:71:12:63:08:D6:38:A6:D0:E2:36:BA:D8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A516A9F55E91817F71AC400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/34b9d76b-847e-3edb-bf33-9868305433f3.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 54288
IP address blocks: 64.62.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:6a:9f:55:e9:18:17:f7:1a:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=9810ea24-470c-463b-8b7d-94496ce209d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c5:12:34:2e:49:9c:43:14:26:68:cf:34:e8:
5c:77:d0:3f:4f:32:13:90:3a:ba:3f:4a:ce:91:f0:
e0:09:85:73:76:80:f6:9a:28:db:63:21:6c:45:08:
1e:35:e2:ab:aa:11:88:f9:d8:18:0b:49:c2:d6:38:
16:28:55:65:20:e1:a1:61:15:73:5f:2c:87:3c:5d:
6d:ef:50:81:98:6a:7a:2d:41:71:77:2c:52:f0:fc:
0f:54:06:ac:4a:b3:30:21:73:bb:c1:af:dc:db:cf:
64:a6:f8:85:d6:c3:d9:fc:2b:5d:65:40:21:43:54:
ab:10:1c:0e:1a:8f:b2:a6:6e:03:da:d1:ec:1a:c5:
28:05:bf:95:39:a9:17:76:4f:95:ba:0d:7b:06:2f:
29:06:c2:2e:95:49:25:8a:59:5f:89:e4:bf:d5:e0:
16:df:a7:f6:10:bf:09:43:27:e0:e0:cb:e9:c0:b5:
b5:8e:a0:d6:27:ab:0a:75:16:19:08:3a:66:71:a2:
c4:3e:c5:a5:43:e9:ae:66:8b:05:85:6d:ad:8d:86:
64:d3:de:15:4d:ec:be:23:1a:15:1c:87:e0:9d:8b:
d3:0e:42:c2:10:54:56:36:92:93:3c:61:36:a3:fc:
ec:3d:54:74:68:4b:84:43:c3:44:ff:6a:10:52:2e:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:08:51:92:9D:6A:F2:C3:71:12:63:08:D6:38:A6:D0:E2:36:BA:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/34b9d76b-847e-3edb-bf33-9868305433f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:e9:87:63:7a:ea:ad:67:06:c4:5e:20:d6:a5:95:1f:b4:b1:
d5:c9:b6:cb:d1:23:c4:fb:64:c1:ac:6a:56:e9:85:42:cb:80:
8f:ab:c9:79:94:8b:27:29:c3:64:63:84:3e:c0:ea:77:44:a7:
f5:b6:08:70:69:50:3f:da:f9:a6:9a:85:5b:1f:7e:4e:c7:94:
d3:e9:93:81:e9:91:bb:1b:e1:9f:80:8e:cd:14:8d:67:43:29:
2d:4c:09:d8:e5:0c:f3:8e:de:53:bb:14:19:f5:15:77:4b:6d:
3f:62:70:5f:12:5b:ab:e9:f2:eb:d0:83:2f:14:a5:19:37:d3:
e3:7b:3c:8a:ec:d8:2d:b9:ba:c4:0f:35:89:2e:3b:7f:f9:11:
08:39:f2:9b:54:73:77:93:21:27:66:33:8e:8a:c8:0f:1f:73:
fa:71:95:c8:fe:ec:3f:d7:62:f3:99:e9:89:30:80:ae:3e:80:
60:34:6a:aa:d3:89:55:40:22:63:cc:cd:07:22:ae:d3:00:05:
c8:3b:fc:af:aa:90:c4:88:97:67:73:a7:7a:84:e8:48:d1:c3:
bc:2f:21:ba:3c:4b:fd:ba:a3:be:99:db:9c:3d:30:5e:13:0a:
65:d3:e2:03:19:06:f5:1f:6f:35:37:d9:58:41:af:7a:05:c3:
bb:9d:cd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:56:24 2025 by rpki-client