Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/47942944-3ff8-32e1-b3e2-8e9b842f6dfc.roa
File: 47942944-3ff8-32e1-b3e2-8e9b842f6dfc.roa (raw, json)
Hash identifier: 79Vb/lXQC8KPu1ZgVSGybwqAdiRsFxHg2Hxo93STdew=
Subject key identifier: F3:16:EC:4D:1E:0E:2C:C3:F7:A6:6C:22:D6:14:81:5B:48:16:A8:B8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285841A3A64657010D246728559750
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/47942944-3ff8-32e1-b3e2-8e9b842f6dfc.roa
Signing time: Fri 21 Apr 2023 12:00:00 +0000
ROA not before: Fri 21 Apr 2023 12:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 209242
IP address blocks: 72.52.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:a3:a6:46:57:01:0d:24:67:28:55:97:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 21 12:00:00 2023 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=178255b8-3649-4acf-b458-271ccd177883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:5f:a6:24:a9:03:fa:87:80:c3:12:a2:fb:
f4:06:23:79:42:65:27:92:ff:83:00:35:65:bb:27:
c8:05:f3:1a:41:ce:c7:41:4c:c8:5b:15:83:fd:99:
e6:38:62:2c:cf:c7:2b:04:2f:8f:aa:e1:48:f4:15:
33:36:ed:c4:c3:37:d0:24:bc:73:25:39:95:94:5c:
61:84:e0:63:e7:0b:33:b2:8f:35:5a:07:0d:63:dc:
f6:7b:3b:a8:48:c8:96:5b:1b:d1:54:76:48:9b:76:
11:33:cc:a8:4d:07:0b:95:cb:0e:bd:d5:56:87:c6:
1e:d7:26:91:d2:76:92:98:fb:75:86:03:b2:6e:4a:
dc:ae:1c:1a:d1:fe:76:c8:a6:8a:fd:04:bb:15:dc:
9b:a0:2f:5d:f6:c1:1c:62:9c:91:79:31:be:17:74:
20:ba:22:34:95:a8:37:25:0f:63:d4:5f:26:86:12:
a6:25:49:8f:09:1c:e3:87:74:02:de:af:30:6e:60:
db:b9:b0:a0:36:b3:4b:d3:df:11:09:c1:0f:82:08:
05:9f:cd:ef:b2:cd:be:bc:d1:0a:cc:ad:58:80:09:
e3:db:91:49:dc:53:23:1c:c7:18:37:f0:80:36:9f:
1f:fc:89:1c:d7:68:0c:04:bf:e7:ea:6e:41:06:dd:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:16:EC:4D:1E:0E:2C:C3:F7:A6:6C:22:D6:14:81:5B:48:16:A8:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/47942944-3ff8-32e1-b3e2-8e9b842f6dfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
72.52.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:c9:4f:5c:76:a3:2d:73:79:5a:cb:f8:50:3f:50:39:f9:ab:
a5:77:49:9b:53:a2:0d:d6:b6:34:1e:4b:33:63:d0:f6:6d:9f:
e6:01:60:a2:8e:8b:6c:c4:e4:00:34:78:79:66:75:7b:dd:38:
78:62:9d:cf:ab:ac:4c:3b:4e:df:e9:b9:5a:b4:8e:97:0e:ff:
45:04:ff:62:2f:78:48:a9:71:34:c4:7c:98:ee:9d:ce:92:15:
45:4a:71:ff:b7:69:33:ed:b0:db:a2:1e:e2:4e:6a:b4:68:06:
68:b1:66:0b:90:3e:98:59:83:3d:c7:1d:c4:77:4e:92:63:f3:
b9:51:0a:63:a6:72:9c:43:d0:30:8d:57:36:20:60:b7:73:67:
2e:49:da:fd:f6:86:ee:90:24:fd:61:23:d9:bb:8f:64:3b:f7:
b9:96:41:cc:2d:93:ae:c4:6d:02:54:d5:f3:50:ec:ab:c7:55:
24:43:80:3e:bc:43:ee:dc:ee:e0:c3:6f:f6:1f:28:d3:a5:34:
88:35:f6:e5:e5:0e:29:77:6e:26:48:83:33:17:8b:f3:15:05:
d3:73:e5:99:8f:1d:5e:e7:98:4a:be:df:f2:04:ab:50:64:d6:
02:09:69:d0:e2:a5:01:da:32:93:e2:c5:67:de:ec:fd:b6:b8:
c4:15:69:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGjpkZXAQ0kZyhVl1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDQyMTEyMDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MTc4MjU1YjgtMzY0OS00YWNmLWI0NTgtMjcxY2NkMTc3ODgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu49fpiSpA/qHgMMSovv0BiN5QmUnkv+DADVl
uyfIBfMaQc7HQUzIWxWD/ZnmOGIsz8crBC+PquFI9BUzNu3EwzfQJLxzJTmVlFxh
hOBj5wszso81WgcNY9z2ezuoSMiWWxvRVHZIm3YRM8yoTQcLlcsOvdVWh8Ye1yaR
0naSmPt1hgOybkrcrhwa0f52yKaK/QS7FdyboC9d9sEcYpyReTG+F3QguiI0lag3
JQ9j1F8mhhKmJUmPCRzjh3QC3q8wbmDbubCgNrNL098RCcEPgggFn83vss2+vNEK
zK1YgAnj25FJ3FMjHMcYN/CANp8f/Ikc12gMBL/n6m5BBt3FJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMW7E0eDizD96ZsItYUgVtIFqi4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDc5NDI5NDQtM2ZmOC0z
MmUxLWIzZTItOGU5Yjg0MmY2ZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDRxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbJT1x2oy1zeVrL+FA/UDn5q6V3SZtTog3WtjQeSzNj0PZtn+YBYKKO
i2zE5AA0eHlmdXvdOHhinc+rrEw7Tt/puVq0jpcO/0UE/2IveEipcTTEfJjunc6S
FUVKcf+3aTPtsNuiHuJOarRoBmixZguQPphZgz3HHcR3TpJj87lRCmOmcpxD0DCN
VzYgYLdzZy5J2v32hu6QJP1hI9m7j2Q797mWQcwtk67EbQJU1fNQ7KvHVSRDgD68
Q+7c7uDDb/YfKNOlNIg19uXlDil3biZIgzMXi/MVBdNz5ZmPHV7nmEq+3/IEq1Bk
1gIJadDipQHaMpPixWfe7P22uMQVabQ=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:58:00 2025 by rpki-client