Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e9ec2dc-338c-3973-ad9f-d57bf5564e13.roa
File: 4e9ec2dc-338c-3973-ad9f-d57bf5564e13.roa (raw, json)
Hash identifier: lg1tPgmAQoezZfapg4P4kv8+8lsb5M3orMmrMYu/aKc=
Subject key identifier: 2A:54:97:E7:6C:6B:B4:7E:58:D6:D1:2F:4F:D1:D5:6A:9F:DE:CA:E4
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A516E489F3089D67F6C5480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e9ec2dc-338c-3973-ad9f-d57bf5564e13.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 54288
IP address blocks: 65.19.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:6e:48:9f:30:89:d6:7f:6c:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=2581d63b-4d4f-45a3-9169-a13e5429444a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:10:7e:ff:ba:64:e5:40:72:b2:59:90:cf:
5b:f2:c2:23:49:0b:f7:84:6c:1b:45:f0:50:12:5d:
7b:5f:30:8f:66:ad:94:95:f4:bb:b8:13:cc:32:a2:
b9:86:8c:b2:76:e1:70:0d:bc:4f:56:7a:84:14:ae:
26:79:af:e7:02:f1:7f:ee:e9:71:ed:85:87:fb:51:
9f:87:a5:81:c3:e1:fb:99:ce:14:6e:50:6a:25:d6:
c7:60:e2:04:2c:f7:f4:ee:c8:0d:f3:52:73:6a:19:
e1:cd:62:d4:5c:6e:35:f0:c2:7d:76:d4:0d:92:0e:
d8:d4:bf:b0:34:15:ba:6d:45:f0:c9:9d:f2:f3:ce:
b5:c2:92:ea:bb:0e:c6:6a:42:a1:54:a4:f9:84:3e:
bb:23:72:af:e4:93:41:7b:cb:f6:9d:64:8b:8f:39:
07:65:ec:85:55:f0:92:dc:ed:a8:aa:af:be:9f:0a:
b5:34:e7:89:58:d2:4f:56:18:a3:57:38:e7:8e:d2:
6d:3e:9b:16:ca:d4:47:2f:1e:ea:3e:2f:2b:8c:0b:
64:d3:70:4e:18:f0:04:7f:29:e2:a6:a0:90:54:00:
51:9e:a1:3b:59:d4:07:f0:ce:f6:60:af:4f:fe:fd:
5e:27:7f:7a:19:b6:c9:bc:89:c7:35:5c:2d:5b:66:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:54:97:E7:6C:6B:B4:7E:58:D6:D1:2F:4F:D1:D5:6A:9F:DE:CA:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e9ec2dc-338c-3973-ad9f-d57bf5564e13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.19.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:53:61:7c:d3:49:1d:e6:7b:fe:10:03:c2:14:f3:55:fe:6e:
61:94:bf:a7:70:3d:b1:3a:1e:11:a5:94:b2:85:c0:5b:b0:47:
e1:fc:6e:af:db:c1:e7:4d:3a:f7:18:07:73:3f:25:74:10:e2:
59:54:f3:1e:0b:87:7a:46:e9:d1:c1:81:b1:3a:f6:d6:1e:78:
b0:b7:55:9a:2b:2e:eb:16:e2:de:1c:1d:c9:26:7a:0d:13:a3:
ae:e9:44:50:12:ed:24:68:fd:07:72:a6:6c:9c:7d:8d:b9:71:
65:fb:c3:1b:e0:82:e9:86:a5:4e:93:e3:24:58:e8:97:33:23:
02:83:26:da:3c:4d:46:82:e5:04:4d:47:fc:51:73:5f:85:23:
8b:06:ed:f3:25:7c:8c:77:2f:d8:2c:64:32:49:d5:72:73:66:
e0:83:a4:12:47:7d:80:e0:29:5e:4f:00:33:31:4c:46:af:87:
f2:4f:ac:7a:19:e2:a9:85:64:44:7c:0d:87:aa:d6:82:74:c9:
8e:e9:cf:b4:8e:e5:28:62:d3:68:e0:e6:61:94:3e:47:21:c7:
c4:bb:31:b2:c4:17:fb:30:81:e0:ef:36:e6:78:45:d7:1c:dc:
ec:a8:e8:a9:d8:9a:6e:7f:40:8a:e0:5d:ea:ac:c0:63:96:b4:
d1:73:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:45:05 2025 by rpki-client