Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4efd7cb2-fb9d-3e7a-841b-a04a2290adef.roa
File: 4efd7cb2-fb9d-3e7a-841b-a04a2290adef.roa (raw, json)
Hash identifier: 1Q2B6vcUmhrkJ0NkvhQvfLhc7DPOTXIEqPz4NUG+AVY=
Subject key identifier: D7:0B:B3:1F:7F:BB:F2:3B:5E:89:D3:15:1A:DF:3F:DA:CC:27:82:3E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858421351D3357EA2EB983014AD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4efd7cb2-fb9d-3e7a-841b-a04a2290adef.roa
Signing time: Wed 31 May 2023 12:00:00 +0000
ROA not before: Wed 31 May 2023 12:00:00 +0000
ROA not after: Fri 01 Dec 2023 05:00:00 +0000
asID: 398557
IP address blocks: 65.19.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:13:51:d3:35:7e:a2:eb:98:30:14:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 31 12:00:00 2023 GMT
Not After : Dec 1 05:00:00 2023 GMT
Subject: CN=450592d5-9d1a-46f5-9c80-9071122de57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0e:14:c9:d7:ef:ee:5a:f9:bf:f1:53:c8:2b:
0a:23:78:53:71:92:3b:70:34:06:56:32:4c:16:cf:
c5:d8:66:bd:7a:96:de:ed:49:40:57:c4:08:ba:74:
b2:ff:e5:c1:f4:30:80:e1:b4:35:b4:ee:d7:45:6f:
bd:e0:33:3e:a2:a7:bd:44:d5:08:fc:fe:e0:48:66:
fb:86:7a:8e:d7:4f:54:ad:7f:83:e3:a1:30:0f:85:
13:51:77:ad:c2:e7:b2:f2:fe:48:e3:ac:2f:17:2a:
ae:05:0f:8d:f3:d0:31:8f:22:49:af:59:7d:8d:f8:
cb:02:2e:26:d0:a7:6b:8e:6e:c3:db:ac:88:1b:0c:
22:08:bd:30:d1:0b:57:6b:40:e9:80:34:c5:dd:f9:
fa:01:83:8c:74:2f:0f:68:cf:46:50:33:0e:5a:1e:
7e:b0:39:7a:da:a9:2d:d1:b2:92:57:d1:54:63:df:
57:34:0a:36:49:90:5b:12:c4:be:e5:58:36:4c:a4:
05:b6:75:ef:54:0d:7d:10:92:57:c7:8f:9b:96:3c:
a6:b3:15:e4:9d:bb:ee:52:81:48:1c:da:85:cc:37:
5d:3e:bf:7b:39:6c:cd:18:70:bd:ef:28:eb:a4:e4:
fe:ba:d4:8c:bb:5a:e8:c0:5e:50:41:c4:d1:b0:87:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0B:B3:1F:7F:BB:F2:3B:5E:89:D3:15:1A:DF:3F:DA:CC:27:82:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4efd7cb2-fb9d-3e7a-841b-a04a2290adef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.19.183.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:16:93:cb:2c:c8:ed:f9:68:fa:65:02:25:fd:26:33:47:63:
a3:8a:53:41:94:99:c0:c3:80:58:6a:44:fa:aa:c9:c6:f9:f5:
49:38:e1:b6:8c:45:82:6c:31:49:68:3c:a9:c6:19:4a:f1:09:
c1:ff:5f:28:a4:55:34:36:f8:23:44:65:6a:7d:65:34:4c:6f:
a1:bd:84:37:92:fc:c2:8f:7f:6f:a8:2c:4f:78:b9:0d:b5:bc:
e9:51:64:60:17:eb:0e:38:ae:e4:60:72:be:e0:0b:b6:df:6a:
66:b6:0c:f0:14:b4:26:0e:19:fa:cc:b5:c1:c0:84:fb:7a:2a:
ea:1e:bc:62:32:24:f4:3d:81:24:8c:b2:7e:09:cf:93:66:6d:
0d:5e:6d:f5:ea:7e:6f:85:00:bd:0b:00:61:af:ae:50:56:aa:
99:b5:f6:c8:d5:95:9a:e1:9b:f4:d2:48:2b:49:c7:79:5c:f3:
c7:cc:09:8e:1b:07:45:db:cf:39:7b:3a:96:df:5d:7b:2d:1f:
4e:6a:c9:dc:fe:69:9c:c9:22:e2:5e:74:e7:cf:0c:7a:31:8b:
4c:47:32:44:c9:07:d6:31:89:e1:be:f9:4c:8c:99:70:e0:54:
26:00:d6:50:8f:43:34:ca:74:ad:ca:11:57:27:d1:be:e2:c3:
44:4a:08:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEITUdM1fqLrmDAUrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDUzMTEyMDAwMFoXDTIzMTIwMTA1MDAwMFowLzEtMCsGA1UEAxMk
NDUwNTkyZDUtOWQxYS00NmY1LTljODAtOTA3MTEyMmRlNTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ4Uydfv7lr5v/FTyCsKI3hTcZI7cDQGVjJM
Fs/F2Ga9epbe7UlAV8QIunSy/+XB9DCA4bQ1tO7XRW+94DM+oqe9RNUI/P7gSGb7
hnqO109UrX+D46EwD4UTUXetwuey8v5I46wvFyquBQ+N89AxjyJJr1l9jfjLAi4m
0Kdrjm7D26yIGwwiCL0w0QtXa0DpgDTF3fn6AYOMdC8PaM9GUDMOWh5+sDl62qkt
0bKSV9FUY99XNAo2SZBbEsS+5Vg2TKQFtnXvVA19EJJXx4+bljymsxXknbvuUoFI
HNqFzDddPr97OWzNGHC97yjrpOT+utSMu1rowF5QQcTRsIdw5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNcLsx9/u/I7XonTFRrfP9rMJ4I+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGVmZDdjYjItZmI5ZC0z
ZTdhLTg0MWItYTA0YTIyOTBhZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRO3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJcWk8ssyO35aPplAiX9JjNHY6OKU0GUmcDDgFhqRPqqycb59Uk44baM
RYJsMUloPKnGGUrxCcH/XyikVTQ2+CNEZWp9ZTRMb6G9hDeS/MKPf2+oLE94uQ21
vOlRZGAX6w44ruRgcr7gC7bfama2DPAUtCYOGfrMtcHAhPt6KuoevGIyJPQ9gSSM
sn4Jz5NmbQ1ebfXqfm+FAL0LAGGvrlBWqpm19sjVlZrhm/TSSCtJx3lc88fMCY4b
B0Xbzzl7OpbfXXstH05qydz+aZzJIuJedOfPDHoxi0xHMkTJB9YxieG++UyMmXDg
VCYA1lCPQzTKdK3KEVcn0b7iw0RKCBg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:57:26 2025 by rpki-client