Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5367488e-5016-3a5a-b462-2e443ac8eacd.roa
File: 5367488e-5016-3a5a-b462-2e443ac8eacd.roa (raw, json)
Hash identifier: zXjNlDdArnL6PhiaXEbGma7hbta4M1T3XXrrXGcxpoE=
Subject key identifier: D0:47:13:02:27:B6:8A:81:EE:55:89:83:F5:21:41:49:C6:E9:F3:78
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A517B0E03DA7FC6E60DFA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5367488e-5016-3a5a-b462-2e443ac8eacd.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 54288
IP address blocks: 66.160.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:7b:0e:03:da:7f:c6:e6:0d:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=96bfd39f-195f-4bde-abf2-53756e04d112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:a6:b5:16:c2:8e:e7:61:d5:a4:4a:df:b3:
c8:84:87:39:c1:8c:a7:50:ee:c6:26:f8:73:ce:84:
48:ce:29:a3:a3:30:2d:bf:5b:ca:39:c0:4b:55:36:
bf:e6:a6:a2:ab:a7:43:35:60:4f:4b:e6:ea:e0:56:
db:2b:42:bf:cf:82:03:97:e7:ad:e3:bc:63:2b:05:
75:fa:27:4f:d0:52:62:15:fb:95:03:fe:40:be:00:
83:69:d1:21:9a:4a:bd:c7:02:4d:2b:e0:f3:4d:d9:
bb:f9:14:1e:70:95:5a:97:10:4d:c3:53:b3:37:a5:
1a:bd:cd:cc:0e:b8:74:2d:eb:e9:71:0e:1c:48:5d:
03:e7:6a:37:74:a7:2c:da:96:fd:a8:18:6d:d6:2e:
7c:6e:93:cb:f4:a4:b4:23:7a:78:33:b1:47:02:55:
1f:09:e8:ee:b6:e1:c1:06:37:70:eb:44:16:68:2a:
e3:e7:02:0d:e4:29:1d:42:e4:ce:c1:b7:f4:e2:6d:
9c:7d:a8:a6:f7:89:40:de:04:f5:06:8b:08:19:34:
b3:7d:07:e7:b8:db:ca:05:00:64:0c:96:28:19:8b:
19:45:2c:d0:89:00:81:1c:c5:b6:14:c0:c3:c8:29:
3b:c1:d0:b0:a9:d3:f3:9f:64:0e:56:16:df:54:94:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:47:13:02:27:B6:8A:81:EE:55:89:83:F5:21:41:49:C6:E9:F3:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5367488e-5016-3a5a-b462-2e443ac8eacd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c6:f4:38:72:a9:a7:31:07:1e:d8:08:de:2a:b6:1e:b6:54:
57:9a:d9:2f:ed:98:71:6d:8b:fa:99:a9:42:b0:d5:ef:82:ef:
54:11:0f:82:b4:71:56:b5:0c:9c:63:3c:77:28:68:45:73:76:
28:cb:48:f0:c0:cf:0d:92:f3:8d:73:2d:a3:6f:a9:63:b3:80:
12:bf:15:9a:a9:a7:42:33:52:d1:4c:52:92:b9:0d:d2:71:27:
06:05:4c:f7:e6:37:56:d8:74:92:1a:43:f7:8b:89:0f:bf:b5:
2f:35:fb:77:26:36:35:c2:f9:64:2e:04:7f:bb:16:71:c7:59:
8a:c8:80:2b:0c:59:af:66:bb:58:ce:aa:ac:d1:f4:35:73:23:
7b:62:9c:77:67:44:8b:ca:bb:06:a9:d5:57:11:80:5d:d3:fb:
b3:40:bd:4a:96:8e:58:e6:a8:a3:62:28:1a:95:31:f5:31:ac:
27:a4:5c:c5:9a:3d:82:30:54:f9:72:cf:e8:83:18:07:d2:d7:
6e:11:a5:66:77:9e:83:37:83:7e:dd:30:95:95:f5:ba:67:95:
a8:60:f4:47:b3:8b:d4:57:ba:c5:a2:96:ed:cb:fd:0b:2d:00:
1b:02:3c:fd:1e:03:64:5e:b6:85:0c:4e:1b:5d:d8:80:04:1d:
e6:61:76:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUXsOA9p/xuYN+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
OTZiZmQzOWYtMTk1Zi00YmRlLWFiZjItNTM3NTZlMDRkMTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWmmtRbCjudh1aRK37PIhIc5wYynUO7GJvhz
zoRIzimjozAtv1vKOcBLVTa/5qaiq6dDNWBPS+bq4FbbK0K/z4IDl+et47xjKwV1
+idP0FJiFfuVA/5AvgCDadEhmkq9xwJNK+DzTdm7+RQecJValxBNw1OzN6Uavc3M
Drh0LevpcQ4cSF0D52o3dKcs2pb9qBht1i58bpPL9KS0I3p4M7FHAlUfCejutuHB
Bjdw60QWaCrj5wIN5CkdQuTOwbf04m2cfaim94lA3gT1BosIGTSzfQfnuNvKBQBk
DJYoGYsZRSzQiQCBHMW2FMDDyCk7wdCwqdPzn2QOVhbfVJShPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNBHEwIntoqB7lWJg/UhQUnG6fN4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTM2NzQ4OGUtNTAxNi0z
YTVhLWI0NjItMmU0NDNhYzhlYWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqC6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrG9DhyqacxBx7YCN4qth62VFea2S/tmHFti/qZqUKw1e+C71QRD4K0
cVa1DJxjPHcoaEVzdijLSPDAzw2S841zLaNvqWOzgBK/FZqpp0IzUtFMUpK5DdJx
JwYFTPfmN1bYdJIaQ/eLiQ+/tS81+3cmNjXC+WQuBH+7FnHHWYrIgCsMWa9mu1jO
qqzR9DVzI3tinHdnRIvKuwap1VcRgF3T+7NAvUqWjljmqKNiKBqVMfUxrCekXMWa
PYIwVPlyz+iDGAfS124RpWZ3noM3g37dMJWV9bpnlahg9Eezi9RXusWilu3L/Qst
ABsCPP0eA2RetoUMThtd2IAEHeZhdhY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:28:30 2025 by rpki-client