Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/581b375e-d2b0-3414-b657-bd5b8b7c2fea.roa
File: 581b375e-d2b0-3414-b657-bd5b8b7c2fea.roa (raw, json)
Hash identifier: 2An8YkRGKdo+tHlx/IDut96ZnBuO5LgBim0X6IB1w+A=
Subject key identifier: 5F:34:2B:8B:58:CC:33:31:A4:F0:95:C4:56:A7:78:6A:DA:A0:5F:D4
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50CF1D0B824598EFC6A600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/581b375e-d2b0-3414-b657-bd5b8b7c2fea.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 18779
IP address blocks: 74.82.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:cf:1d:0b:82:45:98:ef:c6:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=26b481f3-5e2a-471b-acd2-16c0a9916ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:bb:14:cb:a0:8b:f0:42:d9:d2:9f:db:fb:
28:a0:be:6a:77:30:3d:bb:25:64:50:c4:fc:dc:43:
a1:f4:7d:40:94:f7:44:65:8c:5a:ad:68:c1:72:04:
78:78:38:97:90:f9:41:b7:81:5b:55:65:09:bd:c6:
39:41:f3:d6:a0:72:85:79:98:08:33:5a:60:f3:1b:
1a:b3:47:1b:4f:6a:df:d1:b7:85:5f:37:28:32:a8:
a2:25:65:1a:92:4f:93:95:86:b4:a7:e4:d4:f4:fe:
2d:61:9a:83:0d:45:39:54:d5:7e:bf:b1:20:29:6d:
b2:90:91:49:a7:b4:5c:a2:3c:6d:57:4f:ec:a7:82:
5e:f6:d5:61:ac:77:96:52:04:24:5c:9d:a8:9a:d3:
c2:3d:96:78:1d:c7:64:c5:ad:ed:70:48:de:61:c0:
85:01:db:6c:d4:77:cf:32:91:31:4c:5c:fa:1b:f1:
1c:a0:e7:a3:4e:55:15:76:7a:5d:4f:84:54:c3:1f:
9f:0e:17:4b:50:ba:82:66:4d:c2:00:ea:db:71:55:
eb:6d:0d:35:c3:e3:4d:60:65:5b:c4:8a:e6:c5:a9:
6d:2e:d2:bb:0a:64:ad:f0:f3:67:26:82:86:35:1a:
8d:18:c9:14:8b:6a:84:ca:3f:5a:a8:eb:26:d0:b9:
6f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:34:2B:8B:58:CC:33:31:A4:F0:95:C4:56:A7:78:6A:DA:A0:5F:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/581b375e-d2b0-3414-b657-bd5b8b7c2fea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
74.82.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:46:e1:ab:ca:49:3f:d7:4c:cf:95:68:fb:70:d2:4b:e7:5f:
00:52:dc:4a:20:09:c9:7e:5a:d6:0b:7d:39:9f:9e:ca:30:d0:
9f:50:6b:9e:af:be:8c:a8:6b:db:df:fe:ed:de:b5:69:e0:f4:
25:08:7a:cc:b7:f7:bd:47:4c:ee:af:73:ed:b0:42:a4:31:15:
d8:ce:15:99:14:08:72:56:4d:b3:d4:27:b4:52:0e:7b:e8:e0:
34:2a:0b:30:4a:79:fb:46:bd:39:7f:30:c3:f0:de:23:eb:70:
8e:5c:77:5b:ce:32:87:ab:96:a9:02:f5:fa:69:bc:7f:45:6d:
ab:4c:cd:81:a8:31:6b:cf:f8:b7:73:80:54:fc:36:79:23:f3:
1a:7c:fd:94:3b:33:ce:6b:2d:17:1a:14:fb:39:b2:07:83:48:
5f:29:cc:65:9b:d0:fc:3c:20:83:bd:7d:83:44:b3:6c:8e:f7:
35:29:6a:5c:bd:84:22:fb:57:3c:44:d4:07:d6:01:fa:fa:74:
df:e8:e3:71:a5:8a:a3:c7:54:19:ab:a5:f8:be:fd:33:aa:6f:
32:e5:75:0d:c7:fc:c8:2b:b7:98:29:3f:98:42:39:f5:51:bd:
4a:e0:2e:1f:36:d4:8c:83:bb:0d:7b:ba:4d:e1:31:df:b7:1a:
25:c9:c6:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUM8dC4JFmO/GpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MjZiNDgxZjMtNWUyYS00NzFiLWFjZDItMTZjMGE5OTE2Y2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqka7FMugi/BC2dKf2/sooL5qdzA9uyVkUMT8
3EOh9H1AlPdEZYxarWjBcgR4eDiXkPlBt4FbVWUJvcY5QfPWoHKFeZgIM1pg8xsa
s0cbT2rf0beFXzcoMqiiJWUakk+TlYa0p+TU9P4tYZqDDUU5VNV+v7EgKW2ykJFJ
p7RcojxtV0/sp4Je9tVhrHeWUgQkXJ2omtPCPZZ4Hcdkxa3tcEjeYcCFAdts1HfP
MpExTFz6G/EcoOejTlUVdnpdT4RUwx+fDhdLULqCZk3CAOrbcVXrbQ01w+NNYGVb
xIrmxaltLtK7CmSt8PNnJoKGNRqNGMkUi2qEyj9aqOsm0LlvpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF80K4tYzDMxpPCVxFaneGraoF/UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTgxYjM3NWUtZDJiMC0z
NDE0LWI2NTctYmQ1YjhiN2MyZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlIrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZG4avKST/XTM+VaPtw0kvnXwBS3EogCcl+WtYLfTmfnsow0J9Qa56v
voyoa9vf/u3etWng9CUIesy3971HTO6vc+2wQqQxFdjOFZkUCHJWTbPUJ7RSDnvo
4DQqCzBKeftGvTl/MMPw3iPrcI5cd1vOMoerlqkC9fppvH9FbatMzYGoMWvP+Ldz
gFT8Nnkj8xp8/ZQ7M85rLRcaFPs5sgeDSF8pzGWb0Pw8IIO9fYNEs2yO9zUpaly9
hCL7VzxE1AfWAfr6dN/o43GliqPHVBmrpfi+/TOqbzLldQ3H/Mgrt5gpP5hCOfVR
vUrgLh821IyDuw17uk3hMd+3GiXJxl8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:20:41 2025 by rpki-client