Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c263f82-c96f-3836-ad2a-620a923973e2.roa
File: 5c263f82-c96f-3836-ad2a-620a923973e2.roa (raw, json)
Hash identifier: 9fI6rtYTfIDqzNzVOwbsgZ3FcNqp/1E2nsaaw9VttBs=
Subject key identifier: EB:93:A3:FE:90:1B:3E:FF:41:50:BC:FB:C7:9E:C3:BC:9D:C0:68:4D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858401756F77EE9F2187C43729C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c263f82-c96f-3836-ad2a-620a923973e2.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 01 Jun 2023 04:00:00 +0000
asID: 36103
IP address blocks: 65.49.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:56:f7:7e:e9:f2:18:7c:43:72:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jun 1 04:00:00 2023 GMT
Subject: CN=87ae4451-88e7-436c-9c01-91dca7b496c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:50:a0:ba:ee:f3:13:f0:64:dc:0d:c3:28:
55:57:15:95:ed:24:db:4b:8f:5d:fd:03:3b:ac:d3:
f4:75:c6:fe:e8:4b:a1:9a:ce:04:b7:d0:77:fc:29:
ad:c6:41:ad:7b:8b:7e:b1:26:03:cb:6a:0f:74:42:
bf:0a:85:18:08:80:77:d7:3d:00:c3:7c:87:d7:53:
bd:59:ba:fb:b4:e2:93:18:81:75:57:5a:c6:6f:1f:
68:28:21:d3:ed:f2:1b:53:06:b4:32:ac:86:c7:d1:
1c:11:cd:ed:01:3d:7d:67:fb:82:c6:f8:cd:0a:38:
27:15:45:8e:cf:c9:5e:ca:74:fe:3e:a9:08:14:9e:
0f:75:85:7c:ad:a7:2b:8e:7f:00:ce:72:21:aa:87:
01:e9:99:78:6a:c4:3f:32:03:57:77:ae:a6:5a:dd:
e6:04:0e:59:bb:32:6c:74:59:ef:62:80:2b:23:3a:
e5:bc:22:00:08:96:cf:7a:12:b8:fd:5d:83:ee:c7:
0e:99:8d:b8:3b:be:d7:6b:ca:5f:45:a1:83:75:96:
56:00:57:1e:bd:59:1a:19:9d:65:3e:e1:7e:73:98:
74:c2:38:36:85:ce:e1:4a:85:da:21:f3:aa:87:7d:
04:af:20:70:0f:84:c1:c9:a7:72:a2:14:e2:3c:cd:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:93:A3:FE:90:1B:3E:FF:41:50:BC:FB:C7:9E:C3:BC:9D:C0:68:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c263f82-c96f-3836-ad2a-620a923973e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:5e:de:0d:7e:3b:3a:88:20:11:9b:ba:47:cd:d5:c0:c9:69:
bd:cb:21:66:30:9b:25:08:0a:b3:a4:33:92:5e:2b:47:57:98:
1d:9d:39:22:14:f1:6e:be:18:88:cd:8b:97:fa:40:6e:62:90:
04:7a:e2:8d:6c:50:e8:c9:64:b2:37:f2:a5:1e:c1:bb:97:a4:
e3:84:cc:4e:37:5a:be:96:ce:0b:3c:4b:6d:53:29:7b:30:87:
c8:e8:ff:2f:15:29:3a:cb:54:0e:c3:5f:5b:97:ba:49:ee:8c:
cb:9a:1f:bf:0c:2d:8b:13:00:19:27:d4:7f:a6:5a:a0:e2:6d:
f3:82:96:96:ca:ff:d2:94:8b:44:8e:60:08:94:3c:e0:67:f5:
3f:4a:22:60:df:7b:59:d7:2d:cb:e9:d4:c3:e5:b5:45:f2:36:
44:e8:bc:36:66:3e:c9:d8:ca:f5:85:ca:ed:81:c3:3b:61:02:
b5:f0:b2:9c:5b:fc:a4:0b:f1:3b:b1:fc:fd:ea:69:62:9c:a0:
3e:cb:3e:32:42:0e:58:b8:af:00:f1:62:e7:2f:42:f4:38:da:
e8:8c:b1:5c:47:80:24:fd:a3:ca:88:0c:b3:95:8e:f6:2e:75:
c1:50:12:da:af:d1:80:d6:71:fe:17:4b:41:a3:f3:68:ec:7a:
9e:70:6c:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAXVvd+6fIYfENynAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMTEzMDEyMDAwMFoXDTIzMDYwMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODdhZTQ0NTEtODhlNy00MzZjLTljMDEtOTFkY2E3YjQ5NmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc9QoLru8xPwZNwNwyhVVxWV7STbS49d/QM7
rNP0dcb+6Euhms4Et9B3/CmtxkGte4t+sSYDy2oPdEK/CoUYCIB31z0Aw3yH11O9
Wbr7tOKTGIF1V1rGbx9oKCHT7fIbUwa0MqyGx9EcEc3tAT19Z/uCxvjNCjgnFUWO
z8leynT+PqkIFJ4PdYV8racrjn8AznIhqocB6Zl4asQ/MgNXd66mWt3mBA5ZuzJs
dFnvYoArIzrlvCIACJbPehK4/V2D7scOmY24O77Xa8pfRaGDdZZWAFcevVkaGZ1l
PuF+c5h0wjg2hc7hSoXaIfOqh30EryBwD4TByadyohTiPM2QqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuTo/6QGz7/QVC8+8eew7ydwGhNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWMyNjNmODItYzk2Zi0z
ODM2LWFkMmEtNjIwYTkyMzk3M2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTFXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxe3g1+OzqIIBGbukfN1cDJab3LIWYwmyUICrOkM5JeK0dXmB2dOSIU
8W6+GIjNi5f6QG5ikAR64o1sUOjJZLI38qUewbuXpOOEzE43Wr6Wzgs8S21TKXsw
h8jo/y8VKTrLVA7DX1uXuknujMuaH78MLYsTABkn1H+mWqDibfOClpbK/9KUi0SO
YAiUPOBn9T9KImDfe1nXLcvp1MPltUXyNkTovDZmPsnYyvWFyu2BwzthArXwspxb
/KQL8Tux/P3qaWKcoD7LPjJCDli4rwDxYucvQvQ42uiMsVxHgCT9o8qIDLOVjvYu
dcFQEtqv0YDWcf4XS0Gj82jsep5wbBI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:35:50 2025 by rpki-client