Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8549a287-70e2-348a-8af0-e401b167bf5e.roa
File: 8549a287-70e2-348a-8af0-e401b167bf5e.roa (raw, json)
Hash identifier: +H/RiPA31xhB6cyEvkH6DZH0yK1bDauujNYMxtfHTfo=
Subject key identifier: 6D:7C:5B:30:78:B0:E8:CC:66:EA:09:BA:28:90:08:00:34:5D:89:20
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A506304F343F155F23C2780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8549a287-70e2-348a-8af0-e401b167bf5e.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 63949
IP address blocks: 65.19.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:63:04:f3:43:f1:55:f2:3c:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=37d2c329-ad06-40c5-91cc-4a758640aa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d5:87:51:d3:19:cc:6f:1d:f5:c7:41:75:88:
58:a4:e5:f8:b5:d2:e5:13:92:95:c5:a9:f7:a8:ab:
f9:15:c1:a5:c6:ea:9d:49:07:e9:cf:ec:d2:73:94:
82:16:f2:a2:56:03:4c:22:4a:55:f6:42:ad:d9:68:
f1:fa:2e:6b:49:3f:41:bf:78:ba:31:40:db:c9:30:
47:3c:41:3b:7f:07:8b:9d:01:f1:08:d7:f0:bd:85:
cf:f0:db:eb:20:9d:cc:9e:4b:de:f7:f2:46:97:76:
9f:36:15:8c:22:f4:7e:d4:66:b4:3b:1b:e5:d5:2f:
8c:2b:e9:59:09:13:12:fa:d4:93:6e:3e:ab:d4:0f:
2f:00:b4:9b:98:84:a0:6f:ae:5f:28:59:5d:ef:31:
30:23:a0:3c:a4:72:1a:57:88:26:24:6f:e6:f5:a0:
b6:52:82:cd:af:49:bd:28:9a:82:54:de:f0:04:4c:
c7:82:10:ae:9b:3b:de:44:fc:5c:25:8c:52:3d:e0:
de:74:9f:94:51:80:ed:a4:20:66:0e:ec:67:a3:fc:
ad:a3:84:6b:37:8a:17:50:05:41:94:d5:04:51:55:
87:01:04:fd:19:aa:53:09:f9:d2:8a:9a:3c:9b:30:
e4:af:6a:26:3f:cf:cf:70:c0:ee:9c:3c:40:ca:d7:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7C:5B:30:78:B0:E8:CC:66:EA:09:BA:28:90:08:00:34:5D:89:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8549a287-70e2-348a-8af0-e401b167bf5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.19.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:6f:ee:b8:5a:70:c3:b5:b2:b4:bc:6f:60:b6:3f:23:7b:1a:
99:f5:6e:a8:04:6b:38:b4:88:86:9a:99:de:08:56:8e:8a:33:
dc:ca:cf:e2:9c:94:47:3a:03:09:04:f3:44:aa:b7:29:ac:9a:
b7:ce:0c:a7:09:a8:0b:9f:78:3a:36:81:16:f4:f6:dc:c6:8f:
d5:72:6b:43:04:62:68:f2:8f:a5:cb:2c:d7:fb:f0:01:bb:12:
79:38:52:96:cf:08:c2:f2:7f:99:b6:f9:4d:dd:43:91:86:66:
dc:14:9e:38:6a:87:d9:80:6b:d2:84:7b:8b:b5:ac:bb:87:9f:
8c:6b:b2:f3:c8:e5:20:c7:22:07:e4:08:41:3d:25:d9:61:c6:
62:bb:93:98:d8:90:8e:61:d9:b0:11:ca:3c:db:81:fc:e9:a0:
22:10:9b:91:70:3e:f4:17:43:98:2e:03:c5:3e:d7:c0:5f:37:
89:d8:0a:4e:9c:01:b4:60:4f:d7:c7:b4:bf:28:e6:d4:aa:02:
26:ea:95:8a:e2:4f:43:92:34:ce:e6:4c:76:dc:82:30:41:dc:
79:35:8c:23:41:40:d8:20:c7:a1:07:1b:06:e0:06:a1:3d:00:
a9:4e:5b:32:7e:9f:e8:ea:73:3c:29:14:4f:d4:41:7b:6b:b3:
79:61:e7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:09 2025 by rpki-client