Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85a0d9fe-706c-3985-a9e1-0a9dfc7cc3a5.roa
File: 85a0d9fe-706c-3985-a9e1-0a9dfc7cc3a5.roa (raw, json)
Hash identifier: bk9pF6NBCI0z7KqGZ1/HxGkrCMTHF+gLo9UwewXvgeU=
Subject key identifier: 5A:8B:97:C4:82:4C:62:89:15:94:68:D2:90:76:35:3B:C6:F0:C8:3C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A509C3092E743679562FDB0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85a0d9fe-706c-3985-a9e1-0a9dfc7cc3a5.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 30712
IP address blocks: 65.49.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:9c:30:92:e7:43:67:95:62:fd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=0772a0ce-d621-4d19-a666-10314b0aca2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:2e:fe:42:46:ed:cd:10:56:e7:82:2d:db:
38:41:99:59:e4:35:3c:b1:7d:2c:3a:00:03:59:d2:
aa:4f:a4:6b:8a:e0:10:ee:1c:15:d9:d1:b5:45:85:
cf:41:44:e1:7c:cb:69:e6:1c:84:74:fe:7f:47:65:
bb:60:76:f2:36:97:de:17:ba:9a:7d:56:99:f2:7b:
7f:8d:fe:d1:0a:19:4a:03:d4:c5:cd:c2:0e:35:58:
9a:2f:c2:14:26:85:72:d6:9b:aa:39:7d:7c:68:cb:
de:30:1d:b7:a3:ef:7b:c3:2e:ca:69:c0:ed:ef:4c:
7d:e0:0a:94:07:77:2d:89:51:d1:f1:29:fd:9d:1c:
23:d1:65:ef:15:09:b2:67:6e:e4:0b:aa:e9:48:4c:
8d:89:f1:56:68:c4:95:0d:ec:0c:af:cd:e0:10:4c:
12:2e:4e:cf:13:85:70:42:07:bc:cd:d6:3e:36:38:
9c:f6:68:45:13:ba:f0:2c:ae:86:ed:46:3f:f6:57:
a8:a7:da:ec:c2:a2:6b:7e:df:04:02:4e:c7:65:c5:
4c:8a:60:0a:f8:ce:3d:99:a9:2c:a8:c1:e3:17:fd:
b4:bc:22:41:73:e5:92:da:40:4c:d7:cc:3e:c1:d1:
35:f9:1c:c9:b4:fd:82:8b:75:98:63:9f:5d:08:5b:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8B:97:C4:82:4C:62:89:15:94:68:D2:90:76:35:3B:C6:F0:C8:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85a0d9fe-706c-3985-a9e1-0a9dfc7cc3a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:16:03:5d:55:25:23:41:8c:06:a8:a7:4a:09:3c:4e:70:82:
d9:19:37:f6:b8:e4:46:2c:54:99:63:01:b0:63:23:54:27:7b:
76:ae:04:33:5c:a3:f3:45:5f:ee:fd:c5:32:d3:b4:ed:d7:91:
50:0b:54:f0:1c:2b:10:61:54:99:b2:5e:86:f2:14:2e:4c:62:
be:17:42:ed:0e:c6:9e:9c:52:b1:29:e6:45:d3:76:6f:fc:0b:
3c:c7:36:74:c7:e7:21:a6:0d:a2:76:fc:68:9f:99:27:c3:ad:
b7:7c:42:5b:b4:32:93:d6:66:d4:10:8e:d0:01:ea:08:19:6a:
1c:7a:27:4f:0e:46:b9:5d:87:d1:4b:e6:72:98:f8:24:cf:54:
b8:b2:89:4e:48:f3:35:30:1a:1b:55:1e:99:e2:8a:20:95:52:
b3:08:e8:26:88:48:a7:ed:e1:28:0c:42:2c:de:df:42:e7:12:
77:b4:64:06:4c:ca:9e:e1:d1:e1:0c:20:c0:20:fc:22:8e:32:
9d:cc:a6:f7:91:f4:53:31:32:75:10:fd:d7:0e:92:6b:6b:4b:
93:5e:a6:f8:38:75:05:a1:17:28:ac:5f:5a:40:75:ee:76:1a:
1c:ed:3e:a3:7f:78:8f:be:a6:e8:15:f3:a9:ab:3c:84:82:bc:
e9:2c:b5:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUJwwkudDZ5Vi/bAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDc3MmEwY2UtZDYyMS00ZDE5LWE2NjYtMTAzMTRiMGFjYTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIou/kJG7c0QVueCLds4QZlZ5DU8sX0sOgAD
WdKqT6RriuAQ7hwV2dG1RYXPQUThfMtp5hyEdP5/R2W7YHbyNpfeF7qafVaZ8nt/
jf7RChlKA9TFzcIONViaL8IUJoVy1puqOX18aMveMB23o+97wy7KacDt70x94AqU
B3ctiVHR8Sn9nRwj0WXvFQmyZ27kC6rpSEyNifFWaMSVDewMr83gEEwSLk7PE4Vw
Qge8zdY+Njic9mhFE7rwLK6G7UY/9leop9rswqJrft8EAk7HZcVMimAK+M49maks
qMHjF/20vCJBc+WS2kBM18w+wdE1+RzJtP2Ci3WYY59dCFu9ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqLl8SCTGKJFZRo0pB2NTvG8Mg8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODVhMGQ5ZmUtNzA2Yy0z
OTg1LWE5ZTEtMGE5ZGZjN2NjM2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTE1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0WA11VJSNBjAaop0oJPE5wgtkZN/a45EYsVJljAbBjI1Qne3auBDNc
o/NFX+79xTLTtO3XkVALVPAcKxBhVJmyXobyFC5MYr4XQu0Oxp6cUrEp5kXTdm/8
CzzHNnTH5yGmDaJ2/GifmSfDrbd8Qlu0MpPWZtQQjtAB6ggZahx6J08ORrldh9FL
5nKY+CTPVLiyiU5I8zUwGhtVHpniiiCVUrMI6CaISKft4SgMQize30LnEne0ZAZM
yp7h0eEMIMAg/CKOMp3MpveR9FMxMnUQ/dcOkmtrS5Nepvg4dQWhFyisX1pAde52
GhztPqN/eI++pugV86mrPISCvOkstRc=
-----END CERTIFICATE-----
Generated at Sun Mar 23 08:21:24 2025 by rpki-client