Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85ac86cb-818f-3e3b-964e-5c448a97df3e.roa
File: 85ac86cb-818f-3e3b-964e-5c448a97df3e.roa (raw, json)
Hash identifier: JVF10eBylKH27+jznoWu6ZiqygWP8Q+kP59N45664UM=
Subject key identifier: B3:7B:CA:9B:E4:6B:19:29:DF:FA:9F:DD:B4:4C:ED:C7:C4:59:19:8D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285840A882798FA2F0E055A09E9A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85ac86cb-818f-3e3b-964e-5c448a97df3e.roa
Signing time: Sat 21 Jan 2023 12:00:00 +0000
ROA not before: Sat 21 Jan 2023 12:00:00 +0000
ROA not after: Sat 22 Jul 2023 04:00:00 +0000
asID: 399123
IP address blocks: 65.19.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a8:82:79:8f:a2:f0:e0:55:a0:9e:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 21 12:00:00 2023 GMT
Not After : Jul 22 04:00:00 2023 GMT
Subject: CN=822e09ed-add4-4162-b6dc-01a2733ca763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:b0:87:52:a1:3c:c1:48:35:89:9d:d4:6d:
ad:35:1b:7f:6f:5a:f9:a4:83:bb:b7:f6:8d:8e:44:
48:11:95:c9:ae:f7:1e:e6:0b:e3:df:d5:b0:d3:0d:
65:c9:b4:f7:12:e1:de:8e:94:08:7a:c9:b3:85:2e:
a6:7d:10:5c:e0:a7:a1:80:67:bf:28:c8:aa:64:41:
70:b6:4c:00:4d:bc:93:27:1b:a6:42:33:6b:52:2e:
e6:ce:dc:7a:c4:5f:fe:cb:ff:04:7b:ec:9d:50:bf:
e4:c6:df:ee:a0:9c:f2:00:dc:55:ee:08:63:73:41:
70:37:3a:ac:75:d8:c3:c9:fd:61:55:e7:31:18:0b:
53:6c:dc:cd:18:fe:a8:04:38:de:69:2e:b4:65:e1:
4a:68:77:c3:e2:7e:87:d5:1b:a3:ab:63:53:12:2c:
f8:74:5e:8d:3f:93:e7:99:84:b7:a7:16:eb:d4:bf:
55:70:c6:1f:d1:ee:55:8c:c1:12:6c:8c:6b:fc:0f:
45:f4:ef:c6:a5:97:74:c0:df:f1:2f:d3:e8:c4:7c:
98:53:eb:a6:bb:53:18:a9:a1:30:6f:7d:b5:36:14:
9f:11:72:61:65:64:a6:5a:64:a5:63:81:04:d0:f2:
90:cd:55:51:3b:04:52:af:b7:b9:0a:c6:ee:b6:c5:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7B:CA:9B:E4:6B:19:29:DF:FA:9F:DD:B4:4C:ED:C7:C4:59:19:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85ac86cb-818f-3e3b-964e-5c448a97df3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.19.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:90:aa:ed:dd:af:55:4b:f0:bc:3b:39:a1:37:7c:7a:12:95:
49:a4:bf:91:3c:88:e4:0f:7f:d3:ef:4d:d3:8c:0b:94:78:e3:
b4:85:4f:14:95:c5:d9:14:c3:81:d6:c4:6d:fb:cf:28:e6:0a:
9a:92:fd:d8:38:f9:52:40:d6:36:c0:16:3b:f5:e7:3d:75:7c:
a1:66:d5:a0:9d:d0:4d:9a:2b:44:e0:c3:b0:58:13:59:ba:22:
e3:c0:8c:ec:91:79:8e:5f:0c:99:ab:e2:1f:99:0b:8a:d6:76:
c3:f6:ef:14:67:2e:54:16:71:d8:52:28:2d:32:e8:8b:fb:10:
ec:ca:65:1d:18:2e:6b:d5:a2:e4:41:9a:1a:66:e4:22:19:90:
6a:b8:46:fa:74:b9:c9:ed:af:d6:c3:6f:f2:7c:bd:22:9a:95:
48:b0:5e:ea:b6:cb:4a:c0:a1:ce:11:6d:73:98:3c:65:16:5f:
f3:1f:d8:82:2e:62:ef:16:b8:c3:37:40:1c:bc:6d:bf:5d:08:
dc:c6:46:6c:6d:b7:10:77:41:d7:0c:5c:55:d0:cb:d2:e4:89:
a9:3a:e2:1a:0e:b2:b8:6e:3a:ad:5c:03:65:65:4d:34:f9:a6:
ca:04:19:c1:84:b9:fe:fe:2e:ab:83:17:95:51:f4:b7:38:cd:
8f:b5:60:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:50 2025 by rpki-client