Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9125ea3d-f8d2-388b-8005-ce94436059dc.roa
File: 9125ea3d-f8d2-388b-8005-ce94436059dc.roa (raw, json)
Hash identifier: iKIk73onFPYAp74t5xcEXuR7yWCAfCR4UnqOBajShsI=
Subject key identifier: E6:5B:71:C3:F7:8F:A4:73:C0:4B:0A:05:E4:24:92:3B:EE:05:47:D1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648DE5EE1367C33BD5637780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9125ea3d-f8d2-388b-8005-ce94436059dc.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 25582
IP address blocks: 64.62.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8d:e5:ee:13:67:c3:3b:d5:63:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=208453af-3366-42db-aca4-1bd0e62b4ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:86:9b:c0:c7:09:ae:e9:5b:0d:38:e2:e0:
a7:f3:35:9d:ac:33:77:d8:a9:7e:aa:1e:58:8d:cf:
af:60:91:72:f9:76:26:ea:e1:b9:52:a4:a3:52:a0:
03:04:aa:f6:94:08:fc:93:c1:70:b5:82:80:45:9c:
8b:c7:3c:45:71:ad:74:2c:d4:4f:cb:d3:ab:69:95:
84:f5:ae:54:2a:ba:66:59:29:bf:8d:e3:ea:cf:52:
4c:c7:00:f3:7d:0a:f8:99:24:dc:d7:73:0c:de:80:
6d:44:16:a0:fc:8a:16:a2:4b:ba:8f:bf:93:00:95:
e4:5b:70:fe:4e:db:c5:9f:71:d1:7b:41:2d:09:e3:
44:c7:69:be:68:ec:31:f5:16:00:0f:ae:9c:77:e4:
79:bd:fd:5e:87:5e:d1:64:dd:3c:05:04:50:5d:62:
09:fd:52:93:2b:9d:63:76:f1:08:cf:06:22:9b:a2:
34:ae:a0:7c:49:9d:65:0c:0f:00:cd:1b:38:6f:d5:
00:8e:14:6f:0e:d1:e5:e6:15:87:8e:92:7d:d4:05:
ae:45:43:41:cc:a0:a8:8e:44:0c:58:b1:9a:92:47:
09:3b:d0:db:13:f0:96:5b:2a:80:05:54:97:87:57:
03:12:0c:1b:d5:1d:8c:00:c1:fd:ff:7f:0d:84:94:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5B:71:C3:F7:8F:A4:73:C0:4B:0A:05:E4:24:92:3B:EE:05:47:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9125ea3d-f8d2-388b-8005-ce94436059dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:f5:9a:5c:a5:d5:62:76:73:2c:a4:7f:be:2a:10:0e:c1:38:
9f:7c:f7:44:30:78:eb:10:13:f8:e6:1e:60:6c:19:24:33:23:
f5:5e:cf:77:c7:be:89:d6:7b:4c:f0:2c:9c:15:f2:e9:25:6a:
50:c1:86:94:e6:e7:e2:b3:b7:12:a2:a7:72:00:a2:be:c3:ca:
34:9b:5a:f8:35:fc:0d:36:c7:46:6f:22:a2:d2:b1:b7:9a:49:
c2:52:7b:da:9b:4b:fb:91:d4:a3:f7:60:68:9c:2c:74:c0:64:
7d:00:22:05:b6:f5:b6:89:16:c0:d3:0b:df:a6:48:7a:f0:b4:
8b:4d:32:71:b0:50:39:83:aa:6a:9f:bb:8e:c4:d5:2b:47:4f:
d0:3e:2c:2a:f4:02:52:fc:8f:e7:70:fe:20:2a:e6:29:17:4d:
de:06:bf:25:3b:16:da:14:09:e4:7f:c4:a7:a5:60:b2:9c:fc:
fc:aa:30:35:04:0c:f8:ba:ed:cf:e5:28:87:19:1e:d2:b8:55:
c2:8d:2a:51:92:f7:ef:84:e7:e4:1b:e7:a2:6d:32:5c:d1:49:
e9:a0:91:cb:89:8a:30:24:67:94:2f:6e:1f:7a:f6:c3:c4:ce:
8f:e4:5e:50:ff:f1:52:dc:2f:4b:75:7f:72:62:2d:70:2a:44:
a1:72:3d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:22:10 2025 by rpki-client