Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9305196e-2dbe-3dd9-980c-8b288ddd3a71.roa
File: 9305196e-2dbe-3dd9-980c-8b288ddd3a71.roa (raw, json)
Hash identifier: MWpOP5W1Ikv77KtzIeewJOwKL+tWd+neI0MCXAWBLBM=
Subject key identifier: C6:18:2A:A7:8D:15:41:8F:79:88:D9:B1:92:91:A7:33:C2:CD:D2:D0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D79360EE54695726775CF4D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9305196e-2dbe-3dd9-980c-8b288ddd3a71.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 394996
IP address blocks: 65.49.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:36:0e:e5:46:95:72:67:75:cf:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=b3f0cdc2-e97d-4305-8467-08178aa634c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:e7:5e:29:85:ea:6a:ee:b3:77:7d:e2:9c:
27:32:2c:8b:6b:79:a3:3e:9e:04:0a:a2:b9:a4:68:
51:c6:29:ea:f2:43:4e:dd:db:04:61:34:04:4a:c7:
57:3b:fd:80:cf:c9:0c:2f:bf:c9:46:e8:2a:e4:e2:
8e:fa:cd:6a:ca:04:a9:a9:3d:c9:98:61:11:d4:68:
8c:e8:86:67:49:b6:b4:46:db:03:a2:78:56:46:74:
44:37:7f:69:d8:d4:a4:00:d4:b2:c6:0c:12:78:9b:
96:a0:0f:a3:40:4b:5d:c5:34:5c:9c:98:1d:d8:5d:
b2:5f:75:42:e0:fe:0d:bc:2c:f6:a3:7a:dc:ba:13:
21:88:71:36:55:8a:9d:60:ed:54:48:d1:01:b8:4a:
9e:be:dc:cc:00:47:4a:18:1a:62:78:b4:8c:81:c1:
bd:ba:bf:33:32:df:e8:96:22:20:ee:a6:41:13:e5:
c2:d4:28:16:49:36:cb:8a:db:3f:eb:82:f9:ed:02:
76:e8:50:29:55:1a:0c:d6:50:b2:26:26:e0:e3:42:
f4:51:4c:d3:2c:72:c2:6d:cf:40:13:d9:a3:7c:d0:
06:22:9a:e3:2d:2c:dc:10:ed:42:2a:e8:2f:f3:1a:
fc:c1:91:ab:bf:eb:86:5c:9e:53:22:1c:b4:97:ff:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:2A:A7:8D:15:41:8F:79:88:D9:B1:92:91:A7:33:C2:CD:D2:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9305196e-2dbe-3dd9-980c-8b288ddd3a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:dd:21:b5:d9:91:e0:a9:f9:72:fd:f8:52:44:cc:2a:d3:ba:
f7:8d:13:7d:74:59:86:3a:4d:02:e8:00:73:27:83:8b:a9:8b:
6b:9f:06:7b:90:f9:69:da:2f:40:e9:99:2b:96:14:d7:b9:03:
eb:65:77:12:f0:92:42:e9:2b:af:08:61:2f:f3:de:61:a8:47:
73:36:f7:86:65:66:b2:0e:67:0f:a2:ad:10:5e:b5:3e:8c:e8:
01:07:d9:5c:16:b0:40:50:b6:d7:f1:54:85:59:ed:6f:5c:96:
3c:32:58:2e:34:6f:0f:9f:bf:92:c3:c0:bf:3d:18:ba:5c:62:
e6:ed:e8:77:13:0b:7c:24:bf:46:7f:2c:0e:aa:cd:08:de:44:
dd:3f:f1:29:fe:79:39:ea:d6:f1:dc:51:32:09:4b:84:5c:d5:
12:2a:9f:1f:d7:7c:1a:47:69:78:59:7a:d2:12:7c:7b:0f:9e:
27:8a:64:04:d8:da:aa:be:d0:d6:38:9d:7e:21:0a:eb:bc:c7:
d7:e8:a3:95:17:5f:21:d5:52:72:b6:e7:66:7d:02:a9:d4:5a:
c1:20:92:db:2b:42:5f:3d:ba:3a:c2:23:3e:50:4f:b2:0c:69:
21:13:fc:a5:53:7a:85:46:ff:3b:62:b4:12:96:39:d4:b8:02:
aa:44:5e:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD15Ng7lRpVyZ3XPTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDQwNTA0MDAwMFoXDTIyMTAwNTA0MDAwMFowLzEtMCsGA1UEAxMk
YjNmMGNkYzItZTk3ZC00MzA1LTg0NjctMDgxNzhhYTYzNGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGvnXimF6mrus3d94pwnMiyLa3mjPp4ECqK5
pGhRxinq8kNO3dsEYTQESsdXO/2Az8kML7/JRugq5OKO+s1qygSpqT3JmGER1GiM
6IZnSba0RtsDonhWRnREN39p2NSkANSyxgwSeJuWoA+jQEtdxTRcnJgd2F2yX3VC
4P4NvCz2o3rcuhMhiHE2VYqdYO1USNEBuEqevtzMAEdKGBpieLSMgcG9ur8zMt/o
liIg7qZBE+XC1CgWSTbLits/64L57QJ26FApVRoM1lCyJibg40L0UUzTLHLCbc9A
E9mjfNAGIprjLSzcEO1CKugv8xr8wZGrv+uGXJ5TIhy0l//Q9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYYKqeNFUGPeYjZsZKRpzPCzdLQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTMwNTE5NmUtMmRiZS0z
ZGQ5LTk4MGMtOGIyODhkZGQzYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTFOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPdIbXZkeCp+XL9+FJEzCrTuveNE310WYY6TQLoAHMng4upi2ufBnuQ
+WnaL0DpmSuWFNe5A+tldxLwkkLpK68IYS/z3mGoR3M294ZlZrIOZw+irRBetT6M
6AEH2VwWsEBQttfxVIVZ7W9cljwyWC40bw+fv5LDwL89GLpcYubt6HcTC3wkv0Z/
LA6qzQjeRN0/8Sn+eTnq1vHcUTIJS4Rc1RIqnx/XfBpHaXhZetISfHsPnieKZATY
2qq+0NY4nX4hCuu8x9foo5UXXyHVUnK252Z9AqnUWsEgktsrQl89ujrCIz5QT7IM
aSET/KVTeoVG/ztitBKWOdS4AqpEXhc=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:32:40 2025 by rpki-client