Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a64b9bcf-2d69-3e52-a191-b6595a8cd77d.roa
File: a64b9bcf-2d69-3e52-a191-b6595a8cd77d.roa (raw, json)
Hash identifier: nt3GLg1c3HJXdyyH8ZMHlgdE3aSrTFlSXMpxArD/Yog=
Subject key identifier: 82:17:78:3D:D8:95:26:E4:F0:E7:40:90:B4:4E:AF:81:5E:BD:F2:CC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842C4984321EFC91CB0421F0300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a64b9bcf-2d69-3e52-a191-b6595a8cd77d.roa
Signing time: Wed 02 Aug 2023 12:00:00 +0000
ROA not before: Wed 02 Aug 2023 12:00:00 +0000
ROA not after: Sat 03 Feb 2024 05:00:00 +0000
asID: 212573
IP address blocks: 216.66.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c4:98:43:21:ef:c9:1c:b0:42:1f:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 2 12:00:00 2023 GMT
Not After : Feb 3 05:00:00 2024 GMT
Subject: CN=a80623b4-9145-418a-ada5-2a10699f79de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:2d:c0:b1:9b:2b:90:2a:dd:27:6d:47:ac:
3f:0d:7a:18:4f:14:65:99:7c:8a:4a:62:fa:c7:9f:
c1:a2:5e:c2:7f:d0:07:2e:b5:fe:e5:7d:a8:96:dd:
6a:d5:a7:9e:5e:f5:90:22:f9:36:68:79:26:7a:26:
aa:a2:9a:1e:56:1f:61:05:08:eb:da:46:8e:80:cc:
09:a3:2c:dc:4e:bc:25:06:5b:82:7f:6f:f4:03:6e:
07:81:70:84:b6:eb:ed:58:c6:47:b8:a3:6f:dc:c7:
95:16:99:29:2e:57:14:a4:aa:36:05:c3:a1:22:a1:
c8:f5:6e:8d:5d:ed:df:3f:d6:87:b0:b6:f2:fc:04:
7e:06:30:11:00:39:85:95:51:ee:b4:d1:79:52:bb:
ff:27:65:1f:c4:b8:48:d2:5f:5e:fb:37:16:86:6e:
a1:5f:bd:c9:b0:89:dd:89:27:35:20:e5:08:62:2b:
83:0f:c4:80:15:12:ae:c2:d7:04:dc:7a:f5:34:3f:
e3:7e:0a:60:6f:33:a9:57:c9:4b:5b:66:d1:de:41:
1a:39:53:ac:98:a0:26:51:6b:45:25:b2:36:e4:cf:
0b:6a:fe:25:90:11:a1:8a:be:06:7e:81:06:2e:9c:
88:d9:e2:42:ba:2f:4e:f5:b3:bf:29:19:6e:58:4a:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:17:78:3D:D8:95:26:E4:F0:E7:40:90:B4:4E:AF:81:5E:BD:F2:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a64b9bcf-2d69-3e52-a191-b6595a8cd77d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:ca:d6:86:5a:d2:db:ee:b7:5e:0a:8f:79:db:1d:39:fa:1e:
c4:3f:00:92:a7:a7:22:d2:08:65:85:19:c5:a4:6c:5b:53:89:
d1:27:f3:cc:cf:c9:3e:6a:38:76:53:16:16:a0:aa:3b:40:04:
45:6e:a5:b6:7a:ea:34:a5:40:6c:b3:f6:d0:31:64:e2:c6:fe:
4f:0e:d0:6e:91:f0:7b:55:2e:6a:b1:ff:e7:01:91:1f:2f:d9:
c3:ac:eb:ad:ab:74:2e:d8:c8:ad:05:55:53:52:e8:3c:f3:ec:
42:3b:7d:3a:01:05:25:9b:bb:77:95:e6:d8:70:0e:44:74:8c:
f3:6b:82:25:9e:b2:a3:fd:4b:61:cf:1a:c1:52:3a:6b:54:9e:
44:fb:35:9a:3b:45:c2:8a:62:d2:fc:80:9f:3a:d8:7e:a2:08:
c0:bc:58:0e:f3:fa:c8:98:52:df:e8:26:4b:3d:07:d9:9e:4b:
c4:d0:68:0a:9f:f7:0d:75:d7:20:ca:85:31:02:bd:69:ba:59:
79:6d:a8:94:7d:98:bc:c4:72:2d:20:91:88:f8:75:91:5d:96:
62:68:c1:53:f8:96:81:74:09:25:b5:56:42:5f:05:fb:72:f7:
7b:12:6b:14:0e:bb:b8:6f:9c:2e:12:69:fe:04:8f:9b:45:62:
76:e8:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:17:38 2025 by rpki-client