Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab6341b1-2afd-32f0-ae89-e7b391229c29.roa
File: ab6341b1-2afd-32f0-ae89-e7b391229c29.roa (raw, json)
Hash identifier: UYHBgx+F6AV8PjsFWORUGdjW6t9wS96Yq9bdfy6/w4I=
Subject key identifier: 4F:48:9E:60:7B:F1:E0:1B:DE:81:40:29:9C:3E:FE:98:5B:BD:EF:AB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648E9EB7797F069EDC8F1F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab6341b1-2afd-32f0-ae89-e7b391229c29.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 54288
IP address blocks: 216.218.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:9e:b7:79:7f:06:9e:dc:8f:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=a67906d7-e16e-4e79-a7a5-0de9b716180c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ea:60:fe:b7:d8:45:a9:94:09:6d:7d:1e:f4:
bf:fe:ea:30:27:43:15:fd:96:76:21:3d:8e:28:69:
11:bf:9a:6a:47:dc:51:75:ff:a7:49:5e:3a:17:ea:
d7:2b:db:67:e7:5b:4b:ea:d3:d5:7b:25:d8:67:b6:
2e:01:77:a5:2f:55:7c:ab:c7:d8:02:e3:b5:05:7a:
88:5e:16:bf:b7:58:a4:90:5f:27:ad:58:16:11:e3:
66:06:08:e5:a1:c4:9b:5e:8a:ba:51:91:84:8e:09:
ac:0f:e4:27:27:e1:42:85:5a:0d:32:bf:d2:a8:28:
65:19:d5:a9:2f:de:ba:f5:9a:4e:79:8e:cb:b0:7c:
6d:01:f4:0b:a0:71:59:df:f5:8d:7a:1c:55:ae:e0:
22:52:82:b1:80:b9:e6:50:af:40:69:52:25:81:ac:
b1:11:e3:cf:96:e4:82:a8:0d:05:8a:48:1f:79:07:
29:73:81:c2:4b:06:72:34:c5:10:12:30:96:e8:81:
83:35:0c:5b:f4:ac:90:69:28:21:e1:dd:30:89:68:
49:41:47:1a:d0:01:6c:7d:e3:64:64:9f:46:66:f3:
e3:3b:e3:6c:f8:50:bc:0d:52:41:2e:05:17:b0:73:
78:70:3b:25:7d:20:1a:22:87:00:8c:41:e6:5f:ec:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:48:9E:60:7B:F1:E0:1B:DE:81:40:29:9C:3E:FE:98:5B:BD:EF:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab6341b1-2afd-32f0-ae89-e7b391229c29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.218.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:ed:9a:a0:5e:18:a8:d2:51:95:7b:a6:18:87:52:c8:91:85:
1c:71:53:e9:18:bb:79:16:d4:67:d8:88:dd:be:98:10:c2:5d:
d1:f5:67:c0:96:dc:ed:1d:8c:de:cd:49:a7:ab:fd:b5:7d:0a:
3f:f4:3a:72:45:cb:22:d4:b4:a5:0f:6f:f8:6b:34:03:2a:a2:
84:07:89:52:59:b3:3b:7b:21:ca:b9:76:84:fd:01:c4:97:c6:
75:1d:52:cb:6e:41:a1:0a:a9:0b:ed:ff:5c:81:70:c7:72:3b:
a2:03:b0:9d:b9:62:34:c6:4b:72:32:9b:bb:1f:5f:08:e9:bf:
0f:c9:b6:49:f1:82:f0:c9:47:98:29:23:03:2a:0e:91:67:ac:
2d:a6:8d:9e:11:f3:db:a6:d4:02:2a:c1:84:12:04:ce:30:9f:
0e:0b:e3:07:b5:7e:64:2a:70:fe:22:41:9f:17:14:55:77:e2:
3b:74:0b:19:6f:3e:c9:0e:71:c7:ac:ec:14:50:cc:99:c5:49:
19:28:d0:7f:cb:b6:6c:c6:db:3e:e5:f5:9f:18:4f:4c:47:e6:
ff:4e:da:3f:df:25:55:0b:c5:9d:28:ec:87:3b:68:d0:38:54:
6e:44:10:3f:cf:9e:30:36:df:37:d0:17:ac:dd:8b:e8:ec:21:
5a:db:9d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:44:59 2025 by rpki-client