Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae053d1e-0d49-338c-b069-eff22e191a71.roa
File: ae053d1e-0d49-338c-b069-eff22e191a71.roa (raw, json)
Hash identifier: 0vR4R4ZLnfbcNfpxE4iVgf11icxUBgFm8JlPD7k8Co8=
Subject key identifier: A7:33:38:3B:C2:C0:B5:68:03:6D:A6:D4:8C:1F:61:1F:A0:59:89:04
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA6E74D51B283672A4D9980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae053d1e-0d49-338c-b069-eff22e191a71.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 54288
IP address blocks: 66.160.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:e7:4d:51:b2:83:67:2a:4d:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=4c339fd5-ea4e-40aa-ba09-bf1263d5a5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:cd:c1:a6:78:8e:c1:a7:c1:d8:d8:10:a2:
ec:e7:93:ab:1e:41:d1:d0:a4:26:cd:cf:e6:d0:91:
0f:f9:f5:1a:45:be:a9:8d:8a:9c:92:bc:c8:ee:a0:
6e:ef:92:98:1a:b1:5e:bb:9b:3f:8c:97:aa:56:56:
11:5f:63:70:ce:01:aa:94:71:c8:a1:7d:56:91:aa:
9e:61:80:5a:ae:af:90:60:b9:78:dc:08:43:b2:29:
37:c0:ed:e6:76:92:90:50:de:26:5e:b6:a3:bd:cf:
5d:ce:4a:f3:f0:5e:bc:69:b5:14:5e:c7:28:92:d9:
b2:03:30:12:47:1b:6e:2e:94:a2:a2:2d:d2:7c:d6:
e2:94:b4:c1:72:88:ce:17:9b:5a:b4:9f:d0:73:07:
ef:be:e7:ea:13:46:e3:d2:09:ca:7d:81:9f:89:dc:
5d:92:4e:96:9d:04:00:86:ac:7e:85:1e:81:5f:bc:
5d:51:f4:26:aa:22:44:fc:33:50:52:a6:3e:5c:78:
ba:80:4b:ba:de:38:ba:90:94:a2:03:be:2b:9a:7a:
13:9e:c0:38:a8:eb:87:f9:63:35:30:64:dc:29:ef:
ee:65:67:d5:79:2f:d2:fc:13:f5:39:3b:be:06:3c:
88:a3:01:a3:98:7d:1a:33:70:5a:ab:55:86:fc:88:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:38:3B:C2:C0:B5:68:03:6D:A6:D4:8C:1F:61:1F:A0:59:89:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae053d1e-0d49-338c-b069-eff22e191a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:28:eb:0f:aa:2e:4c:ed:45:aa:74:b5:51:01:02:26:0d:9f:
0e:e9:28:a5:86:e9:39:c2:91:ff:d4:0e:56:a0:d2:ef:53:09:
cf:d3:ff:04:d3:77:ac:0d:01:49:c6:b7:cb:59:95:10:f6:72:
82:b5:d8:e6:42:91:63:09:15:94:f6:9c:9e:29:8b:02:a1:5f:
27:19:be:66:60:e2:30:74:2b:7c:d0:ec:55:9f:19:58:5f:ce:
10:c3:08:68:c4:d5:30:2f:9a:d9:d2:42:54:b6:80:3a:93:1c:
3a:6d:0b:09:19:39:e2:a5:fd:ea:86:b9:0a:84:08:93:34:83:
fa:2f:10:83:f1:67:d6:fe:ec:e4:8d:a5:bf:10:19:01:9e:f0:
9d:39:65:1e:6a:cc:7e:e8:8a:8c:a2:40:bb:e0:9a:5d:4a:36:
df:1c:8c:e2:42:23:65:7a:c5:07:a7:83:10:b9:2b:50:a4:ae:
5a:ff:5a:01:8a:87:d8:97:c6:a8:9a:0a:d6:b3:66:f5:e4:fd:
2a:0c:b3:ee:44:b2:53:c2:33:4d:9a:2e:9b:9b:ec:8c:5e:b3:
98:48:ed:b6:2b:a4:6e:23:ef:39:a1:1c:80:99:42:d1:f3:e4:
40:02:97:d0:1f:13:14:ac:fb:64:10:92:91:00:06:2d:bd:74:
4f:13:c9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:30 2025 by rpki-client