Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af44c525-c748-3db0-9ebc-285d3ef3b178.roa
File: af44c525-c748-3db0-9ebc-285d3ef3b178.roa (raw, json)
Hash identifier: eiAhc0v0OMtn5cgLblexIHV1VM+MTZRmmvFiq6pe4Bc=
Subject key identifier: 5E:C2:BF:64:3F:7D:04:13:C6:AF:65:2B:64:BC:67:A1:FD:33:2E:0A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648DDF9D012BA830757E3200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af44c525-c748-3db0-9ebc-285d3ef3b178.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 19330
IP address blocks: 64.62.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8d:df:9d:01:2b:a8:30:75:7e:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=bc5b8065-f66c-4b68-8184-010aacf86d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:5a:ef:03:ba:c2:67:87:d8:5f:e1:43:ae:
c7:b9:31:ff:40:ef:ef:18:f8:ad:75:7f:dc:6d:ad:
8e:d7:e0:85:90:ac:92:20:ad:5f:d2:6f:38:ac:9e:
59:2d:c3:61:1f:42:a0:19:e6:92:6f:6a:3e:99:e7:
be:10:90:87:35:04:55:be:5e:b4:ee:2a:3f:99:da:
01:99:31:f2:03:91:72:9c:b5:e4:42:da:a2:70:49:
7b:fb:b3:9a:ac:63:d1:ed:42:1d:80:17:48:8d:88:
5e:83:58:79:01:eb:27:12:42:78:89:16:a1:61:ce:
15:4b:86:17:0e:ec:e4:b1:98:f1:e5:2d:6e:7e:a2:
97:d7:3e:06:9f:d0:d5:e5:c1:a7:a0:52:59:b9:25:
bc:34:d6:34:fe:cc:64:00:d9:95:fd:a3:c3:9b:0c:
8a:6d:65:5c:36:c1:98:81:f7:5f:c7:2d:46:1f:b1:
7a:78:42:b9:84:41:4b:c8:27:2c:86:14:d8:06:a6:
e3:22:6d:8a:98:aa:b6:ab:1d:1e:09:7e:8c:ce:bf:
39:d8:6c:ff:fd:47:83:2a:49:44:e8:0c:29:cc:85:
ad:9f:40:43:1a:23:53:f5:bf:70:9e:d1:7c:73:89:
ba:91:54:bf:74:c4:84:e7:55:4a:ac:74:c8:70:03:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C2:BF:64:3F:7D:04:13:C6:AF:65:2B:64:BC:67:A1:FD:33:2E:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af44c525-c748-3db0-9ebc-285d3ef3b178.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:0b:54:0f:4e:57:3b:72:6a:8b:c1:05:d1:6e:24:e9:71:bc:
cd:e6:f5:d8:92:cf:18:c9:cf:e2:e9:c9:f1:ab:57:97:8a:9d:
4b:15:aa:2c:59:26:46:ec:1e:80:76:7c:24:17:32:c1:a1:17:
0c:46:bf:e1:17:7b:77:9d:e7:df:b2:a8:0a:b5:d1:a4:61:71:
dd:35:59:8e:a8:b2:5b:f9:55:28:60:9b:b5:3e:3d:e1:b2:2b:
b7:4c:d3:e8:4d:19:bc:a7:40:81:e7:56:7f:0c:1c:5d:93:1e:
d0:f2:df:b8:a1:68:19:9c:08:bc:51:ac:b6:ec:83:59:5b:5c:
1c:5c:51:de:39:4a:00:6d:9e:e1:29:de:a7:ec:e5:b2:e5:59:
7b:1d:5b:d5:7e:df:be:4e:56:a3:dc:18:bf:86:6b:e7:6e:f8:
a6:7a:cd:4d:2c:b2:50:18:97:54:23:1c:a7:39:92:3a:58:34:
1b:79:7e:e0:c0:d7:e2:f5:e1:36:a3:fb:06:e3:80:d6:7f:2b:
75:30:6e:d7:d2:74:8c:fe:0f:c3:17:dc:6e:59:66:26:46:f1:
4b:8c:de:5b:8d:82:2f:ef:6e:d4:64:4e:57:7e:79:64:44:41:
a6:0e:8e:cb:10:3e:14:a5:91:d0:6b:6a:21:3c:f3:c2:11:5e:
1b:73:d8:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9kjd+dASuoMHV+MgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
YmM1YjgwNjUtZjY2Yy00YjY4LTgxODQtMDEwYWFjZjg2ZDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGda7wO6wmeH2F/hQ67HuTH/QO/vGPitdX/c
ba2O1+CFkKySIK1f0m84rJ5ZLcNhH0KgGeaSb2o+mee+EJCHNQRVvl607io/mdoB
mTHyA5FynLXkQtqicEl7+7OarGPR7UIdgBdIjYheg1h5AesnEkJ4iRahYc4VS4YX
DuzksZjx5S1ufqKX1z4Gn9DV5cGnoFJZuSW8NNY0/sxkANmV/aPDmwyKbWVcNsGY
gfdfxy1GH7F6eEK5hEFLyCcshhTYBqbjIm2KmKq2qx0eCX6Mzr852Gz//UeDKklE
6AwpzIWtn0BDGiNT9b9wntF8c4m6kVS/dMSE51VKrHTIcANWywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7Cv2Q/fQQTxq9lK2S8Z6H9My4KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWY0NGM1MjUtYzc0OC0z
ZGIwLTllYmMtMjg1ZDNlZjNiMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD6hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMALVA9OVztyaovBBdFuJOlxvM3m9diSzxjJz+LpyfGrV5eKnUsVqixZ
JkbsHoB2fCQXMsGhFwxGv+EXe3ed59+yqAq10aRhcd01WY6oslv5VShgm7U+PeGy
K7dM0+hNGbynQIHnVn8MHF2THtDy37ihaBmcCLxRrLbsg1lbXBxcUd45SgBtnuEp
3qfs5bLlWXsdW9V+375OVqPcGL+Ga+du+KZ6zU0sslAYl1QjHKc5kjpYNBt5fuDA
1+L14Taj+wbjgNZ/K3UwbtfSdIz+D8MX3G5ZZiZG8UuM3luNgi/vbtRkTld+eWRE
QaYOjssQPhSlkdBraiE888IRXhtz2MM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:26:11 2025 by rpki-client