Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af6e7878-d9b4-3ffc-b1cc-87a7fa7edafb.roa
File: af6e7878-d9b4-3ffc-b1cc-87a7fa7edafb.roa (raw, json)
Hash identifier: i38Ah485EEhrcqTagcf3Tp62Uzzy/5yiWQ0OO7v7WlA=
Subject key identifier: 0C:09:4D:F7:81:4D:D2:FB:66:4E:1C:9C:0A:49:00:4D:24:EA:1F:90
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA6AE14A9F216D31ECC6100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af6e7878-d9b4-3ffc-b1cc-87a7fa7edafb.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 394996
IP address blocks: 209.51.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:ae:14:a9:f2:16:d3:1e:cc:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=300db7bd-3160-4b02-b697-df95e9292356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:e3:8c:e0:d7:a2:fb:b3:88:41:02:d9:fd:
a1:a5:c3:5e:90:35:f5:93:b8:9d:39:b7:d3:cc:98:
89:0f:1b:16:03:cc:85:89:65:5a:79:9a:20:2b:5c:
12:be:1f:96:a3:51:21:a7:0d:92:5f:25:4f:a1:6c:
62:1b:12:11:2e:59:b6:83:1f:e1:53:a7:c2:59:87:
3e:45:e6:ba:78:ec:2d:b2:cf:66:45:76:48:9a:d0:
de:dd:de:7b:8d:78:75:77:d4:74:9d:7f:92:54:0d:
ac:e1:96:f2:fb:13:34:9a:7e:fa:0b:16:21:82:fa:
b3:82:8c:37:9b:63:52:59:b4:8d:a9:e1:fd:be:ee:
ef:30:f4:b2:3f:0e:ee:d7:29:d6:44:b3:e1:f1:22:
f5:79:fd:7d:3b:4c:49:87:e3:cd:7f:50:cf:c6:1b:
4c:08:78:a5:ee:9f:29:dd:74:98:3d:e4:23:9c:00:
99:4a:24:e8:f2:4e:eb:a1:26:21:83:44:bd:04:2b:
ca:ce:40:9a:82:79:f2:c9:ed:8d:5f:0b:21:32:1a:
89:71:72:4b:73:29:63:2c:f3:c0:41:90:42:57:f9:
79:07:93:dd:20:b0:bf:8a:9e:2f:d0:f8:5d:c4:82:
f4:e6:15:08:78:4e:de:6c:8e:9a:cc:c5:45:db:59:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:09:4D:F7:81:4D:D2:FB:66:4E:1C:9C:0A:49:00:4D:24:EA:1F:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af6e7878-d9b4-3ffc-b1cc-87a7fa7edafb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:96:ad:18:6c:14:9e:84:19:f4:25:cf:26:34:d1:33:88:f7:
f6:2e:ab:0c:13:0f:dc:0c:52:d5:d1:9e:b4:73:ee:a3:04:68:
61:f8:9d:0e:68:56:d0:bf:75:6b:df:f6:a3:83:7d:4e:a0:a5:
bd:dc:05:07:aa:04:3b:3c:27:70:60:41:c2:29:d7:55:54:12:
b2:2b:a0:9e:3b:35:5b:3a:55:6b:89:1c:c7:d4:50:04:ff:f0:
65:f4:e3:d4:0d:f2:de:90:43:65:bf:c7:96:43:ce:75:a1:25:
8f:d4:3c:3b:a6:66:b8:16:dd:be:13:62:82:92:3c:9a:32:79:
e9:67:f9:5f:b2:20:70:bb:cc:8b:05:a3:10:dc:81:26:43:c3:
78:84:45:71:bf:0f:0b:8b:48:75:e3:d4:f0:d8:cc:45:86:6f:
03:3d:97:a7:69:d6:07:0b:99:2f:84:8e:bf:0b:f6:b8:9b:76:
d0:db:8e:52:0d:19:25:2c:de:c2:10:de:bc:fb:db:0d:04:b8:
3a:77:93:7d:ec:d2:a3:cd:75:2e:7c:2a:8b:bf:f1:94:62:5f:
65:2f:56:85:f9:95:83:b3:a1:df:cc:4f:85:53:c8:18:18:e0:
e4:89:8c:de:82:33:9d:22:56:32:d6:20:5b:9f:49:9f:6e:8d:
b3:46:24:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDv9pq4UqfIW0x7MYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MzAwZGI3YmQtMzE2MC00YjAyLWI2OTctZGY5NWU5MjkyMzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyPjjODXovuziEEC2f2hpcNekDX1k7idObfT
zJiJDxsWA8yFiWVaeZogK1wSvh+Wo1Ehpw2SXyVPoWxiGxIRLlm2gx/hU6fCWYc+
Rea6eOwtss9mRXZImtDe3d57jXh1d9R0nX+SVA2s4Zby+xM0mn76CxYhgvqzgow3
m2NSWbSNqeH9vu7vMPSyPw7u1ynWRLPh8SL1ef19O0xJh+PNf1DPxhtMCHil7p8p
3XSYPeQjnACZSiTo8k7roSYhg0S9BCvKzkCagnnyye2NXwshMhqJcXJLcyljLPPA
QZBCV/l5B5PdILC/ip4v0PhdxIL05hUIeE7ebI6azMVF21kVHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAwJTfeBTdL7Zk4cnApJAE0k6h+QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWY2ZTc4NzgtZDliNC0z
ZmZjLWIxY2MtODdhN2ZhN2VkYWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TOqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmWrRhsFJ6EGfQlzyY00TOI9/YuqwwTD9wMUtXRnrRz7qMEaGH4nQ5o
VtC/dWvf9qODfU6gpb3cBQeqBDs8J3BgQcIp11VUErIroJ47NVs6VWuJHMfUUAT/
8GX049QN8t6QQ2W/x5ZDznWhJY/UPDumZrgW3b4TYoKSPJoyeeln+V+yIHC7zIsF
oxDcgSZDw3iERXG/DwuLSHXj1PDYzEWGbwM9l6dp1gcLmS+Ejr8L9ribdtDbjlIN
GSUs3sIQ3rz72w0EuDp3k33s0qPNdS58Kou/8ZRiX2UvVoX5lYOzod/MT4VTyBgY
4OSJjN6CM50iVjLWIFufSZ9ujbNGJA4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:26 2025 by rpki-client