Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5d4731e-4992-3a87-9423-4d69ff9bad34.roa
File: b5d4731e-4992-3a87-9423-4d69ff9bad34.roa (raw, json)
Hash identifier: gEPDQKBEa9E0n33LiECymv6BNaamS3vaXEKuMc/xf6Q=
Subject key identifier: CD:26:59:DF:C3:9B:35:FE:BC:FF:89:2B:55:7F:61:50:74:BD:51:4A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858481CA916FF32469D90F2862AC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5d4731e-4992-3a87-9423-4d69ff9bad34.roa
Signing time: Fri 06 Dec 2024 02:30:13 +0000
ROA not before: Fri 06 Dec 2024 02:30:13 +0000
ROA not after: Thu 06 Mar 2025 02:30:13 +0000
asID: 397493
IP address blocks: 64.71.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:a9:16:ff:32:46:9d:90:f2:86:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 6 02:30:13 2024 GMT
Not After : Mar 6 02:30:13 2025 GMT
Subject: CN=f32a0203-0c4a-4299-bd30-325ca9deddb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7b:04:62:39:77:86:13:5f:87:35:c2:89:b2:
0d:c4:a7:3f:d6:78:5c:16:d5:c3:59:5a:f2:13:1f:
55:d1:8c:2d:de:c4:6e:c9:d4:c5:72:b0:6f:aa:cd:
4f:3c:5f:77:85:64:b3:af:6a:ef:25:4c:02:96:86:
86:60:2d:c4:4f:7d:81:71:be:1f:5e:f8:72:4a:7c:
83:ae:c0:ff:68:05:74:90:f0:36:1f:07:e9:3b:76:
b8:62:97:c7:a9:73:57:aa:77:fb:fd:ca:d0:2c:31:
8e:22:58:5a:55:08:de:95:85:59:80:a6:fa:86:45:
e7:03:0d:32:40:16:58:58:f7:e9:96:b6:7f:bb:1c:
c6:87:2b:61:0c:d3:7e:e0:b8:f0:76:a7:69:bb:c1:
99:c3:5f:a1:2f:83:5b:a5:f6:37:9d:6d:3c:12:cb:
22:da:d4:c6:d0:ce:1b:89:33:dd:a4:78:72:cf:cd:
43:c7:6e:d8:2b:2c:6a:e0:c2:1b:b8:54:41:2c:41:
45:29:2e:1b:ab:48:f7:8c:c1:f7:66:67:23:e6:dd:
da:e2:9f:de:77:d4:ee:a2:95:cd:de:91:10:d5:c6:
7f:26:23:26:32:b2:a1:d4:bd:60:39:71:7d:af:e0:
d7:01:9c:49:bd:b6:d0:10:89:f7:15:1d:6b:bf:49:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:26:59:DF:C3:9B:35:FE:BC:FF:89:2B:55:7F:61:50:74:BD:51:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5d4731e-4992-3a87-9423-4d69ff9bad34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:2e:98:69:b4:b3:8c:f2:9e:9d:f6:20:3d:dc:af:2e:9d:a0:
14:31:b2:1e:40:f7:f3:22:0b:d6:d6:cd:48:7c:ea:bf:bc:b8:
58:4c:d0:89:fd:1b:89:3d:78:f6:25:51:8b:85:92:f0:8f:df:
80:c7:63:77:95:bc:62:b5:4f:1b:d3:f6:23:98:13:90:72:40:
15:96:2b:5f:9b:d0:40:d9:70:0a:98:4d:12:aa:2d:b5:ab:82:
bc:72:11:eb:7e:ee:6b:84:5f:d2:bf:23:c7:90:39:9e:f3:66:
b7:11:03:65:a1:96:50:de:a2:e5:c2:15:00:08:cd:16:f8:8d:
df:03:3b:97:ad:eb:81:b0:23:0a:ec:ed:77:f6:4d:77:19:0e:
d3:30:a2:1e:48:88:9d:63:6b:d6:17:24:5f:08:41:7a:cb:70:
3d:7d:fe:f6:5e:b0:60:9e:30:38:a9:15:d3:76:4c:b5:7a:1b:
c1:e0:69:73:79:7e:48:9a:67:64:21:a3:4a:a1:c0:f3:b5:61:
aa:4c:86:c3:1e:89:61:46:69:b2:d2:b1:28:f6:a2:fc:47:2c:
61:c1:9a:3d:43:1b:a1:b3:71:d5:d7:7a:20:19:19:aa:b9:2b:
d0:76:36:77:b2:33:88:c2:e0:c4:d6:23:90:54:e3:d2:34:5a:
5c:bd:3b:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcqRb/MkadkPKGKsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNjAyMzAxM1oXDTI1MDMwNjAyMzAxM1owLzEtMCsGA1UEAxMk
ZjMyYTAyMDMtMGM0YS00Mjk5LWJkMzAtMzI1Y2E5ZGVkZGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3sEYjl3hhNfhzXCibINxKc/1nhcFtXDWVry
Ex9V0Ywt3sRuydTFcrBvqs1PPF93hWSzr2rvJUwCloaGYC3ET32Bcb4fXvhySnyD
rsD/aAV0kPA2HwfpO3a4YpfHqXNXqnf7/crQLDGOIlhaVQjelYVZgKb6hkXnAw0y
QBZYWPfplrZ/uxzGhythDNN+4Ljwdqdpu8GZw1+hL4NbpfY3nW08Essi2tTG0M4b
iTPdpHhyz81Dx27YKyxq4MIbuFRBLEFFKS4bq0j3jMH3Zmcj5t3a4p/ed9TuopXN
3pEQ1cZ/JiMmMrKh1L1gOXF9r+DXAZxJvbbQEIn3FR1rv0m/fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM0mWd/DmzX+vP+JK1V/YVB0vVFKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjVkNDczMWUtNDk5Mi0z
YTg3LTk0MjMtNGQ2OWZmOWJhZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEezMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAumGm0s4zynp32ID3cry6doBQxsh5A9/MiC9bWzUh86r+8uFhM0In9
G4k9ePYlUYuFkvCP34DHY3eVvGK1TxvT9iOYE5ByQBWWK1+b0EDZcAqYTRKqLbWr
grxyEet+7muEX9K/I8eQOZ7zZrcRA2WhllDeouXCFQAIzRb4jd8DO5et64GwIwrs
7Xf2TXcZDtMwoh5IiJ1ja9YXJF8IQXrLcD19/vZesGCeMDipFdN2TLV6G8HgaXN5
fkiaZ2Qho0qhwPO1YapMhsMeiWFGabLSsSj2ovxHLGHBmj1DG6GzcdXXeiAZGaq5
K9B2NneyM4jC4MTWI5BU49I0Wly9Ow0=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:05:14 2025 by rpki-client