Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8866b4d-43b3-36f5-b4fe-cff631ad1a17.roa
File: b8866b4d-43b3-36f5-b4fe-cff631ad1a17.roa (raw, json)
Hash identifier: +KOoxHYF8iZIplhdpnO6qkzid30hGrgxBwXD+ZoAAFY=
Subject key identifier: A0:13:69:E3:F3:33:18:B8:46:9B:20:14:52:86:05:47:70:B6:CE:71
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A512ABE46186CCF05290448
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8866b4d-43b3-36f5-b4fe-cff631ad1a17.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 394996
IP address blocks: 64.62.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:2a:be:46:18:6c:cf:05:29:04:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=9cfec000-1834-46b6-a785-eaf4c7ad11b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:4f:58:aa:90:67:b8:ba:41:aa:29:a2:3f:
bf:5e:74:5c:46:1d:80:8e:10:f4:17:f1:59:6c:50:
6e:61:ba:5c:01:2e:98:ee:7f:67:d1:05:3c:fb:8c:
3e:b0:0a:4e:c0:b0:35:f7:70:d5:12:6b:74:d1:82:
f5:0f:46:74:8e:c4:05:11:db:1f:33:9f:4c:30:23:
28:58:06:0a:ff:72:cc:61:c9:d3:5a:6b:66:6c:f5:
43:28:eb:6d:01:65:82:e8:0e:40:0e:06:f0:7a:c5:
a3:6c:6c:76:9d:93:99:e5:c8:1c:91:a5:a2:fc:a7:
d4:53:a7:05:12:2c:67:ba:05:59:f4:15:f7:b6:e4:
e2:1d:08:31:62:dc:23:90:71:29:50:90:cf:81:39:
92:b4:f5:e1:ee:d9:dc:f2:ab:63:7a:4e:16:19:a6:
82:a2:4b:d1:bf:2d:18:86:c6:65:ce:6d:54:f0:82:
6f:3c:4d:83:c8:d8:01:83:5a:77:c0:a4:5e:3e:07:
63:01:f2:71:fa:2d:e8:5d:43:f3:f1:f9:81:b5:8f:
96:93:22:43:c3:b7:66:a2:2c:55:90:e5:37:e5:71:
ae:60:fd:70:04:c4:84:89:79:38:69:f4:3b:8a:ce:
2d:04:63:60:7f:26:5b:a0:dd:d8:df:72:01:98:b4:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:13:69:E3:F3:33:18:B8:46:9B:20:14:52:86:05:47:70:B6:CE:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8866b4d-43b3-36f5-b4fe-cff631ad1a17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:c1:2f:f5:e6:05:d6:81:46:c4:e4:13:82:8e:ee:42:1f:78:
a1:4b:2a:34:2b:16:9d:3e:b1:f8:54:65:c5:01:89:fd:58:d1:
c3:95:3c:d5:b4:d0:de:5e:95:d0:09:96:cb:0c:db:e9:4c:89:
03:45:cd:c1:6d:e9:db:72:64:76:54:d0:02:2f:4d:21:5c:02:
6e:4a:74:94:4a:e3:f2:54:c3:aa:95:ec:f5:1c:27:89:f3:71:
8e:a0:80:14:80:a2:e8:14:01:f1:5a:7c:9c:fa:d0:c4:b9:5f:
d0:ed:58:9e:8b:d1:0d:bc:41:e4:21:f2:ae:27:b1:9a:a4:bd:
3f:32:be:8b:8d:9d:99:29:54:72:f0:af:5e:fc:84:04:d8:7d:
f1:d5:76:08:18:b1:c2:58:1b:e8:62:40:4c:69:03:9e:20:60:
64:a0:8c:ee:ad:73:0f:46:a6:6e:d9:7b:12:e5:2d:a0:72:51:
05:a0:94:86:b4:d1:a9:b6:48:49:16:d2:46:64:18:06:63:08:
8b:11:9c:7e:74:40:fb:11:0c:04:c4:7c:8d:eb:e6:e2:06:5e:
fa:bb:92:4c:6d:c3:b9:3b:6b:59:78:c7:31:6c:1b:a9:8e:72:
0d:60:dc:ab:01:62:5c:f8:04:8c:3c:c2:66:3c:f6:2d:d8:a9:
76:c7:3f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:28 2025 by rpki-client