Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c07a52bb-350e-3438-b104-cbd3b9be8c1f.roa
File: c07a52bb-350e-3438-b104-cbd3b9be8c1f.roa (raw, json)
Hash identifier: vthmRGNnJODKMwoRCJ7hxNnL92Rd/h5FbZ/Nc0P8pCI=
Subject key identifier: 4A:98:35:00:37:6D:17:31:A2:31:19:A5:99:5A:35:83:10:6C:22:A7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA670DE20B9426F903BF100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c07a52bb-350e-3438-b104-cbd3b9be8c1f.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 36103
IP address blocks: 74.82.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:70:de:20:b9:42:6f:90:3b:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=30f0a4e3-b8fe-4a90-a3f6-a8e9a3fec8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:82:0e:7b:5a:83:0c:93:24:e4:52:bb:20:
b8:77:3b:85:5c:a9:13:97:c2:c3:0e:79:41:d1:a5:
ef:41:fd:d1:a9:8e:7d:2e:0d:f0:d7:71:93:39:2f:
08:11:b3:13:ff:bf:a2:44:a9:37:09:4f:c9:6e:e9:
1a:5b:6b:27:35:31:27:dd:f7:11:6e:b5:c6:e9:8a:
7a:f6:23:36:6b:fc:45:c0:d1:73:ab:77:8d:d3:08:
c3:b7:46:47:20:b6:22:a0:b2:5c:72:b0:8a:e9:57:
5c:e2:1a:f2:95:74:8c:2a:d8:ca:33:89:6f:70:39:
71:81:2f:45:bd:8f:e9:55:ee:b9:c0:2a:23:60:a5:
b5:6e:cc:45:12:c4:ab:29:39:a3:5c:d3:6b:db:01:
cc:ae:17:b6:56:24:00:fa:81:ab:92:1e:e2:43:5c:
e7:b7:33:00:5d:d5:d6:f1:4b:62:9a:a8:6e:61:8c:
77:3c:53:2a:9c:df:86:8a:ed:aa:dd:e5:6a:01:f5:
91:62:8a:b0:2c:88:e5:89:14:93:ee:73:93:49:70:
86:01:d0:f9:53:ac:b0:de:1b:0e:93:f3:4c:4c:05:
26:83:da:df:71:30:c5:da:26:ad:ff:fe:e9:d2:d2:
9a:d6:da:48:2a:a5:af:18:08:3a:1a:99:7b:fc:49:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:98:35:00:37:6D:17:31:A2:31:19:A5:99:5A:35:83:10:6C:22:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c07a52bb-350e-3438-b104-cbd3b9be8c1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
74.82.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:66:49:f6:3d:e0:54:e7:1f:d9:74:a5:93:0d:ab:e1:26:38:
12:42:8f:d8:5d:45:aa:5e:10:1f:6f:87:29:f1:31:74:ec:27:
71:f3:82:86:c0:06:50:73:4e:02:f1:b7:04:e7:f0:44:08:70:
40:4d:e4:62:32:c1:67:79:27:2d:bf:6b:46:a1:4a:b0:18:d6:
82:a6:13:a3:10:f0:d4:c6:52:30:c8:80:ed:58:51:1b:64:b6:
25:73:74:38:1b:58:83:35:04:eb:24:e6:60:27:e5:56:16:37:
02:48:c7:ab:ad:5b:64:ad:68:0a:b9:13:a0:23:ec:74:98:29:
f2:c7:c5:f6:4c:97:91:1d:a8:fd:95:f2:03:78:36:36:1c:8b:
33:f0:2b:90:3c:3b:3e:69:1e:66:3c:9e:bb:69:84:34:0e:fa:
9a:48:57:fe:f1:21:78:33:d1:d2:f3:5a:d5:4d:f9:37:f6:67:
06:e0:f7:85:ea:a9:89:c8:a8:21:94:d2:95:43:da:bf:7f:92:
50:cf:50:3f:94:ff:da:75:36:a3:a6:7b:d8:2b:e8:fd:1c:4c:
3e:b3:49:5d:df:e6:d5:f3:73:31:43:7e:fa:b6:ad:af:38:5f:
34:8f:ae:4d:f0:30:71:46:79:0f:aa:7e:47:82:e3:5b:69:c4:
e2:bf:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:37:20 2025 by rpki-client