Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c6f91df6-d547-3531-90cf-a1d84c100623.roa
File: c6f91df6-d547-3531-90cf-a1d84c100623.roa (raw, json)
Hash identifier: QlG5IilAmQak8HAqGL+XVNbteno9z283NiZxDY85xRI=
Subject key identifier: D4:C0:44:E1:3C:42:B4:0D:5E:5E:83:C7:C9:6D:A9:0C:49:92:28:DC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285840A2ED1CDE0286D653978F15C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c6f91df6-d547-3531-90cf-a1d84c100623.roa
Signing time: Thu 19 Jan 2023 12:00:00 +0000
ROA not before: Thu 19 Jan 2023 12:00:00 +0000
ROA not after: Thu 20 Jul 2023 04:00:00 +0000
asID: 398576
IP address blocks: 209.51.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a2:ed:1c:de:02:86:d6:53:97:8f:15:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 19 12:00:00 2023 GMT
Not After : Jul 20 04:00:00 2023 GMT
Subject: CN=233d5018-af33-4343-95a3-00f3e55f740f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:fe:1a:95:35:e2:5d:6d:cf:fb:ca:d3:f1:
46:64:79:89:a8:28:39:1d:e3:52:86:67:86:bf:6b:
59:cc:a1:99:1a:ab:96:4e:59:17:28:ee:d4:d4:9a:
94:ca:81:a9:2c:c7:cf:ef:f2:2d:dd:79:4c:de:8e:
fa:77:96:00:2b:21:e2:ca:59:60:1b:9a:d5:f7:82:
b2:3e:5c:54:5d:28:ba:1c:79:8b:37:92:f9:e1:af:
0f:44:e3:e9:9e:35:00:28:3c:e6:d8:83:11:9c:42:
e1:a5:58:dc:d0:9c:1e:fd:0f:59:57:db:22:d8:a9:
bd:98:37:03:6a:93:09:73:68:4b:f5:e4:18:ea:37:
c8:7a:ee:cf:ca:96:1c:15:65:3b:14:19:d4:a0:19:
7e:47:41:fe:9e:ff:cb:a9:b9:48:86:b5:63:72:2c:
a6:9d:44:63:9f:85:49:c0:41:f0:83:d6:ea:9b:06:
3b:62:af:a2:3d:cf:1b:48:ec:34:8d:f2:f8:b8:9f:
43:b8:88:15:fc:e5:1c:c7:2c:65:f3:dc:fa:87:5e:
1e:56:9a:74:f1:01:74:98:6f:e8:80:22:a4:1c:6e:
f5:c3:01:46:f6:f8:04:ba:36:01:7f:a5:60:d0:4a:
4b:6e:63:8c:30:d9:8a:1b:9d:a7:5c:d6:c3:f6:d6:
60:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:44:E1:3C:42:B4:0D:5E:5E:83:C7:C9:6D:A9:0C:49:92:28:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c6f91df6-d547-3531-90cf-a1d84c100623.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:42:ee:19:b6:29:53:03:6a:e2:71:65:48:20:94:ac:02:c8:
a2:54:4f:19:8b:1f:88:0a:e6:a8:ee:bc:78:06:66:1f:f1:71:
be:48:1c:88:9b:cb:b6:4e:f4:87:94:b7:13:4b:26:c2:ae:cc:
ee:f6:27:00:fe:ec:6c:eb:7e:4f:02:70:f8:78:62:9c:db:06:
1f:b8:d9:28:b6:e9:80:24:5f:21:54:14:ab:cd:14:23:2a:a7:
02:2f:7a:80:f9:94:4e:5c:6d:2d:50:06:b0:29:ff:f8:41:cd:
e8:43:d0:e7:16:92:07:d6:17:2e:18:5c:a4:ae:c4:0c:bc:7e:
72:d5:df:fe:75:47:5f:db:07:5b:da:20:91:53:51:e5:a9:9c:
c4:83:72:37:08:19:05:a0:29:0a:60:89:5f:f0:ad:75:9a:27:
f4:4b:eb:d5:f4:6a:c5:53:f0:44:b2:8b:f4:f9:ab:65:74:ab:
f5:bc:3e:d4:3e:e2:88:1e:bb:44:44:0f:fa:44:da:7c:c4:04:
9e:7f:3e:99:e1:16:01:56:7d:57:f9:be:95:81:fc:c0:68:d9:
4c:ad:84:4b:f0:e0:3a:0f:6d:93:7b:77:ab:70:7c:80:14:60:
28:9f:f1:98:0c:87:38:0b:83:a0:cf:a5:37:fc:6a:e6:f9:00:
89:4d:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:52:38 2025 by rpki-client