Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c85f27c6-db50-3075-ac53-db2db686ffaf.roa
File: c85f27c6-db50-3075-ac53-db2db686ffaf.roa (raw, json)
Hash identifier: iTsRvm9BBvt4C5XaXSUaaqibgY8gG6C8vzRQHyz3r4A=
Subject key identifier: BC:A0:A7:12:BC:A0:03:D9:56:84:95:92:D9:7E:DD:88:2B:06:E6:A8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858460752F97CC17204DC94293D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c85f27c6-db50-3075-ac53-db2db686ffaf.roa
Signing time: Wed 29 May 2024 01:30:51 +0000
ROA not before: Wed 29 May 2024 01:30:51 +0000
ROA not after: Tue 27 Aug 2024 01:30:51 +0000
asID: 398885
IP address blocks: 65.49.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:07:52:f9:7c:c1:72:04:dc:94:29:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 29 01:30:51 2024 GMT
Not After : Aug 27 01:30:51 2024 GMT
Subject: CN=f50fb066-ff72-4e29-9213-6b5e1a137ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:9c:12:3f:17:aa:8f:98:00:41:ec:d7:f3:
75:d0:01:7c:84:37:30:52:a1:60:d7:14:a8:df:a7:
b1:d9:0a:f4:f6:4c:ec:0e:cf:a1:5f:3d:5c:b5:aa:
25:f2:6f:c4:23:bf:36:8d:4a:f9:07:3f:b9:fd:0d:
65:b4:9e:f9:da:07:e1:ad:2d:48:15:36:80:c0:0e:
83:a4:46:82:92:c0:b8:a3:d1:09:87:01:80:26:f9:
26:a3:98:c9:6c:d7:c0:b2:69:53:3e:a3:00:25:f6:
ad:12:58:51:4c:b8:d9:63:70:88:44:26:fb:0a:8d:
ab:52:28:2f:79:4d:b5:06:cc:f7:3f:41:8c:7f:11:
98:90:55:fe:3b:60:a6:70:fd:15:70:7c:e0:c1:1d:
ce:87:5f:41:4c:56:36:68:0f:4f:8a:32:39:02:3d:
0f:e1:6a:2a:05:28:da:e0:3e:f9:95:f7:fd:92:63:
07:ad:88:83:bc:ce:29:a2:d9:f4:32:19:af:1b:d9:
67:b9:d8:c1:ad:bb:75:d2:42:18:ce:3c:07:d5:9b:
8a:55:72:61:2c:0b:df:25:da:ee:6c:69:88:e7:97:
10:be:a5:80:92:08:e5:3b:ca:90:92:75:2b:46:e1:
8b:27:50:44:45:b6:62:f2:e2:80:7e:26:c8:a1:78:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A0:A7:12:BC:A0:03:D9:56:84:95:92:D9:7E:DD:88:2B:06:E6:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c85f27c6-db50-3075-ac53-db2db686ffaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:c2:0f:30:59:39:2a:4d:eb:f6:42:48:be:b4:d4:d9:52:29:
ac:c6:44:bc:a8:80:40:a5:cb:2b:4c:c7:0b:12:cd:eb:e6:d8:
c4:0f:22:d4:82:d8:4c:ec:59:a4:87:86:0a:b4:47:4f:7f:09:
2a:d6:a3:46:03:94:b1:37:91:79:35:66:a0:9f:ba:64:c8:3c:
5e:67:89:03:07:f3:1f:bb:88:dd:80:30:12:09:61:d4:69:27:
de:35:f1:e8:a7:3f:62:a8:eb:a2:66:29:30:a1:fe:86:f2:25:
27:e8:f5:f6:44:d7:75:2f:9d:06:e7:a3:f0:6c:26:30:38:8b:
ca:90:bf:63:93:20:ab:6f:cb:ac:76:af:e0:b0:79:69:7e:c1:
55:d7:4b:22:7b:3b:bf:11:ed:ef:a3:7b:ea:fb:74:4e:71:93:
56:f1:93:de:ac:fe:cd:d4:3f:70:ac:29:63:52:96:8f:8b:48:
b3:f0:9e:37:cc:44:ca:46:3a:f8:7c:24:b1:d2:0a:54:de:ea:
37:0c:a6:79:c9:46:82:34:ed:68:57:03:18:ce:03:95:1c:f5:
93:d2:77:bd:71:a9:a9:a1:69:ac:fe:4a:02:44:72:51:7d:4d:
cd:8b:66:a3:f2:45:64:6e:66:d9:3d:88:75:39:ab:25:bc:7b:
d8:7b:7d:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYHUvl8wXIE3JQpPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUyOTAxMzA1MVoXDTI0MDgyNzAxMzA1MVowLzEtMCsGA1UEAxMk
ZjUwZmIwNjYtZmY3Mi00ZTI5LTkyMTMtNmI1ZTFhMTM3ZWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlScEj8Xqo+YAEHs1/N10AF8hDcwUqFg1xSo
36ex2Qr09kzsDs+hXz1ctaol8m/EI782jUr5Bz+5/Q1ltJ752gfhrS1IFTaAwA6D
pEaCksC4o9EJhwGAJvkmo5jJbNfAsmlTPqMAJfatElhRTLjZY3CIRCb7Co2rUigv
eU21Bsz3P0GMfxGYkFX+O2CmcP0VcHzgwR3Oh19BTFY2aA9PijI5Aj0P4WoqBSja
4D75lff9kmMHrYiDvM4potn0MhmvG9lnudjBrbt10kIYzjwH1ZuKVXJhLAvfJdru
bGmI55cQvqWAkgjlO8qQknUrRuGLJ1BERbZi8uKAfibIoXhUmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLygpxK8oAPZVoSVktl+3YgrBuaoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzg1ZjI3YzYtZGI1MC0z
MDc1LWFjNTMtZGIyZGI2ODZmZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTCDzBZOSpN6/ZCSL601NlSKazGRLyogEClyytMxwsSzevm2MQPItSC
2EzsWaSHhgq0R09/CSrWo0YDlLE3kXk1ZqCfumTIPF5niQMH8x+7iN2AMBIJYdRp
J9418einP2Ko66JmKTCh/obyJSfo9fZE13UvnQbno/BsJjA4i8qQv2OTIKtvy6x2
r+CweWl+wVXXSyJ7O78R7e+je+r7dE5xk1bxk96s/s3UP3CsKWNSlo+LSLPwnjfM
RMpGOvh8JLHSClTe6jcMpnnJRoI07WhXAxjOA5Uc9ZPSd71xqamhaaz+SgJEclF9
Tc2LZqPyRWRuZtk9iHU5qyW8e9h7fXk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:37:24 2025 by rpki-client