Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0cfa691-55ba-31ad-bf5e-e95dff7140fe.roa
File: d0cfa691-55ba-31ad-bf5e-e95dff7140fe.roa (raw, json)
Hash identifier: bWRyJNPxkfQKeCLwdI6fM0GhYh6jnD1ms9iZpF+D7pM=
Subject key identifier: 6D:3D:93:AE:39:5C:A7:50:6C:44:45:06:CC:41:47:B1:D7:94:2D:6F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A512840CF9B085321055280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0cfa691-55ba-31ad-bf5e-e95dff7140fe.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 394993
IP address blocks: 64.62.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:28:40:cf:9b:08:53:21:05:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=7bf91347-a2cd-4802-a665-225952ef3cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:7f:72:e4:12:0e:8f:7a:47:d3:2d:fc:69:
f5:57:be:af:3a:69:77:b7:b6:c0:dc:f1:05:f5:a9:
57:e5:9f:c0:08:f9:b9:70:7f:8c:cc:dc:44:ca:d9:
7c:d6:7e:40:91:8e:84:66:d8:3f:39:af:23:e8:a8:
ca:1a:d4:ab:22:80:03:fb:ed:30:15:f4:83:62:9f:
b2:45:21:95:13:f9:82:0b:3b:39:bc:cf:8a:5c:6f:
c6:ef:83:be:1e:6a:40:aa:08:fd:61:88:09:d9:2a:
e6:e1:d4:82:1b:07:71:49:31:e8:52:ec:8c:c5:bc:
45:e7:38:80:50:3d:54:9f:ae:24:ed:f6:1f:f6:a1:
a1:d7:34:c9:da:41:de:dc:de:a0:7a:1f:e3:17:92:
c7:f9:43:16:c7:e8:d3:45:86:64:09:f8:49:08:36:
d1:8a:74:66:93:b0:bc:89:c5:d3:b5:7c:ca:0a:93:
9c:3f:15:e1:cf:da:bd:40:1a:86:dc:c5:56:39:22:
0f:7d:fb:97:cf:db:1a:6d:75:62:b8:2a:0a:79:94:
11:99:12:25:03:46:49:f3:2c:08:a0:31:a0:dc:df:
84:53:77:02:b6:7a:1e:10:88:53:f1:44:3d:42:ca:
57:f6:f4:6d:ec:f8:b0:be:a0:a9:b9:a6:b0:62:29:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3D:93:AE:39:5C:A7:50:6C:44:45:06:CC:41:47:B1:D7:94:2D:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0cfa691-55ba-31ad-bf5e-e95dff7140fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:59:f9:6d:48:41:bf:cd:d6:b2:8f:90:05:fe:97:ba:5f:4c:
d5:b9:8a:9c:f6:54:71:71:b3:1a:b4:3e:d5:2f:fb:9b:2c:6c:
90:b2:ac:b8:65:95:c3:e2:0d:e4:a8:43:a3:ce:9c:e2:c7:b9:
4a:51:df:3b:c6:eb:ec:1a:ce:ce:40:29:e3:a5:a4:6f:c1:50:
b8:68:d4:8f:3d:00:31:cd:3c:be:f9:e7:3d:09:fa:0e:4c:34:
e5:f8:49:b2:cb:28:89:64:8a:dc:42:4d:9c:19:9f:00:77:36:
12:8f:58:d9:73:ce:b3:da:6f:03:df:a9:e3:5c:f0:b5:f4:0e:
b2:67:14:4f:b3:01:52:ad:c0:21:ec:db:e6:4b:f3:09:3f:59:
23:46:8d:1a:ac:ea:f3:29:b6:fa:64:d3:34:bf:4d:59:40:22:
b2:90:96:1f:e2:83:98:4f:06:09:ff:f8:0e:80:99:e8:3d:d5:
03:a0:54:02:94:e2:a5:42:14:50:0b:87:fd:22:51:6f:df:20:
84:7d:aa:bf:12:05:ca:15:16:48:d4:3f:39:42:e7:ed:62:13:
06:db:c1:e9:9a:5e:5d:d0:09:5a:13:99:ae:75:66:ff:32:42:
f0:15:80:6a:d3:8a:25:1b:ed:f8:ab:fc:e2:a8:6c:7b:d5:ff:
bc:f1:7a:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUShAz5sIUyEFUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
N2JmOTEzNDctYTJjZC00ODAyLWE2NjUtMjI1OTUyZWYzY2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOh/cuQSDo96R9Mt/Gn1V76vOml3t7bA3PEF
9alX5Z/ACPm5cH+MzNxEytl81n5AkY6EZtg/Oa8j6KjKGtSrIoAD++0wFfSDYp+y
RSGVE/mCCzs5vM+KXG/G74O+HmpAqgj9YYgJ2Srm4dSCGwdxSTHoUuyMxbxF5ziA
UD1Un64k7fYf9qGh1zTJ2kHe3N6geh/jF5LH+UMWx+jTRYZkCfhJCDbRinRmk7C8
icXTtXzKCpOcPxXhz9q9QBqG3MVWOSIPffuXz9sabXViuCoKeZQRmRIlA0ZJ8ywI
oDGg3N+EU3cCtnoeEIhT8UQ9QspX9vRt7PiwvqCpuaawYikh6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG09k645XKdQbERFBsxBR7HXlC1vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDBjZmE2OTEtNTViYS0z
MWFkLWJmNWUtZTk1ZGZmNzE0MGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD7JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1Z+W1IQb/N1rKPkAX+l7pfTNW5ipz2VHFxsxq0PtUv+5ssbJCyrLhl
lcPiDeSoQ6POnOLHuUpR3zvG6+wazs5AKeOlpG/BULho1I89ADHNPL755z0J+g5M
NOX4SbLLKIlkitxCTZwZnwB3NhKPWNlzzrPabwPfqeNc8LX0DrJnFE+zAVKtwCHs
2+ZL8wk/WSNGjRqs6vMptvpk0zS/TVlAIrKQlh/ig5hPBgn/+A6Ameg91QOgVAKU
4qVCFFALh/0iUW/fIIR9qr8SBcoVFkjUPzlC5+1iEwbbwemaXl3QCVoTma51Zv8y
QvAVgGrTiiUb7fir/OKobHvV/7zxehk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:54 2025 by rpki-client