Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d1292f9b-8444-339b-ac09-3a5ee201f1c7.roa
File: d1292f9b-8444-339b-ac09-3a5ee201f1c7.roa (raw, json)
Hash identifier: 9v1fNNGLHoyq+D9UTtG8FnaHReWywX0o4CGV8Jr5ZrY=
Subject key identifier: 61:44:3C:E0:89:2F:22:72:5E:F9:8C:3A:E0:A8:B1:41:DD:E6:68:C7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648E4C018C7E91E142D1CE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d1292f9b-8444-339b-ac09-3a5ee201f1c7.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 394996
IP address blocks: 65.49.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:4c:01:8c:7e:91:e1:42:d1:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=12214fce-e393-4957-b61e-09574d247df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:74:d1:d8:f9:2f:c1:01:eb:ca:24:62:48:
2e:7b:89:63:5a:64:97:3f:88:29:7e:af:62:55:e0:
93:0f:77:e1:38:ec:bf:c1:12:1b:68:23:67:0b:37:
7a:ba:bb:78:b9:20:fd:f2:10:06:39:ed:68:52:55:
44:7c:68:85:57:65:72:63:3f:38:2a:9a:14:b0:4d:
c7:10:43:97:a8:95:39:2b:c9:c8:28:41:11:80:cd:
62:db:1b:8b:0d:27:de:8f:79:2e:26:00:59:93:3f:
96:d6:c6:99:16:29:d0:ce:04:69:67:02:01:10:44:
44:46:a2:de:6d:da:60:7f:e3:a4:3e:64:95:d9:17:
f4:41:55:f9:67:23:aa:9c:21:ef:34:80:50:e6:8e:
78:45:4f:88:e2:14:c5:80:90:ff:f3:fa:ff:ca:4a:
33:62:30:98:64:d9:ff:71:ec:e9:14:ab:af:d8:ca:
b6:e3:b0:15:6c:82:60:5c:18:71:52:a0:fb:8c:6f:
cc:0e:7a:93:a8:84:63:fc:72:af:f1:bc:f5:b5:32:
e0:0f:ea:bf:ad:86:fe:3a:7b:04:b6:e9:e6:e1:f4:
6e:a4:0d:c1:fa:2a:be:86:0f:2c:89:91:cf:de:b8:
de:e0:23:f7:c9:9b:a5:54:88:97:ac:aa:1a:80:7f:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:44:3C:E0:89:2F:22:72:5E:F9:8C:3A:E0:A8:B1:41:DD:E6:68:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d1292f9b-8444-339b-ac09-3a5ee201f1c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:d2:52:69:ad:c2:26:29:12:f3:9f:30:0e:04:50:56:c1:87:
3f:f7:dd:64:60:88:b3:1c:44:c9:86:be:48:39:af:1d:5b:35:
55:b9:8f:61:39:82:25:90:c4:7a:a5:8d:f1:42:cf:ec:3e:97:
84:f9:ff:73:f1:d4:c5:3f:39:df:03:38:ca:5f:3a:b2:3e:08:
df:80:49:33:f6:5a:af:39:a5:77:da:cb:cc:7a:67:3e:79:81:
f2:ab:64:78:cd:a7:cf:f1:1b:9a:1f:d1:bd:79:79:3d:26:02:
7e:8a:21:73:83:b3:99:db:25:9e:5b:fb:72:7e:0a:d1:22:ef:
2c:6d:15:f6:1e:b2:cc:7f:69:79:c1:a6:d1:4a:6f:44:1e:e1:
e9:47:90:e6:8f:ae:35:b5:08:b2:12:76:e4:d5:52:40:fd:82:
6d:f2:28:c5:17:fc:05:66:10:68:32:ce:ff:62:14:d0:76:42:
e0:f9:2f:50:8c:c3:3a:28:b7:8e:bd:a5:4a:92:d3:46:8c:ac:
75:e4:cc:6c:4b:c9:1c:59:1b:6d:31:a4:fc:36:cd:ef:02:79:
08:b5:b9:66:2c:87:a5:68:3b:72:34:1c:8c:60:ab:41:c0:49:
75:32:f2:78:98:3b:f1:f4:95:b1:57:7f:7d:f5:d8:38:68:da:
6c:2d:c2:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9kjkwBjH6R4ULRzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
MTIyMTRmY2UtZTM5My00OTU3LWI2MWUtMDk1NzRkMjQ3ZGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4l00dj5L8EB68okYkgue4ljWmSXP4gpfq9i
VeCTD3fhOOy/wRIbaCNnCzd6urt4uSD98hAGOe1oUlVEfGiFV2VyYz84KpoUsE3H
EEOXqJU5K8nIKEERgM1i2xuLDSfej3kuJgBZkz+W1saZFinQzgRpZwIBEERERqLe
bdpgf+OkPmSV2Rf0QVX5ZyOqnCHvNIBQ5o54RU+I4hTFgJD/8/r/ykozYjCYZNn/
cezpFKuv2Mq247AVbIJgXBhxUqD7jG/MDnqTqIRj/HKv8bz1tTLgD+q/rYb+OnsE
tunm4fRupA3B+iq+hg8siZHP3rje4CP3yZulVIiXrKoagH8PdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGFEPOCJLyJyXvmMOuCosUHd5mjHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDEyOTJmOWItODQ0NC0z
MzliLWFjMDktM2E1ZWUyMDFmMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTFOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK3SUmmtwiYpEvOfMA4EUFbBhz/33WRgiLMcRMmGvkg5rx1bNVW5j2E5
giWQxHqljfFCz+w+l4T5/3Px1MU/Od8DOMpfOrI+CN+ASTP2Wq85pXfay8x6Zz55
gfKrZHjNp8/xG5of0b15eT0mAn6KIXODs5nbJZ5b+3J+CtEi7yxtFfYessx/aXnB
ptFKb0Qe4elHkOaPrjW1CLISduTVUkD9gm3yKMUX/AVmEGgyzv9iFNB2QuD5L1CM
wzoot469pUqS00aMrHXkzGxLyRxZG20xpPw2ze8CeQi1uWYsh6VoO3I0HIxgq0HA
SXUy8niYO/H0lbFXf3312Dho2mwtwrs=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:44:42 2025 by rpki-client