Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7365e82-77b1-38b7-a9f4-3743e6c879ec.roa
File: d7365e82-77b1-38b7-a9f4-3743e6c879ec.roa (raw, json)
Hash identifier: skRIRmTza/NRK0891AeCAw+Op07KRhLTPT50IrBQzMM=
Subject key identifier: 8F:66:09:65:D7:52:64:D6:AD:2D:B0:08:ED:47:D9:D6:44:35:BD:B2
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935039FF4D5E974079E6100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7365e82-77b1-38b7-a9f4-3743e6c879ec.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 63949
IP address blocks: 64.62.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:03:9f:f4:d5:e9:74:07:9e:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=4f07809d-29a9-4ddd-9d64-f5638c89d941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:09:3b:b7:4b:ea:d2:9f:08:1b:8c:79:5f:
fb:75:65:41:60:e5:b1:b7:71:78:21:a5:f8:26:56:
fc:cd:6f:fd:be:08:ea:90:b0:c7:16:80:0f:4f:23:
36:a6:47:2a:5f:48:51:15:88:0f:9c:f1:29:37:53:
8c:27:53:3f:7a:fa:8f:5e:1f:af:f2:93:48:bc:09:
bf:09:aa:5f:35:ca:9f:cf:59:0b:a4:96:08:e2:da:
e4:67:72:77:b7:25:23:7c:7f:55:df:84:56:2a:34:
2e:e4:84:9d:5a:6e:b0:01:bc:04:c1:a1:8c:75:07:
ec:e1:06:7c:40:7c:10:91:71:80:94:1d:c1:76:cc:
35:81:8b:f3:a2:66:3f:32:fd:89:cf:e2:3a:7e:b6:
0a:d5:ec:b7:e8:66:05:d1:89:c0:5c:12:85:59:b3:
73:db:04:00:5c:f8:03:1f:d4:6e:0e:9e:a8:79:05:
92:73:12:09:d8:2c:fe:48:43:9a:6e:a4:43:ca:21:
fe:8d:ab:dc:95:af:1c:2a:44:a3:03:9a:2e:0d:45:
c3:4f:9d:18:75:83:bb:10:9e:03:dc:fc:a2:09:f0:
a8:7a:2d:bd:6c:ec:0a:61:84:b9:4b:4d:e3:50:15:
52:64:39:81:8b:58:fa:b1:9e:eb:92:25:0a:9c:2a:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:66:09:65:D7:52:64:D6:AD:2D:B0:08:ED:47:D9:D6:44:35:BD:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7365e82-77b1-38b7-a9f4-3743e6c879ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:3c:da:24:e1:a4:7d:86:cf:85:b7:8e:1a:b9:43:20:15:e3:
65:7a:fd:54:fd:92:d4:b9:71:1b:d5:86:69:e3:36:35:f3:31:
03:e9:b0:4b:88:7a:4d:e0:e1:7d:c0:b1:bc:05:b0:78:8b:93:
82:24:71:79:97:52:0f:d0:1c:57:e0:f9:63:3e:3a:bf:c4:88:
f1:05:72:f3:c0:16:cf:74:8a:f2:62:f8:e4:e4:5e:04:1a:70:
43:16:a5:4c:af:0b:97:5e:c6:f0:f1:cc:dc:74:eb:fe:5a:bb:
e7:a3:0a:29:56:fc:c0:42:53:96:eb:73:ef:d0:d0:80:b1:04:
58:94:99:63:f9:7f:23:34:71:f8:0b:bb:bd:93:58:92:f2:50:
f1:e5:fb:57:cf:d0:fa:65:62:d6:0b:f0:68:fb:82:c4:a8:d3:
ee:3e:62:8d:4e:68:1b:96:09:3e:e6:b2:45:e4:03:85:de:48:
4c:dd:e9:09:e5:1d:35:b9:69:52:a9:9d:ed:5e:5d:5f:97:01:
de:79:64:67:1b:2b:ca:ec:78:a8:c2:6f:55:09:e4:e6:92:a0:
cb:67:b2:81:75:e9:92:cf:8b:a8:16:a5:56:2f:12:50:c6:37:
33:c0:12:cd:fc:a4:83:1c:9e:41:09:5e:37:c5:20:bd:8e:93:
30:c4:f9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:48:16 2025 by rpki-client