Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec26e46a-2a82-3a48-8b3e-164e3e838823.roa
File: ec26e46a-2a82-3a48-8b3e-164e3e838823.roa (raw, json)
Hash identifier: azxE28oTWst8pxq6IFl8wutIprDxIbQf16AiAdxMyig=
Subject key identifier: 61:CC:1C:F4:A9:0C:38:39:95:0C:BC:EF:8A:A8:00:1E:C1:83:10:01
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50FE1E14E9EEBE1BD05680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec26e46a-2a82-3a48-8b3e-164e3e838823.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 36103
IP address blocks: 64.62.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:fe:1e:14:e9:ee:be:1b:d0:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=58f2595a-e663-4a63-bfd4-46fcbfe35647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:22:d7:b0:3f:00:5c:8d:ee:56:b1:e5:af:
eb:fc:1e:25:c3:fe:b2:ba:b2:65:6e:9f:0d:e3:83:
03:25:27:e2:14:3a:96:3c:ae:bd:1f:82:ea:6a:0b:
ad:71:32:16:fb:f0:14:b5:25:42:01:69:42:c1:ac:
f8:ef:07:ab:a6:87:82:29:38:d1:bf:ac:42:9d:9d:
63:a8:bc:3d:4d:d2:fe:6a:45:27:4b:90:6d:be:5d:
ca:82:37:9b:5d:3f:fd:78:7f:3a:38:46:63:87:c0:
80:39:18:53:b3:c3:15:79:20:85:a6:3d:e6:0b:93:
bb:7e:8e:e7:42:ed:59:fa:17:37:0b:c8:90:23:02:
60:a4:5b:48:73:bf:19:32:23:28:8f:ae:f0:29:3e:
39:51:14:4c:fa:cf:07:f3:b7:f2:83:39:e7:08:15:
94:f5:8b:19:00:d3:b0:4f:d7:cb:67:ff:48:01:73:
7d:b4:dd:ad:e6:0c:05:65:96:86:b3:0b:1a:27:5b:
bc:a3:3e:a5:95:0d:b9:fb:5f:f0:20:c1:89:d9:bd:
ee:a4:3c:e2:41:b6:9b:45:b0:19:b0:21:70:da:06:
b4:f9:21:3f:fa:8d:d0:94:af:0a:d5:73:f3:a2:c5:
df:12:79:11:2d:17:3a:29:8e:cb:79:7d:ed:52:2b:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:1C:F4:A9:0C:38:39:95:0C:BC:EF:8A:A8:00:1E:C1:83:10:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec26e46a-2a82-3a48-8b3e-164e3e838823.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:fb:5e:d4:94:86:0d:1e:92:84:5a:ff:b0:38:a2:54:37:c3:
6f:8c:8f:57:ad:21:ae:cf:40:12:6e:50:94:42:f2:43:97:d9:
e7:26:3e:30:53:74:34:91:57:f0:9e:6d:96:25:b0:84:41:46:
e1:26:9c:25:5a:8f:c4:43:ca:75:52:bf:86:02:13:fe:c1:48:
d4:86:a0:48:11:d6:b3:02:c5:0c:7d:e5:5c:41:4b:50:77:ed:
a3:4c:90:0f:eb:2b:4d:54:53:00:21:e9:2e:8e:94:bf:52:9f:
5b:80:40:cf:5b:35:c5:1e:ee:3a:17:4e:97:82:ab:c4:b5:d3:
85:37:66:09:5e:fe:24:56:61:12:1f:67:6b:cc:f7:3f:27:11:
34:55:8d:09:d4:31:1c:4e:c3:67:4d:57:db:0b:d5:53:3c:7e:
73:7b:eb:bc:f4:4c:13:13:d0:40:d2:be:7b:e5:6c:09:3f:7e:
12:42:a9:ec:72:2b:ea:17:90:5b:03:36:53:cb:26:8e:35:a5:
a8:10:93:db:1e:6b:b8:66:3f:ae:4f:12:9e:73:10:26:c4:3a:
07:50:1b:c0:c7:f0:9d:5d:f4:aa:6f:ad:d6:c2:ca:98:b9:06:
b3:71:20:79:7c:9f:7d:26:63:7f:cb:3b:ae:19:bb:75:bb:f4:
d7:18:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:57:58 2025 by rpki-client