Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f69a6f9f-fed9-3c6b-9bec-c668be80d41f.roa
File: f69a6f9f-fed9-3c6b-9bec-c668be80d41f.roa (raw, json)
Hash identifier: nPuqZ00fjsqxrhOdq5jj7W6kl0uXke+Nb5f8ckBm7dk=
Subject key identifier: A0:4C:F7:37:80:60:EF:D5:60:55:48:1A:A2:FE:21:58:66:33:41:3C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848345559CAE1F23DA1DBCC6380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f69a6f9f-fed9-3c6b-9bec-c668be80d41f.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 393238
IP address blocks: 65.49.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:59:ca:e1:f2:3d:a1:db:cc:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=9430b14f-c361-40ca-ab72-8b43c1691878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9b:c2:43:e2:bb:be:ae:81:28:93:95:38:64:
aa:4e:aa:f6:1e:0f:31:77:2a:e3:9b:72:10:be:5f:
57:25:57:dd:5f:21:99:ab:29:b7:5b:9e:3a:9f:f0:
ed:23:93:13:10:5b:20:28:11:93:70:0c:0b:8e:f4:
21:cd:dc:b7:32:f9:8c:5a:e7:6b:5e:39:6a:ee:20:
19:a9:ec:81:d6:22:0d:52:80:94:bc:72:c4:9c:59:
14:80:b2:fe:08:91:44:33:45:46:1d:d3:d5:b1:91:
9c:b8:d6:29:24:bb:ba:69:45:51:bd:ca:2d:ec:7b:
99:c0:ab:32:7b:4b:8f:ee:d5:42:4f:b0:38:17:1e:
1d:be:59:d7:74:ec:70:6e:eb:c8:71:bf:12:58:68:
b9:08:dd:32:c5:ef:e6:d3:ef:5f:6b:d8:42:26:1c:
17:68:55:12:2b:57:93:d7:c6:af:f9:50:8f:c2:f0:
78:ce:38:86:39:e5:35:90:55:4a:8b:60:7b:f2:a7:
56:1c:9e:c7:2d:b3:f6:68:aa:44:b2:df:51:da:db:
a0:08:c1:9f:8e:e6:12:7f:e0:2d:86:e7:18:87:bb:
d7:af:60:7a:f6:c7:2d:ff:09:56:74:ac:73:c7:75:
54:6f:e5:ed:33:3e:3b:66:8e:9d:11:fe:c3:2b:af:
ff:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4C:F7:37:80:60:EF:D5:60:55:48:1A:A2:FE:21:58:66:33:41:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f69a6f9f-fed9-3c6b-9bec-c668be80d41f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:2e:25:9a:a9:e1:06:ee:f8:fc:40:c5:b8:e6:d7:52:7e:2d:
c2:d6:f2:b9:e8:1b:e3:5f:d3:a7:5e:68:0f:c2:37:bb:5d:55:
65:1b:42:c9:fc:9e:46:85:30:90:14:d0:58:cf:9f:f6:65:67:
7e:c5:e3:b8:95:3e:23:5b:28:0b:70:bd:24:16:9b:8b:80:34:
25:80:ba:e7:a3:3b:1c:ee:6a:c6:58:72:f5:b5:7c:03:36:d7:
6c:29:42:61:0a:ca:25:9e:97:5c:36:ab:0f:a8:dc:a1:4a:f4:
4c:ab:1c:87:47:a3:17:04:93:34:f2:d0:9f:10:19:88:9d:2d:
3f:d7:b8:14:fd:57:ca:34:f9:90:11:7e:c8:14:d4:04:02:86:
08:ce:00:2c:fc:d7:ef:56:a7:7e:c4:54:26:17:12:8f:e7:b7:
3d:05:3f:39:f5:db:b2:87:5e:80:ce:43:22:52:20:e0:1a:cf:
99:75:1f:5a:39:5d:dc:3f:5d:da:9e:b9:f3:eb:e9:d4:5b:cf:
74:be:b3:d6:55:e1:e0:9c:91:97:f0:a3:f2:1c:c2:ad:72:ac:
12:4a:14:65:88:cd:ea:45:34:e5:d4:f6:86:36:3c:9e:33:ad:
4b:af:34:73:d4:85:80:ce:e1:62:90:1f:f0:51:44:b5:ee:f9:
9b:07:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:17:17 2025 by rpki-client