Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c6604f03-ca42-3f08-9d9e-4e29f1b641a9.roa
File: c6604f03-ca42-3f08-9d9e-4e29f1b641a9.roa (raw, json)
Hash identifier: brYvbBsPwEMTzPVeduywU00HiNFx+CN5o1b1mzdzZvw=
Subject key identifier: 19:82:81:EE:EE:BE:73:E8:40:A0:A5:AA:F7:B8:40:EF:29:68:99:9B
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F43285848D6DFDAF6CA7E134D03719E00
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c6604f03-ca42-3f08-9d9e-4e29f1b641a9.roa
Signing time: Mon 10 Feb 2025 19:20:55 +0000
ROA not before: Mon 10 Feb 2025 19:20:55 +0000
ROA not after: Sun 11 May 2025 18:20:55 +0000
asID: 212780
IP address blocks: 69.42.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:df:da:f6:ca:7e:13:4d:03:71:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Feb 10 19:20:55 2025 GMT
Not After : May 11 18:20:55 2025 GMT
Subject: CN=d124a8d6-d4c8-4f53-86d6-78eb5bfcf00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:c6:f8:4c:2d:e6:e1:e9:5f:ff:78:20:c1:
45:9d:ef:c5:47:6e:62:c4:37:e9:25:6f:cd:05:c6:
8c:ca:cf:bd:3a:4b:cf:a4:61:02:16:49:ff:9c:5b:
93:43:e5:71:fd:43:4c:ac:ad:3f:50:5d:28:9e:34:
aa:a5:c7:73:74:14:9a:ee:8b:db:7c:f1:f3:31:5e:
e7:4c:25:cc:70:2a:91:54:e0:f7:61:13:ff:10:51:
a7:af:b7:a1:c5:1e:21:95:44:38:09:6f:b0:83:41:
0a:f2:17:5f:01:9a:f7:06:08:a1:1d:8c:fd:08:08:
8d:2f:b3:7c:f8:29:55:cf:9a:49:05:45:6f:28:8d:
16:37:d1:aa:85:f5:22:36:12:11:e9:79:1e:7a:62:
6a:e8:73:4e:59:14:33:ff:dd:9b:63:5f:a0:3a:4e:
3e:7e:52:f0:08:8e:ae:69:ec:4f:0e:f9:69:a1:f0:
04:a0:30:70:7d:0c:64:d0:88:07:92:87:64:8c:f9:
a6:45:d4:6e:15:e6:77:32:2e:c4:34:c6:87:b3:cb:
83:50:51:69:fa:47:45:ed:b4:0c:d3:91:29:7d:46:
81:95:2d:2b:53:28:87:5d:65:49:04:43:49:8c:cf:
b8:fa:64:c5:e4:fd:5e:ab:d1:ef:dc:6c:67:da:dd:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:82:81:EE:EE:BE:73:E8:40:A0:A5:AA:F7:B8:40:EF:29:68:99:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/c6604f03-ca42-3f08-9d9e-4e29f1b641a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
69.42.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:6f:13:fe:57:70:1f:c2:fb:3a:6e:d2:3c:26:f8:fc:03:90:
f4:fc:8b:31:7b:c3:ff:76:7e:a6:8b:ea:e1:50:91:ec:6e:80:
8d:8d:08:08:c9:64:24:de:0a:0d:3c:cc:23:c8:8b:8e:bb:09:
31:99:22:e1:95:80:f4:11:4c:ed:50:c7:83:86:73:ef:58:65:
de:eb:84:7d:14:1d:ae:5a:b5:a0:a0:99:f2:68:c2:27:d0:1c:
e3:c2:d6:94:f6:fe:9d:03:96:2b:fa:34:2b:33:89:97:b7:e1:
1a:37:70:1e:e2:e4:8a:d6:1d:f0:e7:35:35:f5:46:13:99:be:
af:6b:54:41:03:08:15:9f:8a:a2:fc:47:a2:f0:4e:26:92:46:
e7:9d:71:91:46:c6:b0:cd:6e:28:7e:0e:13:92:d4:1f:c5:ff:
45:6b:d9:f5:ac:17:e5:b5:1b:2d:d5:ed:f2:4a:27:00:b8:f4:
5c:43:55:b9:fe:fd:4d:84:ea:45:1f:92:8a:43:aa:b0:73:dd:
73:ff:72:1d:f1:6f:f9:9a:94:f0:95:77:9d:b1:4d:ca:c8:0f:
62:d2:bb:45:63:3e:2b:fc:fd:9f:8c:57:51:2c:29:8f:26:1a:
8f:b4:d3:4a:e8:7f:43:7a:bd:cc:36:0f:64:3e:da:9e:7a:ca:
ba:9d:18:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjW39r2yn4TTQNxngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0
Mzg4MB4XDTI1MDIxMDE5MjA1NVoXDTI1MDUxMTE4MjA1NVowLzEtMCsGA1UEAxMk
ZDEyNGE4ZDYtZDRjOC00ZjUzLTg2ZDYtNzhlYjViZmNmMDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBfG+Ewt5uHpX/94IMFFne/FR25ixDfpJW/N
BcaMys+9OkvPpGECFkn/nFuTQ+Vx/UNMrK0/UF0onjSqpcdzdBSa7ovbfPHzMV7n
TCXMcCqRVOD3YRP/EFGnr7ehxR4hlUQ4CW+wg0EK8hdfAZr3BgihHYz9CAiNL7N8
+ClVz5pJBUVvKI0WN9GqhfUiNhIR6XkeemJq6HNOWRQz/92bY1+gOk4+flLwCI6u
aexPDvlpofAEoDBwfQxk0IgHkodkjPmmRdRuFeZ3Mi7ENMaHs8uDUFFp+kdF7bQM
05EpfUaBlS0rUyiHXWVJBENJjM+4+mTF5P1eq9Hv3Gxn2t1JHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBmCge7uvnPoQKClqve4QO8paJmbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl
YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvYzY2MDRmMDMtY2E0Mi0z
ZjA4LTlkOWUtNGUyOWYxYjY0MWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm
NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4
NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi
N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSrcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1vE/5XcB/C+zpu0jwm+PwDkPT8izF7w/92fqaL6uFQkexugI2NCAjJ
ZCTeCg08zCPIi467CTGZIuGVgPQRTO1Qx4OGc+9YZd7rhH0UHa5ataCgmfJowifQ
HOPC1pT2/p0Dliv6NCsziZe34Ro3cB7i5IrWHfDnNTX1RhOZvq9rVEEDCBWfiqL8
R6LwTiaSRuedcZFGxrDNbih+DhOS1B/F/0Vr2fWsF+W1Gy3V7fJKJwC49FxDVbn+
/U2E6kUfkopDqrBz3XP/ch3xb/malPCVd52xTcrID2LSu0VjPiv8/Z+MV1EsKY8m
Go+000rof0N6vcw2D2Q+2p56yrqdGFs=
-----END CERTIFICATE-----
Generated at Fri Jun 20 00:16:05 2025 by rpki-client