Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12b21bf6-0c4e-3d35-9f21-184dca2e6781.roa
File: 12b21bf6-0c4e-3d35-9f21-184dca2e6781.roa (raw, json)
Hash identifier: dpmJoa6a1DKjSO2vsolm71RemzwkVMi0Jejtqv39gBI=
Subject key identifier: F8:4F:EE:AC:9B:64:F4:67:EB:ED:4C:6F:80:C7:E8:F7:7C:DE:75:43
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D50BA17FD49485FBEF5E589C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12b21bf6-0c4e-3d35-9f21-184dca2e6781.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Wed 21 Sep 2022 04:00:00 +0000
asID: 140659
IP address blocks: 74.82.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:50:ba:17:fd:49:48:5f:be:f5:e5:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Sep 21 04:00:00 2022 GMT
Subject: CN=3e64af8c-0341-40d9-bbd5-3e282e3b8f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:2e:60:e3:ee:c9:35:40:89:3b:0c:93:cd:
b5:a7:c7:7f:6d:70:78:3c:d6:dc:16:b1:15:8a:ab:
fa:6b:29:a0:16:72:b4:d9:5b:b9:7d:1b:fe:6e:7a:
22:72:12:3c:db:85:58:37:93:9e:b3:9f:28:83:42:
8c:5a:82:bc:2a:89:d8:67:1a:eb:c2:9d:6d:26:23:
f6:03:a2:a1:4a:d4:d1:9f:2e:01:da:82:6b:93:e6:
ed:6a:45:4c:b5:bf:4d:8a:23:10:b8:b4:d0:ff:6f:
81:29:81:84:84:d8:33:11:d2:15:8e:76:97:e6:6b:
31:df:f4:aa:54:5a:80:d8:e0:a7:15:c2:ad:03:c5:
8e:43:33:82:d0:83:5b:95:2e:b8:34:eb:ea:66:59:
d1:9f:77:9f:c8:eb:42:1b:fa:8b:21:b3:92:ae:1d:
20:aa:77:d9:3b:4a:d5:a6:22:73:5a:cd:71:e5:37:
c4:50:55:a9:34:4d:9c:41:29:f2:a8:47:38:a0:8f:
75:a0:66:26:9a:62:42:a9:53:8f:e2:18:ec:4d:48:
0c:4e:42:ac:53:b9:f3:f5:78:c1:0c:6b:a6:7d:99:
1e:5a:d0:04:bc:db:5f:3e:9b:55:88:23:36:38:22:
d6:6c:6b:9a:4b:ff:66:2e:89:e0:41:50:22:2a:28:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4F:EE:AC:9B:64:F4:67:EB:ED:4C:6F:80:C7:E8:F7:7C:DE:75:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12b21bf6-0c4e-3d35-9f21-184dca2e6781.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
74.82.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:c1:3e:a2:0f:d6:d3:dd:7d:e7:a1:78:ca:e1:54:f5:12:f2:
ab:28:ac:fb:25:48:a9:fa:f7:99:8a:27:1c:4e:9d:e5:aa:76:
d4:c2:2c:8d:3b:fb:bf:06:97:ec:86:15:22:42:db:32:1d:7f:
c6:cc:1b:6d:c2:52:52:58:e2:18:59:15:0f:32:ca:2e:9a:ac:
49:9d:9f:eb:58:60:2a:ee:03:27:58:60:9c:f7:15:bc:d4:52:
ae:4e:66:5d:8d:fa:82:07:2f:2a:d6:79:71:a4:7c:0a:a8:dd:
21:8a:f2:76:90:cb:07:e2:9c:3d:0a:6f:83:36:ea:41:46:7d:
50:90:33:26:9c:ad:70:ce:c3:be:4d:e2:42:4d:56:cf:94:5f:
88:4e:98:08:62:4b:61:d0:bb:4b:1c:65:ed:27:de:0c:4f:b5:
97:88:fd:8b:6a:a7:95:8f:0a:7e:c1:fd:c5:77:88:2a:75:d9:
1f:1b:f4:3d:2d:65:1a:7b:79:98:08:e1:d8:3f:ed:56:86:ee:
ef:ac:b9:6b:5e:1b:20:87:2c:43:af:68:6c:3a:c2:7e:6a:6e:
5e:59:76:03:f4:42:08:ec:32:99:07:d4:59:e6:d6:88:cd:e0:
88:34:19:36:3b:c8:98:04:2f:d8:42:3f:e0:e9:10:02:eb:58:
4f:a2:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:39 2025 by rpki-client