Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/084fb721-f6e5-345f-b188-14f08ada124a.roa
File: 084fb721-f6e5-345f-b188-14f08ada124a.roa (raw, json)
Hash identifier: W5vnqVRxLLjDFBAjXSDrKGEQSJ1aiG2C7k0K20LH/44=
Subject key identifier: BB:92:E5:A1:D7:05:81:8B:96:D1:6D:74:44:7D:EA:2A:A5:AA:F1:A1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50AF41B069E4D45033C080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/084fb721-f6e5-345f-b188-14f08ada124a.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 140052
IP address blocks: 2001:470:136::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:af:41:b0:69:e4:d4:50:33:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=44e3f21a-bfd2-498e-9aef-a6e86051f6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:70:2e:74:e7:71:66:00:97:c2:a9:ce:87:
d5:fc:0b:10:46:08:43:99:91:28:fb:98:41:f3:d3:
e6:fe:c0:43:f0:0e:e5:7b:c1:02:ba:de:82:30:aa:
6d:15:96:12:af:2c:7f:79:b3:16:b6:26:1e:55:28:
1d:76:7e:cd:97:2f:91:bc:2d:ea:3c:ee:fb:fd:40:
4b:c1:a2:b1:28:a6:ec:60:6b:e3:8a:66:b3:2e:7a:
d8:3d:05:86:9f:b2:40:09:15:1d:5d:35:8a:47:49:
e8:4d:9e:7c:8d:d2:15:14:1e:d7:0e:5f:41:2f:e5:
5f:9c:73:0e:5d:7a:8b:0c:6a:57:c4:3a:f3:60:ad:
97:41:e5:ed:47:29:38:b9:e5:6c:da:44:87:94:2f:
2a:c7:17:fb:d2:9c:c9:2d:07:16:9a:37:44:28:79:
68:fd:72:a6:dd:ab:94:4a:46:b1:21:e5:67:63:40:
f0:e9:ee:79:40:77:b6:6f:53:1d:e3:3c:f7:cb:7d:
1d:0d:a4:43:49:bf:15:00:60:02:3b:e5:3f:4a:be:
ed:b2:ac:f6:b3:66:37:50:38:cf:f6:9b:03:f3:81:
ac:a5:1f:0d:b4:15:e6:77:a0:bd:e5:85:42:2f:10:
dc:62:bb:91:bb:51:b3:d2:5c:6b:2b:b4:8e:93:fc:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:92:E5:A1:D7:05:81:8B:96:D1:6D:74:44:7D:EA:2A:A5:AA:F1:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/084fb721-f6e5-345f-b188-14f08ada124a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:136::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:f5:25:0f:a0:53:91:93:6e:d1:0f:79:d7:a1:f7:0d:5c:e1:
61:40:c4:e8:3a:7a:99:2a:6e:84:d8:cb:6a:04:8d:fd:ad:40:
74:34:93:e0:38:22:8a:41:a4:c7:5f:c2:da:58:57:32:b8:87:
de:c4:70:e7:ad:b2:de:70:20:1e:c6:8c:a7:89:37:68:ca:55:
6d:b0:c6:f3:55:a9:8b:47:26:4d:0f:07:d9:54:4b:02:3b:f3:
da:69:7c:c5:e7:1a:bc:71:75:41:05:9f:9d:6a:69:95:06:ce:
47:f3:f5:ab:72:d5:3a:1b:50:cd:f7:82:bc:f3:01:ec:e9:7c:
37:42:a4:f9:d4:8f:27:d9:19:11:6f:4d:0c:26:14:03:a8:06:
10:18:06:18:0b:df:1b:04:4f:8e:cc:ec:ec:95:9f:38:42:88:
76:06:2f:fd:2e:cd:e0:98:91:e6:d8:da:97:e0:8b:1a:7a:84:
3c:cb:ac:f6:3d:25:94:1b:75:4e:3a:62:54:85:3a:9f:04:5f:
91:7b:1d:0d:1f:00:5a:1a:f7:3c:09:47:50:15:4b:80:e1:51:
af:04:27:f4:a9:e5:c1:56:e4:9d:10:ee:35:c0:de:d1:8e:8e:
ef:35:f0:75:77:b8:28:cc:89:19:3e:bc:af:11:56:54:aa:ea:
4a:9a:1f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:31:08 2025 by rpki-client