Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cad4e20-4e7c-3840-9890-39c3384804a2.roa
File: 1cad4e20-4e7c-3840-9890-39c3384804a2.roa (raw, json)
Hash identifier: 7/oyI5vzdvbu15NjyooeeWRfdhvOuvFZOEIchGJH6Zs=
Subject key identifier: 86:A9:6A:10:FF:04:6B:FC:63:D7:0B:6B:BE:A6:38:03:66:B7:E0:D1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A519740138E5AE1933EB780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cad4e20-4e7c-3840-9890-39c3384804a2.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 63368
IP address blocks: 2001:470:54::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:97:40:13:8e:5a:e1:93:3e:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=364ed2b6-156f-4d44-9608-9d85598ab7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4b:44:2a:5d:91:b4:cb:eb:44:13:c0:41:9e:
f0:33:67:9e:10:5e:90:ad:02:cf:0c:eb:99:94:67:
be:45:6c:b5:51:61:58:dc:e7:1b:46:fd:bd:3b:cb:
8e:7b:62:f7:c6:44:9b:b8:02:f5:36:e4:7c:11:8e:
4f:94:68:95:2f:8f:6a:26:3a:36:b6:fc:d0:3a:b5:
82:11:25:ef:a2:82:76:6c:5d:38:71:49:5b:6b:2e:
cf:58:08:0c:15:e5:d5:cb:3a:07:55:3b:43:e2:ee:
ff:06:33:9e:8c:93:ca:dc:52:b0:7b:58:56:84:ba:
29:2b:b6:50:98:9e:a2:74:5c:e7:92:06:ca:88:fa:
7f:a6:30:a1:f6:83:a1:60:60:1c:89:cc:f3:73:6d:
72:19:ca:7f:20:a9:30:58:e9:75:5d:7d:6d:c1:7d:
1c:4e:d3:61:93:5d:53:97:4e:60:52:25:6c:9e:c8:
ba:ae:b3:aa:18:e3:57:28:14:78:04:0d:7a:4e:e0:
6d:b7:65:a3:07:3e:42:13:b7:7d:7f:bb:25:be:1c:
60:27:2c:e0:a2:34:be:96:9b:42:0b:59:42:6a:4a:
48:12:30:6a:30:74:87:ef:d2:40:fc:c7:e5:b2:79:
48:2d:88:14:93:f2:1d:dc:4f:3f:ac:57:a9:bc:89:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A9:6A:10:FF:04:6B:FC:63:D7:0B:6B:BE:A6:38:03:66:B7:E0:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cad4e20-4e7c-3840-9890-39c3384804a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:54::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:38:7d:56:07:9e:fa:51:01:6d:94:67:01:75:3b:61:e1:20:
9e:54:aa:d3:19:94:9a:b7:68:bf:f8:74:42:a3:67:de:85:bc:
b5:c5:7a:49:ea:2a:e7:c8:26:81:26:78:a6:86:14:4b:57:06:
ad:dc:ea:5e:84:ce:12:c9:d3:45:02:b4:3d:79:12:e8:73:e0:
b0:ce:40:ce:16:32:59:ba:0f:ac:00:24:a1:98:3f:91:26:f7:
e9:6d:cb:2b:71:f3:52:54:83:a1:93:2a:8b:57:ab:79:cc:08:
d4:fa:2e:4a:aa:0f:66:a4:8a:51:40:7e:6a:f4:6b:61:63:7c:
e4:19:c1:58:af:bc:1c:73:42:4b:92:68:09:bc:01:72:d7:62:
2d:28:77:05:8c:52:d2:56:3a:c8:6a:a0:68:37:70:75:c0:1b:
a7:be:3d:e0:de:40:ea:4a:3d:4e:17:54:15:b2:3a:e3:3b:3b:
eb:bd:28:fd:62:08:63:e9:83:d2:77:1d:e9:84:f5:93:c1:0b:
f6:e5:f8:eb:51:31:00:4f:73:83:3e:e5:d4:1f:b8:54:ac:d2:
50:5a:52:2d:cc:d7:da:2a:65:58:49:f9:9c:c9:52:8d:36:05:
99:cf:3c:c5:ad:a9:21:60:bf:4f:e0:15:7b:d9:bc:2c:52:1d:
f6:4e:f6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:24:43 2025 by rpki-client