Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21e59fb8-de7a-3e33-8793-5455fe9995eb.roa
File: 21e59fb8-de7a-3e33-8793-5455fe9995eb.roa (raw, json)
Hash identifier: yKrMKANe42hgl0HFuDulSzAYu+FttpeqrIU9ig3+Q14=
Subject key identifier: E8:76:C2:BA:D6:94:D8:01:76:07:07:B0:F6:19:95:93:C8:B0:48:4B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583C2E80C7964428A21C229F5980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21e59fb8-de7a-3e33-8793-5455fe9995eb.roa
Signing time: Tue 07 Dec 2021 05:00:00 +0000
ROA not before: Tue 07 Dec 2021 05:00:00 +0000
ROA not after: Tue 07 Jun 2022 04:00:00 +0000
asID: 398427
IP address blocks: 2001:470:116::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:2e:80:c7:96:44:28:a2:1c:22:9f:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 7 05:00:00 2021 GMT
Not After : Jun 7 04:00:00 2022 GMT
Subject: CN=47fd79d3-4ea6-4bf4-8629-d2407365ecdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bb:87:20:b8:38:f8:71:5f:8d:46:d6:34:5a:
25:81:39:81:99:38:46:b0:bf:b9:b5:a3:b6:7d:cf:
1f:df:5f:58:83:77:54:fc:97:aa:20:6b:25:aa:90:
e4:c5:78:ef:99:0b:6a:a7:79:56:ea:c5:11:e7:14:
d1:cb:00:ac:81:3b:ef:39:ec:5d:2d:1f:41:78:0d:
2e:9d:0b:c5:37:a3:8c:56:6b:e2:fc:1b:de:a1:58:
49:74:02:83:33:ca:48:8e:f7:fd:63:6b:42:b1:41:
7c:8f:78:92:c9:d8:ba:c9:cc:7f:9a:9d:6a:e7:f0:
40:5c:c2:dd:08:1d:3d:c0:17:be:71:f1:9c:f9:13:
6c:42:3d:08:b5:02:80:f5:ec:72:e0:70:89:ef:29:
df:89:a6:19:f0:fa:55:af:09:a8:e3:d4:14:ca:04:
af:4e:4f:1f:83:a1:c5:45:23:09:74:96:75:55:da:
93:3a:02:da:08:11:71:ad:cf:f4:3b:87:2f:db:8c:
cf:10:e6:80:75:c6:7b:7c:59:6c:ca:7e:50:e8:04:
3a:9d:ed:b6:7f:55:1f:16:6e:00:b9:05:f1:7f:f9:
2d:1a:40:41:38:3e:28:00:c5:29:2c:9e:71:37:b9:
97:a8:d8:cc:92:bb:f4:f2:93:48:fa:9b:cc:f2:b1:
9f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:76:C2:BA:D6:94:D8:01:76:07:07:B0:F6:19:95:93:C8:B0:48:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21e59fb8-de7a-3e33-8793-5455fe9995eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:116::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:78:9c:c6:4e:f8:99:2e:4a:58:b0:c1:71:9c:11:aa:f5:a5:
8c:d6:a7:56:58:40:e2:b9:8e:4c:21:3a:31:6e:97:2e:b2:ef:
c0:40:ac:c2:07:98:78:22:9d:ef:a4:ce:d4:c0:53:f7:09:ba:
97:10:27:11:b2:d4:25:fa:ae:a3:4d:b4:53:26:67:0c:0b:77:
71:d4:bb:ee:e0:1a:bf:98:4b:e9:b3:39:a6:e5:68:f7:5b:58:
59:f3:b5:d4:71:eb:7d:5e:45:3f:a8:d8:33:50:38:4d:51:ac:
13:73:db:a4:23:ff:cc:7a:1c:22:f1:23:f3:ff:46:b6:a9:42:
19:69:1f:af:e5:ee:39:94:17:02:26:a4:9d:fe:c4:d0:04:d0:
3c:ae:bd:2d:83:a9:74:57:38:a8:32:9b:f9:f4:48:d1:bf:54:
4d:20:06:c7:2a:c2:4f:d4:43:ff:9a:4c:eb:e8:f4:18:54:f9:
a2:29:a4:8d:07:1c:c4:d1:9e:c0:91:c0:38:79:79:dc:c5:a4:
59:1c:7e:24:d4:8c:0f:21:0d:44:d4:d2:41:c3:af:e5:46:7c:
9c:32:e3:29:6f:2c:ab:5c:c6:2c:c4:e5:98:45:ff:16:af:12:
fc:2e:36:56:8d:19:62:5d:31:a2:5f:f1:3d:0f:77:76:22:26:
b5:e2:ef:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:20:26 2025 by rpki-client