Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2829bdef-a9d7-33f3-b200-5ccbe1fa6cea.roa
File: 2829bdef-a9d7-33f3-b200-5ccbe1fa6cea.roa (raw, json)
Hash identifier: kTAy3gPm4Oa9t2TxRZ/oi0S7tzUuyW3eCAFaso7sv9s=
Subject key identifier: 96:36:AF:AA:33:2C:9E:17:17:7B:2A:B1:CB:BB:32:A5:4B:07:C4:74
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648DF935E98E4A2805B940C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2829bdef-a9d7-33f3-b200-5ccbe1fa6cea.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 26679
IP address blocks: 2001:470:60::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8d:f9:35:e9:8e:4a:28:05:b9:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=4bc46ee1-60d1-4fb4-a475-5305b16ac576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:68:7b:5c:4e:ac:ad:13:65:d0:6f:17:58:
85:0b:8b:2a:f0:4a:47:4b:79:88:51:ef:55:82:97:
fe:42:03:f6:1a:5c:d4:bc:03:14:2a:69:f8:aa:42:
98:5d:47:cb:7a:04:bb:65:15:12:33:b2:d0:bd:ed:
a1:da:4f:10:99:ba:fd:6e:b8:72:1e:a6:c1:99:4d:
3c:57:a6:10:a4:87:ef:d3:49:f2:6e:99:74:9e:d0:
86:4f:14:eb:ae:61:e1:a6:b2:17:02:89:6f:b9:4c:
22:2e:71:7b:a9:7f:73:d2:69:58:9f:16:77:81:38:
07:f9:fa:21:fb:f7:43:95:62:35:7e:e1:17:5a:6a:
4f:83:76:61:ba:aa:9f:16:a5:28:bb:7b:7a:ee:d4:
81:50:a9:05:25:36:ad:69:3c:9a:de:6b:45:8c:2a:
29:69:ab:6e:3f:6f:af:84:16:08:02:17:d4:23:77:
9e:5e:f1:50:3c:1e:ee:fe:c4:0d:95:da:b6:ec:6f:
fb:e8:a9:0b:03:70:64:e5:c6:88:02:7a:07:c3:f8:
80:d1:77:dc:4e:60:3a:c2:e5:0d:7c:13:ba:54:b8:
a7:0f:3d:5b:65:73:9c:5c:eb:ff:33:65:70:36:cf:
56:9f:f4:07:bd:1a:90:59:74:f8:b8:61:77:ce:2f:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:36:AF:AA:33:2C:9E:17:17:7B:2A:B1:CB:BB:32:A5:4B:07:C4:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2829bdef-a9d7-33f3-b200-5ccbe1fa6cea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:60::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c4:f9:f5:14:1b:c9:0e:02:ac:a7:02:14:2a:00:68:59:3a:
91:0b:be:ca:c2:70:f4:1d:db:cb:f6:e5:43:73:c5:8a:36:ce:
c9:4f:dc:d2:b9:f8:41:2b:49:18:42:5e:9f:a5:ad:aa:92:76:
73:a6:f3:35:b5:3a:38:1e:55:ca:c9:b7:e0:ca:25:43:35:31:
83:63:21:a2:0f:50:90:8c:16:92:f0:15:e5:1e:c2:e5:6d:39:
29:61:86:a0:13:fc:0d:c6:ff:f1:a0:c5:0b:40:f1:ab:ac:d7:
de:42:94:44:92:75:21:62:d1:a9:2c:c9:98:4f:15:79:5b:8b:
71:6d:99:46:32:25:bd:f5:4e:a3:2a:a9:59:d3:6a:e6:b4:50:
1d:6b:80:ef:b8:e6:ff:9a:4b:3e:64:bc:57:74:1c:00:2f:1d:
c1:04:55:9c:80:6d:eb:01:33:a7:c0:5f:90:f1:db:d5:2b:9a:
00:78:66:05:c7:f3:4c:9a:b5:9f:ca:b4:a0:34:db:9d:dc:0e:
20:c3:83:df:9c:fe:e5:b9:18:01:0c:07:2b:c5:04:68:d9:5c:
76:6e:cf:66:53:cf:ff:83:ad:e5:0d:0b:2e:59:e2:2d:12:6d:
7c:87:ad:15:27:45:79:03:65:f6:da:d8:a2:fe:b0:a2:5e:6d:
5d:18:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:20:19 2025 by rpki-client