Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f5a511c-7b52-3acd-9289-45906706536f.roa
File: 2f5a511c-7b52-3acd-9289-45906706536f.roa (raw, json)
Hash identifier: U9YALLxLPRh9dxAbyWZEE4FtkVIFuQNZoa5w/Anitfw=
Subject key identifier: 2F:C6:D7:28:E7:D7:CD:A6:28:A8:68:5E:8C:A2:84:FF:9E:A0:53:03
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA6B6FD42D17B79DBF05E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f5a511c-7b52-3acd-9289-45906706536f.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 395127
IP address blocks: 2001:470:e9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:b6:fd:42:d1:7b:79:db:f0:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=d43ea35e-b6d7-4e31-ab82-b291b2b655b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:06:76:95:b2:c8:34:c8:f2:3c:e3:04:f4:
bd:c3:60:dc:6c:ed:14:85:78:bd:82:44:e0:ac:04:
9d:5e:82:de:2f:f6:a8:6c:a6:e0:d8:41:6b:5d:1b:
48:19:d9:2f:c1:b9:8e:63:1c:32:9d:2e:ad:94:b1:
2b:b8:56:a7:3f:cf:ae:e8:de:76:c2:e9:58:41:58:
1a:10:65:ad:23:78:8e:83:93:9b:19:34:3f:05:35:
44:19:e1:36:9c:2e:d6:d9:a5:31:54:53:b8:e0:59:
e6:92:e5:4d:5a:a4:2a:ab:fc:32:02:d4:a8:cd:2a:
40:a8:2a:ce:07:c4:8b:96:41:47:8b:11:23:e5:fa:
f3:8c:f9:30:f8:88:8b:95:0b:6b:84:f0:09:a7:1c:
af:51:d5:9e:23:4d:a5:8f:8f:54:df:90:58:b0:8a:
71:53:bd:41:92:a4:16:10:fb:ea:4d:f6:a0:37:63:
48:17:a5:e2:18:c9:40:32:ce:70:9e:13:a5:1b:84:
e7:39:fc:75:c0:25:b3:9e:d6:e2:58:3a:0f:6a:0b:
b2:88:0f:87:42:9f:c4:77:f2:da:99:e6:cf:ea:a4:
bd:66:a6:f0:4e:93:c6:66:13:7d:1d:40:03:1c:b6:
78:0c:a5:cd:1d:ed:76:ce:24:81:63:35:9a:25:62:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C6:D7:28:E7:D7:CD:A6:28:A8:68:5E:8C:A2:84:FF:9E:A0:53:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f5a511c-7b52-3acd-9289-45906706536f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:e9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:75:cb:35:9a:6c:64:d3:dc:3f:aa:eb:63:a1:10:7e:b7:52:
07:c9:4f:ab:db:63:d4:e5:48:34:be:6a:27:98:b9:3c:7a:01:
92:80:03:3c:2b:24:0a:67:da:e0:2a:94:8f:6a:b5:91:e4:95:
f1:d0:44:65:1f:2c:d8:61:3d:ff:80:3a:9a:c1:d7:65:c9:b8:
e5:df:dc:81:3e:10:8b:8a:29:c9:85:4d:ff:45:7c:01:e1:d5:
58:49:dc:85:ef:00:d5:ed:de:7f:55:c8:89:c7:81:70:74:84:
3f:3d:ce:47:96:69:36:d3:de:33:63:29:c6:90:d1:fe:40:89:
c7:24:e4:e1:b4:f1:fa:b8:aa:7e:f3:ea:72:be:b8:02:e2:80:
e6:8b:0c:a9:a9:f5:e3:56:fe:8b:d1:79:0a:cc:bb:0a:92:9b:
c3:91:ad:e6:83:05:92:8f:b5:95:bf:b2:bd:6e:3d:c5:69:7f:
4a:70:7e:11:ea:8c:84:5f:d4:a9:b3:f1:a5:af:e0:11:c9:d5:
3d:0e:ed:c9:d7:15:c0:3d:60:21:39:49:3c:41:60:8b:58:81:
7a:3d:47:79:9f:44:bd:58:b7:cc:55:c3:89:25:ac:f7:ef:16:
b1:1d:d6:76:f6:8d:ca:88:c0:41:75:dc:26:22:a6:63:5b:4e:
97:a3:e2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:56:08 2025 by rpki-client