Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/302e5886-aa28-3a9d-b53e-52c7a5a0a3a9.roa
File: 302e5886-aa28-3a9d-b53e-52c7a5a0a3a9.roa (raw, json)
Hash identifier: RnxCzQcV0tXs35x1wWgvebtcphplDFpZ1j6W6E5MeY4=
Subject key identifier: D2:70:A7:A0:37:0B:3C:C1:5F:B4:9F:B9:1A:B7:63:94:40:8F:17:8E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858429D82B45CA3418661EB74D0E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/302e5886-aa28-3a9d-b53e-52c7a5a0a3a9.roa
Signing time: Wed 19 Jul 2023 12:00:00 +0000
ROA not before: Wed 19 Jul 2023 12:00:00 +0000
ROA not after: Sat 20 Jan 2024 05:00:00 +0000
asID: 28171
IP address blocks: 2001:470:166::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:9d:82:b4:5c:a3:41:86:61:eb:74:d0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 19 12:00:00 2023 GMT
Not After : Jan 20 05:00:00 2024 GMT
Subject: CN=dd7e70ac-d8d9-44a5-ba44-2446a2e23852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:4f:6b:2c:49:e0:71:9a:d4:a0:10:ec:4f:
1f:2b:56:20:52:32:09:ec:f3:78:6d:a3:1c:85:56:
16:43:7f:9d:4c:5b:87:b6:2b:2f:cf:3a:72:80:02:
c6:50:53:e4:61:dd:1d:6c:55:55:15:ee:96:47:57:
cb:16:82:77:0a:b3:dd:fb:1f:ef:96:dc:21:20:5a:
35:8f:95:48:2d:8d:2d:b1:d7:22:fb:69:9e:3c:ce:
ce:d5:8d:4b:8c:3c:1b:a8:80:85:02:20:b7:bc:d3:
d6:d0:68:c4:17:1a:ca:8a:a2:17:63:94:90:8c:28:
1a:4a:d7:e7:88:91:cb:2a:33:b5:30:9e:a1:07:01:
b1:b0:60:78:cf:69:2b:aa:f7:bb:90:7b:ac:5a:22:
8c:2a:2e:fb:0d:04:1f:d6:23:19:06:b5:bb:9b:2d:
f7:63:ef:b4:cf:c0:7c:b2:e8:d5:23:88:7b:df:9d:
f2:28:35:ee:13:72:44:89:78:d3:56:95:09:33:08:
44:a9:e6:23:16:2c:4b:87:d8:04:a6:5b:66:e9:1e:
69:e2:80:7d:c0:a9:64:dc:e0:3f:fb:e7:97:fa:1a:
6c:fb:47:6d:b5:24:d7:86:a3:31:af:16:f8:8a:ff:
5c:c5:af:18:0c:97:d6:7a:b0:56:05:7e:e1:22:66:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:70:A7:A0:37:0B:3C:C1:5F:B4:9F:B9:1A:B7:63:94:40:8F:17:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/302e5886-aa28-3a9d-b53e-52c7a5a0a3a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:166::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:76:4c:98:36:43:d1:25:0a:32:dc:53:aa:68:95:f5:63:e0:
7d:91:a4:12:90:0c:ea:ff:c8:94:05:c5:7f:13:2c:34:f4:b3:
cc:58:00:74:af:d0:5b:65:59:4a:88:61:0a:16:23:be:00:8a:
a4:97:bc:32:ff:57:e0:bd:87:66:60:c3:99:f7:be:57:ab:ed:
85:06:e9:7a:2a:fb:72:0e:f5:6f:aa:6f:cb:63:17:e9:8c:d7:
69:90:6e:80:87:c6:43:ea:7b:7f:65:c4:c3:e6:3d:6f:cc:82:
cc:01:a3:69:69:32:00:d1:29:81:7a:61:0d:de:a8:ef:c0:45:
b0:e2:de:21:af:fa:48:16:a4:7e:fc:89:3c:80:33:c4:cd:f1:
25:5f:24:a9:5f:fa:b1:eb:08:f2:d4:e2:51:69:86:39:8b:3f:
78:c8:10:cc:a6:61:f1:2a:b1:83:31:d3:07:c4:e9:a3:af:49:
87:82:df:54:24:0d:89:48:ca:2f:b8:78:54:74:cd:aa:7b:4a:
52:1a:14:4e:9d:19:4b:4f:a6:30:f0:19:c1:28:27:58:cb:63:
37:90:ad:7d:e6:9f:92:60:51:49:7d:93:f5:6e:e8:63:bd:99:
05:5c:9e:4e:ae:43:f0:72:4f:34:91:92:88:2c:18:0e:c3:68:
ff:d9:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:34 2025 by rpki-client