Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3340d5ba-a6fd-3fdd-96af-da83de557bc1.roa
File: 3340d5ba-a6fd-3fdd-96af-da83de557bc1.roa (raw, json)
Hash identifier: iGc2cNT1Tx6u6JMyHpiCDYrF/h/HU9SIQlB6uC3aosY=
Subject key identifier: 13:D6:DF:90:8C:9C:AE:4F:A0:E6:EB:AE:9C:5C:83:BE:E5:25:EA:BB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA6FD0CAE96056A0AF69D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3340d5ba-a6fd-3fdd-96af-da83de557bc1.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 55243
IP address blocks: 2001:470:96::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:fd:0c:ae:96:05:6a:0a:f6:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=4034447c-cfe6-4e82-860c-e446ff05a090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ac:eb:4c:fb:0b:92:e5:46:2d:47:73:2f:58:
4c:fc:c0:8f:11:bd:3f:e7:d0:85:50:bc:4d:f6:7c:
f4:52:5e:08:14:7d:96:e8:45:a9:59:dc:11:8d:b7:
c7:11:7e:e2:ea:5f:eb:1a:ff:7f:e8:02:89:82:e5:
aa:e9:89:13:35:31:c7:de:d0:a6:d7:d7:f7:58:03:
ab:1b:cc:e5:93:29:fa:31:1d:57:44:d3:87:fc:a4:
11:81:20:ed:18:92:b3:f9:8e:f8:d4:cf:52:23:a4:
04:10:cb:da:70:b6:09:5d:07:82:5f:e5:89:cf:57:
1b:5b:09:1b:94:06:bf:8f:82:0c:bf:75:24:f3:36:
1e:80:0e:3d:16:f7:ba:6b:4f:a9:2d:f6:f2:8b:19:
b2:08:ac:5f:e7:1c:51:dd:56:97:41:90:41:d7:d2:
42:f6:ee:7e:b6:48:ca:5b:f8:19:d1:13:b8:94:b0:
c4:b1:d6:6c:cb:04:ca:26:49:7f:ee:a9:3f:38:95:
e2:02:78:37:d5:23:ee:cc:36:d6:4d:14:3f:82:91:
be:63:ef:dd:32:d6:6c:29:b5:e3:01:db:dd:7e:f3:
b3:5b:cf:bf:d1:9f:18:e3:1b:7a:5c:19:1f:2f:97:
17:da:dd:1c:55:a7:0e:82:b4:3e:25:12:13:16:cd:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D6:DF:90:8C:9C:AE:4F:A0:E6:EB:AE:9C:5C:83:BE:E5:25:EA:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3340d5ba-a6fd-3fdd-96af-da83de557bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:96::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:7b:8e:68:7d:de:cb:33:66:88:13:ff:b6:64:a2:28:f2:07:
d9:50:72:00:40:4a:67:1e:95:ae:10:e7:88:5b:dd:53:2d:44:
43:22:89:47:99:07:72:2f:6d:cd:1c:aa:ac:b0:b5:69:ff:7d:
4e:08:46:34:76:9c:b3:37:6f:4b:54:fb:5d:d0:c2:29:6d:5b:
4e:74:3c:5e:5c:f8:de:d7:21:7f:94:6c:a4:4c:79:2d:fb:1e:
2f:cd:7c:50:b6:7d:7a:04:ed:4f:30:fe:27:ad:54:cf:05:11:
27:cc:f8:a0:8a:db:e6:e8:44:a6:0f:ba:f2:64:1b:d9:10:d9:
3a:29:91:6e:fd:1a:7e:07:df:e9:38:65:24:c1:51:b4:ab:d3:
74:57:05:29:58:bd:c3:88:38:da:5f:48:17:82:38:d5:8c:77:
fc:38:92:81:33:11:0c:3c:29:51:e0:5a:d4:59:f3:8e:fc:72:
eb:fb:de:2d:71:c0:9a:6d:b5:77:da:69:90:67:84:bd:cd:d9:
42:57:cb:b3:68:8d:bf:76:13:84:80:b9:c7:9c:64:1d:ae:ff:
5e:10:3c:ad:e5:a8:10:77:f8:e7:71:70:a1:67:76:70:51:1b:
48:1b:b5:2b:cb:c8:f7:dd:9a:27:b3:eb:6c:76:91:2f:f0:03:
db:b6:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:16 2025 by rpki-client