Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/38330a03-4343-3945-8a39-7db4fb391b04.roa
File: 38330a03-4343-3945-8a39-7db4fb391b04.roa (raw, json)
Hash identifier: 1B2iFiX1QWugnhEjTfA7z1JFs5vAT2jJ6s7xmkcJS0c=
Subject key identifier: 7F:67:3B:DD:13:69:29:04:89:C2:98:39:D2:5D:2E:9E:74:7D:5A:D6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50E245F8081B3A9B697E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/38330a03-4343-3945-8a39-7db4fb391b04.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 19969
IP address blocks: 2001:470:32::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:e2:45:f8:08:1b:3a:9b:69:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=2f4e3f7d-7485-45f3-9a28-7feb4aae9831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:64:4b:9b:a0:3d:fe:f8:aa:e5:c3:c2:e3:
24:c6:03:c3:ac:5c:b6:48:3a:5c:22:48:ad:ed:a1:
3e:4e:fc:31:9b:f3:47:27:71:59:69:0f:9e:e0:57:
18:5b:c6:a2:26:20:d2:66:09:b7:d9:cb:93:65:eb:
e1:9c:5d:0e:24:b3:ca:91:cd:8f:58:e5:d6:23:13:
7f:e4:84:78:d1:65:33:0b:1d:ee:95:fa:5d:1b:d9:
f7:5a:4c:e1:3d:f9:81:9b:3f:17:0c:2c:49:b9:49:
8c:81:a3:96:96:57:27:34:45:95:61:c3:61:f1:07:
34:cd:7d:ca:0a:5b:8c:ac:b0:f6:03:a8:28:8c:8f:
6e:3c:64:a9:04:23:3f:83:ae:c4:8a:33:7c:c9:ff:
b8:11:27:af:dc:c7:62:20:b6:2f:50:b9:ae:10:bb:
86:27:dc:6d:30:30:66:b7:0b:0e:b0:c7:96:7d:fd:
81:d6:92:8f:0c:34:60:21:a5:39:0e:88:95:7a:dd:
48:76:46:71:8d:24:78:80:3a:d3:1d:e8:9a:f6:40:
b1:ac:5e:bd:52:f2:b6:53:7d:3d:b4:d1:e0:2b:b7:
db:fd:7d:3b:47:a9:64:15:c0:49:fb:92:54:1d:d8:
cd:dd:31:5e:4a:16:0d:1d:54:c8:cc:d6:0b:eb:3e:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:3B:DD:13:69:29:04:89:C2:98:39:D2:5D:2E:9E:74:7D:5A:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/38330a03-4343-3945-8a39-7db4fb391b04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:32::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:1f:8b:4b:d9:0a:92:32:ed:41:45:a6:2e:3c:10:c0:27:eb:
b3:f4:5c:fc:a3:1a:7e:d8:9d:c1:8f:fd:bf:90:12:08:b8:9f:
3b:a8:8c:44:cc:84:d4:4d:f5:1f:e8:cb:2f:24:6f:6b:28:d1:
45:79:d5:e4:f5:3c:fb:2d:50:2a:5e:eb:00:05:aa:db:8f:43:
15:b4:6b:f4:11:77:44:10:63:bb:2f:35:9f:66:a1:1e:ff:2c:
3e:39:10:a6:57:d9:ad:a2:5e:23:c8:1e:00:10:33:48:f3:f4:
d8:3e:d4:11:73:c9:4b:3a:b9:5e:81:86:a6:ee:dd:22:13:c0:
7f:fe:62:d4:8b:a9:8b:b9:29:fd:59:23:0b:2c:de:fa:f4:a7:
ba:0c:9c:5d:49:c8:bc:da:51:d3:b0:c5:3f:08:4f:4f:77:cd:
12:25:c1:42:4a:b7:23:1f:47:44:48:c8:d2:3a:9b:76:74:3d:
52:14:16:e5:86:35:72:ce:64:f8:bd:c7:4d:95:13:61:85:43:
c2:f5:6e:fa:7a:5f:b2:8b:20:1f:01:e9:f4:22:42:da:f8:91:
d8:a9:2f:96:53:aa:9f:1a:c9:16:25:29:ae:9d:b5:db:34:77:
7a:f4:50:1b:30:1a:64:c0:6e:80:43:75:e0:72:f1:96:43:c9:
95:a4:a8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:26:14 2025 by rpki-client