Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a790932-2cea-353c-8137-9a9b19aa0bde.roa
File: 3a790932-2cea-353c-8137-9a9b19aa0bde.roa (raw, json)
Hash identifier: zqszqFymJgaoifbE9qXZKSDgOKtx4bJLQhTrk+Y/74g=
Subject key identifier: 42:0B:A9:AC:38:F1:53:AA:0B:A3:A6:8E:3D:3A:30:D0:A0:73:C4:C4
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA654F28CB92D44E29DEF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a790932-2cea-353c-8137-9a9b19aa0bde.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 26073
IP address blocks: 2001:470:10d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:54:f2:8c:b9:2d:44:e2:9d:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=85e03d0d-9a06-463b-90f8-4d00e59c0d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:95:e7:52:4d:c3:d7:36:95:e2:91:4f:33:9c:
6f:76:80:82:98:27:2f:db:a1:8f:88:2e:c6:64:e8:
98:e1:1d:1c:77:a9:76:64:95:25:24:b6:f9:1a:a4:
6b:3f:61:75:ad:e0:c9:98:cc:82:55:00:e9:21:6d:
d6:54:b0:84:56:a0:91:71:04:7f:90:9e:73:31:17:
b8:b2:ff:04:24:06:ca:08:c5:6e:32:ed:52:87:40:
6d:20:a7:5f:5f:d4:5b:cf:f7:4e:2c:c4:7c:34:5d:
f8:5f:39:46:8d:0b:dc:a6:28:0c:1a:1b:07:b0:82:
a6:05:29:37:b7:d5:dc:1e:23:27:3c:2d:76:f6:74:
82:63:2f:58:49:bd:89:39:c0:f2:51:11:53:65:d5:
47:b3:e2:df:49:e7:08:d4:c0:8a:cb:f3:d0:6a:2c:
51:ad:02:57:e3:40:54:43:e6:9a:52:c5:e0:4e:22:
52:bf:7b:a9:24:07:cd:3b:57:4f:66:10:b7:9c:a4:
3b:cc:1e:58:26:2e:a3:66:b6:b4:03:5a:81:d2:08:
03:14:bc:8d:c1:54:b0:d1:e5:45:98:89:fc:8c:0b:
92:41:d5:c0:c3:0e:79:bf:33:ca:b8:86:81:47:c9:
54:11:38:0f:cc:47:79:a6:34:e1:fd:a9:d3:23:81:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0B:A9:AC:38:F1:53:AA:0B:A3:A6:8E:3D:3A:30:D0:A0:73:C4:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a790932-2cea-353c-8137-9a9b19aa0bde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:10d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:c4:bd:03:c2:fe:c7:8f:f4:65:ce:ed:da:81:ae:b6:30:ac:
89:dd:96:34:34:82:c8:a7:dd:b1:1a:de:6c:c9:91:b2:06:3a:
37:4a:b9:68:b5:9a:0e:a8:ca:8d:71:61:3b:b6:01:23:46:ed:
f4:26:50:93:af:61:9f:35:02:a2:c8:d4:22:c3:75:fa:d1:59:
3a:52:19:4a:6e:4b:b9:12:bc:73:0f:03:ad:93:91:f6:01:b8:
32:00:6a:e7:ca:64:17:80:7e:60:63:ba:6d:2a:7c:2c:2a:3e:
7c:30:e4:1f:26:8f:bd:5e:64:a4:18:30:e3:4b:18:b2:31:11:
b6:b1:04:b2:12:e5:2b:9e:d5:e1:61:2f:8d:ba:30:f2:20:26:
0b:ff:d6:2b:6e:a3:6b:e7:3b:b0:4f:34:3f:be:bb:03:f5:93:
2a:4c:94:9a:a2:0d:73:59:1e:78:85:93:05:62:6d:a3:a6:51:
46:53:9c:ee:f5:bf:df:f1:3a:9c:36:b9:d2:11:3b:d3:66:19:
76:3f:34:90:5c:0b:8a:bc:70:c8:00:9d:b5:87:64:15:d4:42:
68:2b:f5:e0:8c:a6:ca:e4:3b:e5:ca:3a:a6:14:3b:25:15:a0:
15:1d:3b:bd:3f:6c:52:46:04:65:a8:aa:fb:0c:c7:ef:d4:b8:
8e:a8:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:35:50 2025 by rpki-client