Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f52404c-69c2-3f65-9c32-d649c37a1bbb.roa
File: 3f52404c-69c2-3f65-9c32-d649c37a1bbb.roa (raw, json)
Hash identifier: lnVHWWsisWdco3/4yrRyC0BvYYHslnhOJvyPGX8IcPI=
Subject key identifier: 20:F5:E4:3F:76:F9:F2:D1:19:BF:5C:DE:54:6E:58:54:12:6F:B1:B3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50C8B6CD2B8D30B44E2540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f52404c-69c2-3f65-9c32-d649c37a1bbb.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 17197
IP address blocks: 2001:470:9a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:c8:b6:cd:2b:8d:30:b4:4e:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=2752e9bf-52d6-4764-95c8-711f043c442b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:22:15:22:0a:34:88:82:2f:db:4e:0f:56:
86:4f:cf:7f:cc:df:f1:23:8a:f0:b6:10:45:b7:59:
3c:9e:68:66:6c:e8:e1:f2:75:5b:57:c8:d5:f2:1a:
d7:b9:cc:f3:1a:5c:99:91:9c:ea:9e:26:6e:b1:f7:
8b:e5:62:57:fb:8c:17:2c:8a:96:af:a3:d7:b2:7f:
0b:51:c7:ec:6b:03:2c:ac:96:20:6d:0f:83:27:72:
f4:dd:e9:98:86:23:3d:70:3f:1b:28:9f:ad:af:cc:
e2:5b:5d:8f:27:b9:cc:a2:b2:87:28:b7:81:dd:a5:
6e:c4:44:73:2c:12:6b:74:82:fb:34:31:7b:df:c3:
09:7c:6d:1f:0b:5a:05:3f:7e:17:91:03:8e:b1:f0:
eb:f3:c0:53:05:8e:6c:2c:0a:8a:94:13:f3:35:b6:
4f:23:36:b0:39:a4:ba:d9:0a:9b:86:c8:0a:48:42:
92:fa:d3:a5:2f:ef:5c:cd:7e:1a:b5:be:44:44:48:
50:0d:de:a9:fb:ff:af:55:c6:f6:a2:7c:28:bb:84:
5f:72:34:82:1b:87:37:66:e7:e5:1b:c4:34:ed:42:
4a:93:31:16:71:11:b8:52:ff:69:dd:7f:cc:ef:ae:
81:f3:0b:53:cf:83:4e:14:c5:6c:e1:30:6f:48:c6:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F5:E4:3F:76:F9:F2:D1:19:BF:5C:DE:54:6E:58:54:12:6F:B1:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f52404c-69c2-3f65-9c32-d649c37a1bbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:9a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:6a:0e:d8:1d:e1:de:ca:2a:ff:c6:41:1e:04:f0:08:d3:fa:
e4:5c:5c:55:04:3b:46:42:2e:3e:37:da:55:02:d6:e4:0e:e1:
60:52:f1:31:a2:cc:4d:0b:d7:2d:89:1e:71:82:cf:bc:77:b9:
89:42:33:d7:64:96:c1:58:7e:09:7d:ea:af:a5:a3:32:1c:93:
58:83:1b:63:f8:e9:dc:c7:ce:29:60:8c:4e:8c:d5:6b:70:0d:
af:37:ce:b8:06:0b:16:37:0f:d2:6a:ed:18:f4:7f:61:22:7c:
44:7c:e4:59:45:ef:4d:43:28:88:ef:b8:25:79:16:e4:da:13:
e3:e4:a6:5a:fe:10:05:d2:e6:ff:0b:03:87:50:52:5b:c2:d0:
6a:50:04:af:2d:e0:3f:bd:f2:2a:8b:a6:78:b6:d9:6c:0d:63:
3c:92:54:6d:68:22:ed:15:86:f0:34:f0:e2:34:23:62:a9:ef:
f9:88:fd:2c:f0:1b:bc:61:f9:dd:5a:af:11:ac:39:84:c7:02:
9d:a3:6e:6f:a9:96:a2:a8:b2:2d:0c:57:dd:d1:88:99:a2:6f:
81:eb:fc:39:55:8f:29:57:8d:fc:eb:60:9f:30:12:e8:01:ca:
81:a6:7c:21:dc:42:dc:4d:f9:75:1b:30:88:a7:a7:84:40:b5:
49:d8:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:00:59 2025 by rpki-client