Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45b85f2a-88eb-300c-a600-5a12b22f1011.roa
File: 45b85f2a-88eb-300c-a600-5a12b22f1011.roa (raw, json)
Hash identifier: /ZmDRdBsIvd7nsFZhucYmvLndKYDC0Y71yjeDEoKCbI=
Subject key identifier: CA:DA:D1:05:62:4A:6E:6C:39:DD:49:56:EF:89:03:C1:C6:AD:17:14
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584297ED5C332879178EC3418900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45b85f2a-88eb-300c-a600-5a12b22f1011.roa
Signing time: Mon 17 Jul 2023 12:00:00 +0000
ROA not before: Mon 17 Jul 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 35075
IP address blocks: 2001:470:163::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:97:ed:5c:33:28:79:17:8e:c3:41:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 17 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=3a7879b5-5541-49d7-bf0c-2499b19e3f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:64:f7:35:29:6b:d6:5d:03:b6:83:ec:2c:
18:09:d9:b5:d9:cb:b7:b2:cd:a0:32:ff:03:ad:78:
06:23:19:02:e2:04:43:4e:ef:d9:d0:9a:5e:b0:1d:
78:a0:f7:dd:26:4a:a3:84:0a:92:fc:3a:b1:1d:4a:
55:d8:c5:7e:39:89:90:6c:ba:3a:5e:65:03:92:07:
3d:7a:01:fa:5b:89:6e:5f:0c:e1:41:c7:97:98:73:
c3:73:1c:fa:30:7b:f6:2c:63:47:05:85:2f:3e:70:
4e:9d:c1:b7:41:2c:6b:4b:4a:d3:66:c5:29:ce:fb:
56:11:63:c6:6f:5d:6f:de:27:f7:9c:eb:6e:3c:48:
d5:50:39:1e:73:a0:cb:ac:52:87:98:a8:45:93:33:
58:b9:87:8e:bf:ca:ce:51:1f:8d:d6:83:36:f5:fb:
97:d7:a3:e7:56:ac:37:48:2b:a7:3c:38:17:00:18:
ea:fa:fb:19:00:8d:34:36:51:6d:05:3e:8b:69:67:
1c:5d:0e:c7:46:cf:49:97:4a:a6:f4:38:68:33:05:
32:0e:ca:c2:25:3d:b8:67:07:2e:d8:3c:54:e3:f2:
29:28:ab:90:c7:cc:ae:58:c5:b1:3d:7d:fb:bb:4f:
ac:02:2c:40:03:b3:bd:45:0f:18:ca:6c:c9:a6:d3:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:D1:05:62:4A:6E:6C:39:DD:49:56:EF:89:03:C1:C6:AD:17:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45b85f2a-88eb-300c-a600-5a12b22f1011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:163::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:5a:f2:de:89:7e:2d:b2:53:62:a5:85:9a:0d:2a:1a:24:ab:
a7:2b:ea:93:4b:26:28:2e:6f:d4:97:ea:13:a6:80:01:7e:e5:
17:a6:20:85:e4:1a:95:91:da:7b:3a:6a:64:4d:0a:64:13:43:
2d:f3:38:11:08:df:16:b4:8e:d2:13:ab:fb:6a:21:44:cf:69:
9e:27:ae:12:02:79:d0:74:39:d9:b9:ba:ce:8f:56:22:57:2f:
86:c8:88:ea:c8:48:c6:1f:43:95:30:29:6e:65:bc:ae:66:23:
a5:2f:68:4d:fd:15:2a:dd:22:08:2e:4c:81:6d:9a:8e:64:0f:
53:ee:f7:90:63:32:b2:fd:c4:58:6d:50:c8:7d:e8:40:c3:d7:
05:b8:c7:61:e0:e5:c0:28:94:1f:92:b5:cb:b3:25:f9:45:44:
c8:0e:f1:f9:72:9b:af:54:36:fb:02:34:71:b4:60:29:05:f7:
92:ba:46:34:fd:3a:8c:f1:81:1b:a6:12:fc:b4:8f:56:e0:90:
8f:e7:41:47:8c:09:2f:bf:2b:9a:27:74:d2:4f:10:ef:f9:8e:
6b:72:94:ff:c2:b6:12:13:df:92:9c:ea:d0:ff:2e:9b:cb:a5:
99:97:0c:e4:25:7f:8e:27:71:01:a9:3d:cb:68:48:01:03:0a:
4f:c2:ee:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:50:24 2025 by rpki-client