Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/52331aac-0383-34b1-8bcc-d7a91b54afbd.roa
File: 52331aac-0383-34b1-8bcc-d7a91b54afbd.roa (raw, json)
Hash identifier: G9I9L8Hrccow37WsYPEflN+2AbD8IG1HHE9ONVeP8ss=
Subject key identifier: F9:71:F7:E7:0B:DA:28:37:04:E6:55:16:ED:8D:EE:E0:A6:F8:70:B3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285840843797CA1872B8A038554C20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/52331aac-0383-34b1-8bcc-d7a91b54afbd.roa
Signing time: Sun 08 Jan 2023 12:00:00 +0000
ROA not before: Sun 08 Jan 2023 12:00:00 +0000
ROA not after: Sun 09 Jul 2023 04:00:00 +0000
asID: 31769
IP address blocks: 2001:470:133::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:84:37:97:ca:18:72:b8:a0:38:55:4c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 8 12:00:00 2023 GMT
Not After : Jul 9 04:00:00 2023 GMT
Subject: CN=b82bc6a0-5879-4cbb-8beb-097bc86fb0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:50:5b:05:e6:da:6e:86:b0:7e:f6:86:c5:
b7:02:0c:f9:43:b8:80:59:05:19:12:97:fa:42:61:
31:a3:bd:5b:02:82:c2:69:14:e8:32:0e:b1:37:af:
3a:fe:ac:04:eb:59:96:ee:80:63:ec:8c:3e:ca:74:
3b:4e:dc:ce:ff:d9:41:a4:b4:a4:85:11:8f:68:59:
86:65:9a:ac:e5:e3:10:98:28:51:1e:df:31:14:86:
97:34:b2:a4:32:5a:c6:44:ee:41:46:b3:2c:c9:73:
e5:17:30:d3:55:a1:0e:fb:ec:f3:67:76:f4:d4:0e:
1b:d4:5e:36:fb:51:19:37:29:03:f4:36:29:21:65:
92:ea:9f:88:fc:21:87:ff:a3:07:fd:60:36:d0:8b:
9e:47:d9:f0:a0:4d:e0:72:2f:a3:07:54:fe:c7:cd:
54:98:ba:a7:83:45:53:52:e6:9e:ac:85:c2:12:23:
8d:1b:13:17:48:41:0f:96:38:15:cc:7a:1f:94:2e:
c8:13:a3:df:d1:76:0b:5e:f6:8b:12:fe:d3:f3:6d:
56:12:2e:45:b4:0f:be:36:da:77:e6:ec:02:32:c0:
47:e1:44:91:42:54:74:e5:60:7d:de:58:83:de:60:
11:22:d4:1e:be:66:47:da:2d:94:18:33:9e:1c:1a:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:71:F7:E7:0B:DA:28:37:04:E6:55:16:ED:8D:EE:E0:A6:F8:70:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/52331aac-0383-34b1-8bcc-d7a91b54afbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:133::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:b5:c7:5f:00:11:2b:c8:96:81:cf:27:5d:25:0e:bc:d6:c6:
5e:33:d0:a3:0a:08:21:39:ec:10:45:40:ac:41:0d:e1:49:02:
41:21:15:72:1b:07:83:9c:31:23:88:7e:19:b4:bd:f3:8d:bb:
86:1c:4f:68:8a:38:d8:4b:20:a1:b2:3d:9f:bd:f9:30:e3:ff:
c2:2f:e1:ce:8f:97:4d:ee:ff:22:c0:29:59:76:91:ae:22:2d:
bc:b1:27:2f:6d:d7:d0:7f:b7:82:a2:cb:ce:f3:9f:e5:04:ae:
71:d4:5d:58:80:91:5c:75:54:2e:58:f0:70:82:dd:b6:53:62:
3a:40:a5:f6:a8:74:28:b9:2a:ba:01:4e:53:ba:88:c2:ee:5a:
f8:69:ba:f6:fb:6b:78:9f:b8:79:88:9e:22:16:f9:22:61:a4:
fa:da:af:a1:f2:ab:e4:73:1d:3f:af:08:11:e6:5b:9a:f5:83:
5c:f8:01:a1:e8:fb:c3:62:8c:99:8b:17:d0:58:e8:e0:ab:83:
dd:a1:ff:27:46:62:1f:4b:0d:e1:42:9e:3c:ac:68:59:a6:07:
ab:a1:3c:06:d5:6e:a2:1d:ce:23:27:09:fb:b6:d9:f0:b5:e9:
67:87:a2:4b:45:bc:60:db:55:7c:8a:db:f5:1a:5e:48:ab:40:
92:bc:bb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:21:50 2025 by rpki-client