Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/54a369f8-b31d-3098-82a5-9ca799b4ce09.roa
File: 54a369f8-b31d-3098-82a5-9ca799b4ce09.roa (raw, json)
Hash identifier: YhhGUNCTQ29elvMwfNdyz/yr9tzSiOvEr3r+ybSttks=
Subject key identifier: 42:52:57:5B:C7:53:ED:11:3C:EA:77:49:48:3F:1D:F0:F8:59:84:40
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858420AF1C9816FC898E4795A0C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/54a369f8-b31d-3098-82a5-9ca799b4ce09.roa
Signing time: Sun 28 May 2023 12:00:00 +0000
ROA not before: Sun 28 May 2023 12:00:00 +0000
ROA not after: Wed 29 Nov 2023 05:00:00 +0000
asID: 393737
IP address blocks: 2001:470:d1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:0a:f1:c9:81:6f:c8:98:e4:79:5a:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 28 12:00:00 2023 GMT
Not After : Nov 29 05:00:00 2023 GMT
Subject: CN=99a638f9-f111-4216-8286-96676c9a68d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:07:34:72:a2:e5:ca:4b:c7:c6:62:02:25:c5:
9a:11:e0:03:3c:a4:90:30:e3:68:2a:13:93:9b:f2:
dd:4d:cb:e3:08:42:a9:15:5b:5a:fa:0b:a1:0b:8c:
1f:be:dd:98:d0:59:9c:5d:63:83:2a:72:ef:aa:9f:
1f:95:c8:f3:e1:5e:65:13:7b:a9:b3:ec:2f:c7:e4:
b0:3d:56:0c:30:3f:91:05:e9:20:ca:fd:d1:9f:45:
9a:bb:cf:67:c3:71:f3:f8:0e:cb:32:a6:f1:c4:c5:
4a:b9:40:00:a9:54:f4:b6:e9:2e:46:01:ae:a1:7d:
ee:81:ba:1a:3b:4b:b7:c7:f8:42:58:02:5e:65:30:
53:a9:dd:fb:21:03:04:4c:ac:ad:6f:10:65:88:fe:
37:7b:dc:7c:2f:9c:fc:fe:5a:0b:61:35:b0:3b:50:
ce:ac:e7:a4:08:3b:61:84:80:2b:f6:99:d7:80:47:
de:8b:60:c6:45:25:be:d3:22:36:78:4a:13:77:a6:
2d:f3:f8:38:f5:0f:f0:8e:79:ec:52:21:9e:cc:6c:
77:54:de:f6:3c:3d:6e:7e:5e:2a:b7:f1:ca:e7:10:
d2:d0:be:ec:c2:39:91:2d:a8:bd:de:1f:79:e6:29:
c9:ce:69:93:9a:4f:93:5d:51:35:0a:84:6e:c9:3c:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:52:57:5B:C7:53:ED:11:3C:EA:77:49:48:3F:1D:F0:F8:59:84:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/54a369f8-b31d-3098-82a5-9ca799b4ce09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:d1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:c3:cb:41:1b:fa:e4:9d:53:42:87:5c:17:a5:3d:14:0d:49:
0b:e9:cb:4c:92:2f:0a:82:c0:03:ed:a0:cd:e9:6d:99:04:f8:
1c:13:4a:ab:0c:1e:0a:bb:4c:89:61:ea:c1:77:d2:9b:a3:a9:
c4:29:1f:12:99:81:33:ab:a9:c9:08:9a:51:cc:2b:96:bc:49:
96:78:85:e0:d1:89:d6:13:79:79:8f:a2:62:a8:fd:0d:50:a8:
c6:ad:f2:45:8d:05:3c:c9:61:8d:ed:c1:e0:6d:0b:3f:ee:bc:
45:f9:f9:a5:43:4f:2c:48:58:b8:4b:ad:26:1a:40:e1:e2:1d:
41:2c:cc:98:a9:48:eb:ec:72:83:6a:e5:5b:86:60:d3:b1:b9:
c0:9c:c0:fb:19:96:52:d6:d6:bc:ba:b0:a1:e2:72:73:18:36:
4b:b4:be:69:49:ac:86:ab:71:64:8a:d1:2c:ca:d7:b4:e5:c4:
c0:13:91:c2:19:1e:ee:88:dd:74:c3:9f:d0:7a:7a:48:05:d9:
86:20:82:ad:44:88:c7:ef:81:ac:8d:97:0b:3e:1b:aa:ee:aa:
27:9c:d4:d1:76:62:cf:6a:54:c3:d1:51:7c:aa:4e:a1:4c:23:
9e:7f:e4:36:b6:7b:bb:6f:f1:2f:61:93:4e:82:a8:e5:2f:ff:
be:66:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:16 2025 by rpki-client