Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5720fa83-5fe6-314c-a4ad-7f2bee633a32.roa
File: 5720fa83-5fe6-314c-a4ad-7f2bee633a32.roa (raw, json)
Hash identifier: 885lg1kjvsgKuhUdMVTm0atP9j7o/2wPPW6Q5RPT9VQ=
Subject key identifier: 15:1B:89:E6:3D:39:5A:CC:E5:59:0F:47:A1:63:26:09:D0:7C:07:FB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50F7C7011270BD01F8ACC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5720fa83-5fe6-314c-a4ad-7f2bee633a32.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 29962
IP address blocks: 2001:470:121::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:f7:c7:01:12:70:bd:01:f8:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=ce56ca26-2136-42eb-88eb-dcf121da0fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:c5:d6:f8:1a:f6:52:d1:40:b7:22:ef:c8:
04:e1:9c:fc:22:d4:2f:0c:b2:e2:46:70:87:55:40:
5a:59:66:36:8c:74:de:c0:e0:bc:0b:8c:f7:a7:23:
a9:f8:4c:e4:c5:f7:f5:00:71:59:48:ae:8d:f2:ff:
df:54:93:23:34:ae:22:2e:81:0c:92:da:3b:b8:3b:
34:c0:72:65:c4:33:34:9e:0c:e0:ac:81:9e:1a:0c:
6e:4d:8a:37:b3:fb:8c:c9:6d:0d:39:16:80:9d:b3:
ec:11:a1:01:fe:37:43:27:8a:52:1f:f7:7b:8b:33:
f5:6b:82:86:11:bf:75:74:bd:c8:6c:cf:c8:ef:13:
2f:a0:84:9e:ba:a4:75:cd:04:82:2b:91:9f:a7:ca:
f7:b4:9c:e0:d5:ca:42:1e:7a:92:99:51:2d:46:92:
ae:72:21:6a:4e:93:e4:e7:ce:29:b9:93:96:04:55:
6c:58:7f:69:7f:fe:18:be:23:48:47:d5:5d:0f:56:
75:14:6a:a4:66:ed:66:34:a6:20:a6:c8:9e:50:51:
7e:bb:5f:45:19:3a:47:a8:d5:30:17:a8:c8:c8:8d:
d1:a3:be:15:f7:58:b0:d6:13:ef:39:d4:c2:54:84:
e4:39:53:30:7d:c9:62:85:96:9a:8d:9f:42:bf:4d:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1B:89:E6:3D:39:5A:CC:E5:59:0F:47:A1:63:26:09:D0:7C:07:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5720fa83-5fe6-314c-a4ad-7f2bee633a32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:ee:b5:16:f4:04:87:52:41:c1:61:7a:7c:69:6b:ec:1b:34:
9a:10:fa:48:bd:56:3d:49:e9:1e:a3:f6:aa:35:91:12:a2:3a:
68:9c:30:78:c8:a0:15:75:bb:70:7b:d0:14:9f:57:a6:dc:67:
2f:b5:19:39:d6:0e:fa:01:e5:29:de:ed:76:24:61:62:9e:9b:
ae:ca:e6:7d:e0:80:99:e0:14:62:74:1b:c2:4c:26:24:ad:64:
6f:e6:b7:9c:bd:74:b9:8a:87:0b:c8:42:98:0a:2d:c5:f2:15:
03:8b:e1:08:ed:21:bd:94:ac:71:49:63:ac:15:de:f1:99:91:
bf:24:f7:da:c8:fd:90:28:9e:bc:62:f1:2e:9a:47:f3:c9:1a:
6f:e3:30:14:18:7f:9f:79:af:4c:12:c9:c0:e3:7f:f6:06:e0:
1c:37:ed:f3:10:9b:82:d3:94:39:5d:6e:f5:48:93:7e:8d:68:
a0:c2:e8:de:4d:8e:e2:09:3b:19:ac:db:3c:37:ec:d2:2c:8d:
41:b6:4f:5f:b8:03:0f:04:ef:1c:cd:92:31:90:f4:49:84:a8:
1b:1c:38:3e:dd:22:ab:3d:8a:2a:11:61:f0:15:31:64:2d:27:
f4:c6:00:4d:4e:29:fc:07:d3:ba:36:f3:a0:e9:00:0e:4f:e6:
6d:b6:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:06:25 2025 by rpki-client