Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5caa5944-8e73-363b-93af-0bc3ce058f4c.roa
File: 5caa5944-8e73-363b-93af-0bc3ce058f4c.roa (raw, json)
Hash identifier: qdi/qEbJeulbBWoCk3Ky36WkhKnEj3Y7xIZrDd4xoes=
Subject key identifier: B7:B6:1E:C8:3C:7C:73:EE:67:F0:86:70:0A:99:F5:33:2F:74:FC:1B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858428197DFBED81C2549415E4200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5caa5944-8e73-363b-93af-0bc3ce058f4c.roa
Signing time: Sun 09 Jul 2023 12:00:00 +0000
ROA not before: Sun 09 Jul 2023 12:00:00 +0000
ROA not after: Wed 10 Jan 2024 05:00:00 +0000
asID: 14978
IP address blocks: 2001:470:db::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:81:97:df:be:d8:1c:25:49:41:5e:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 9 12:00:00 2023 GMT
Not After : Jan 10 05:00:00 2024 GMT
Subject: CN=878eb197-2aea-4f7b-8c17-1a1d2d2dc1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:3d:bb:13:cc:87:d4:97:a5:63:46:c3:fe:
2a:86:cf:95:7c:6e:a5:c5:07:bd:c8:e6:84:10:2d:
1e:1f:0b:84:cd:44:4d:29:b9:a1:de:c4:bf:a1:bd:
bc:1d:80:7e:34:0b:6a:2a:3b:a9:0c:f6:71:30:cc:
9c:03:d0:26:c6:d6:18:e6:0b:33:c6:d6:29:68:41:
cb:cf:ab:2e:2a:ea:da:35:01:14:09:8a:57:7f:76:
2b:b6:7f:40:86:c1:c2:ec:4b:b8:a2:a5:68:33:aa:
18:f9:aa:fd:3e:77:83:dc:57:6a:ba:8c:48:95:92:
de:a5:84:48:a8:1b:c3:93:94:df:59:98:d8:ab:4d:
4f:a8:8f:3e:a4:ca:1d:1c:58:2b:2e:a2:00:69:af:
9c:52:33:89:de:22:fe:ce:cf:ae:93:31:35:00:ed:
0d:6c:6a:b5:81:b7:a9:81:d3:74:2b:50:59:1a:27:
4d:00:94:b2:b8:c9:22:fb:54:97:e3:cc:33:a8:81:
81:a2:e0:b5:25:2c:6e:d1:c1:9d:27:2a:61:89:23:
31:89:5d:c9:16:11:8a:bd:ce:0b:35:38:12:8e:66:
17:fc:13:79:66:fb:8d:66:83:80:8c:83:4f:97:07:
fb:67:93:3d:ac:41:89:b1:8a:7e:8f:95:79:c0:52:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B6:1E:C8:3C:7C:73:EE:67:F0:86:70:0A:99:F5:33:2F:74:FC:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5caa5944-8e73-363b-93af-0bc3ce058f4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:db::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:be:ef:1d:8d:69:c2:81:48:cc:ce:f2:b1:14:f6:82:d7:66:
b0:ae:bc:75:38:51:f8:d9:4c:fe:d4:d9:3d:e6:c5:55:40:46:
96:7a:51:ae:6e:49:1e:2b:44:f2:ec:a5:74:ee:d7:da:9c:31:
c1:f1:77:41:83:37:0e:d9:82:54:5f:26:90:4d:6a:a2:1d:ca:
40:5b:c5:00:a2:8c:0b:40:67:5b:6b:bb:23:8e:47:e2:e9:d9:
6c:ba:b3:95:7d:04:96:b9:9d:22:07:e9:be:a6:b3:77:bb:08:
9a:bf:41:70:36:22:cb:49:d7:80:47:74:c1:af:92:52:b4:8b:
5c:7d:a6:85:6c:a0:f8:b3:05:b0:35:e5:54:b4:eb:1d:02:80:
06:8e:bb:53:0c:36:06:46:7c:81:af:f9:8b:fe:02:f7:3c:d3:
aa:5a:c9:cf:bc:b6:88:ea:ea:f7:bb:d1:c6:42:92:6f:23:fc:
d9:7e:9c:81:ee:04:2d:df:fb:6a:51:61:7a:3a:70:f9:f4:fd:
45:d1:0b:25:8a:fc:db:e8:8c:07:04:ae:3b:4c:96:7a:a5:b3:
35:c4:27:f6:4b:bf:d2:95:a0:fb:99:ef:48:9c:a8:ee:34:d4:
bf:e2:bb:1a:3a:36:8c:cc:e9:cf:6b:c8:bd:1d:83:e7:07:e1:
3a:64:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:44 2025 by rpki-client