Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/603af376-7a5e-3478-8cfd-a14e41332655.roa
File: 603af376-7a5e-3478-8cfd-a14e41332655.roa (raw, json)
Hash identifier: euQ6mMS9Gz0aosyRYecdIhlr2p2dDcbDZT0ztWmWdX0=
Subject key identifier: 2B:1A:EF:7C:52:D5:F7:1F:54:9C:DB:BA:5B:87:4C:0B:35:23:C3:7F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648EAB824A372A2EDD0E2800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/603af376-7a5e-3478-8cfd-a14e41332655.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 59460
IP address blocks: 2001:470:53::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:ab:82:4a:37:2a:2e:dd:0e:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=a4c342da-7dac-4f6d-8703-0f75efd9476c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:11:4a:11:12:23:f6:52:f1:7e:63:da:1e:
c3:c8:58:ea:c0:c9:30:87:56:8f:19:59:e7:bf:0d:
84:8f:07:82:9b:15:91:6d:9e:c4:56:a6:c6:6a:28:
3e:42:05:87:05:55:4f:d0:7c:bb:54:13:08:8f:4c:
37:ba:10:d2:47:32:03:6d:c4:68:fb:1b:9c:80:b5:
d0:d2:b3:97:28:02:d9:18:6a:02:16:3d:84:8f:0d:
8a:3b:61:22:a4:0a:9e:f0:42:d6:77:54:78:43:27:
a1:01:17:6f:dd:a1:f8:c1:60:fe:ff:c4:de:fc:1c:
d5:02:7f:9b:fc:1e:d4:e3:1e:75:44:52:14:69:4d:
44:51:3e:1a:1b:28:b2:15:25:51:2d:4e:67:44:6b:
95:ca:44:36:08:e1:26:b1:f5:ca:bc:49:04:38:16:
4d:32:84:4e:e8:1b:42:99:26:43:4d:88:5d:36:c6:
b7:41:ce:a9:04:ec:65:1d:0a:d5:3b:f4:54:ac:4b:
ad:78:03:07:35:87:a2:fe:0c:8e:67:d8:43:9f:02:
89:fc:22:60:58:7a:b8:b9:5a:dd:5f:0a:e5:a2:ac:
49:fa:34:c0:0d:c6:b0:29:ea:bc:f4:67:60:1f:3b:
70:ad:2a:22:fa:10:f8:f3:53:d6:a4:4d:c8:16:15:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1A:EF:7C:52:D5:F7:1F:54:9C:DB:BA:5B:87:4C:0B:35:23:C3:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/603af376-7a5e-3478-8cfd-a14e41332655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:53::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:8d:8e:c2:e6:a6:76:4f:70:08:5c:a9:3e:00:a0:9a:9d:a1:
20:1a:9b:66:2f:15:a2:02:6b:b7:b5:06:03:3a:da:d8:b1:ac:
5d:4c:9d:7e:16:76:98:d9:cb:e3:3a:db:bf:e6:4d:1d:89:72:
dd:6d:1c:f5:a5:05:7d:1a:86:df:e8:48:99:5f:b7:7d:94:aa:
4d:83:4e:f1:30:84:ef:a4:f0:7e:42:28:ba:0b:85:3b:c0:04:
ca:92:7e:0b:9c:e0:d0:01:9a:19:d5:96:29:9e:a5:1f:04:cd:
6f:74:8c:61:a1:bb:41:0d:1c:a6:4d:31:8a:de:b3:80:79:83:
fc:31:a1:1e:3e:fa:38:17:b5:2e:4e:0c:51:0e:c6:7e:00:fd:
ed:a3:79:5c:da:2c:18:48:ae:bd:6a:76:a1:76:6d:12:e5:02:
f7:c4:8d:f4:80:2d:76:dc:f3:c0:4c:c6:e4:b5:e8:78:02:9f:
ce:5d:67:77:5c:82:5f:2b:d8:cc:45:1c:47:51:23:39:a3:ca:
63:81:8d:85:14:95:5e:46:8b:cf:91:db:ff:ae:e2:5a:96:f6:
cf:8a:12:98:a7:0c:e1:02:81:20:9e:53:48:85:30:1d:f3:3b:
c5:61:12:a3:4d:d6:21:22:4c:db:a9:54:09:32:18:b7:e8:e1:
3d:ed:70:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:05:24 2025 by rpki-client