Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61149df3-f7e9-3c10-8d46-b061bf1319f4.roa
File: 61149df3-f7e9-3c10-8d46-b061bf1319f4.roa (raw, json)
Hash identifier: 9E5SwCw2dNRyhRtj8o7k3sQ+QkiihYN5ki1JgDiy0T0=
Subject key identifier: 41:71:47:79:D1:3E:FC:F6:65:2B:2F:00:9D:F3:00:5E:62:50:97:AD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50A8DB7426D9BD0FE55880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61149df3-f7e9-3c10-8d46-b061bf1319f4.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 39444
IP address blocks: 2001:470:14f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:a8:db:74:26:d9:bd:0f:e5:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=3ce556ec-206f-45a8-aded-2729cf9469c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:91:da:ae:65:3c:af:67:82:08:7f:e1:84:
02:6a:92:56:78:a3:35:33:8e:7b:54:cc:35:ee:92:
1c:b1:b1:86:87:51:27:bc:fe:f3:12:5c:0a:48:16:
a2:86:d5:a8:eb:71:c5:08:6b:1a:ca:00:d5:67:dd:
48:7c:ae:6f:64:c8:fc:79:de:ce:bd:42:95:b0:22:
48:af:c2:79:24:36:cd:ab:25:bf:5a:36:a3:db:c9:
e8:f0:92:c9:dd:14:96:2f:ca:90:28:d7:a9:c7:d3:
8b:23:46:e6:b4:95:ca:f7:75:27:bd:0d:d8:a7:d2:
18:45:02:05:65:6a:cc:e4:8f:48:e0:cf:29:00:b1:
3a:19:c7:fb:2e:73:8c:ba:e5:da:c7:c0:11:59:84:
74:61:9a:97:c3:38:72:20:9a:38:52:53:35:2c:ac:
30:6f:d6:b7:74:fa:e3:e6:47:f1:71:e7:f7:00:83:
d5:6a:f2:b7:c8:86:4c:d3:02:5d:55:75:83:fd:b8:
ae:1e:17:5c:ba:3b:88:80:a7:82:ec:74:a7:0b:b8:
4d:96:cc:74:b1:41:5c:a8:dd:86:41:0b:91:81:23:
7b:86:8b:19:4b:15:1d:76:a9:a7:f7:4b:7a:2a:2a:
93:60:0c:4d:ed:8b:65:5b:bf:3e:84:cd:2c:e9:c8:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:71:47:79:D1:3E:FC:F6:65:2B:2F:00:9D:F3:00:5E:62:50:97:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61149df3-f7e9-3c10-8d46-b061bf1319f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:14f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a7:7b:48:05:db:8a:ae:18:11:8a:44:fd:ca:48:d4:6d:35:
27:67:f8:33:ef:65:d1:ae:f2:40:7c:7c:e9:57:d0:45:4c:13:
46:3c:af:a5:32:b3:84:0b:fc:3b:a4:77:f2:03:e8:fa:d9:05:
60:39:4d:44:f1:1a:86:a6:03:ce:cb:05:c5:3f:8e:61:49:87:
f6:df:30:03:1c:01:ed:11:32:1e:76:fd:0c:68:8e:d0:f5:d0:
e3:fa:07:69:d7:c6:8f:d9:4a:63:29:aa:cf:52:55:7c:04:e6:
63:b6:02:c9:ef:c3:ba:5d:5a:38:6e:e9:32:0f:45:41:7f:e9:
0a:67:9c:73:3e:fd:9f:1f:93:91:cf:62:75:09:0a:e7:0d:d3:
9f:da:a3:e1:c1:3f:c8:2c:a8:ec:00:fa:63:66:15:ef:33:97:
40:0c:a8:02:44:b9:a0:2a:01:3d:0b:20:8c:bc:70:fd:01:9b:
8b:04:33:9f:35:41:68:9f:91:6d:18:32:96:00:38:37:69:70:
0e:6c:6d:6d:93:96:7e:11:9b:e7:e6:ab:79:38:ac:8a:eb:68:
96:68:47:fd:fe:61:6c:94:45:80:2b:ee:bf:47:44:d4:7d:c4:
e6:bd:ea:b1:c1:f6:5a:7c:84:81:de:35:52:b6:61:d1:27:6a:
2b:26:69:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:20:22 2025 by rpki-client