Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65eb4ed0-c2ee-36f4-9d71-72267889f48c.roa
File: 65eb4ed0-c2ee-36f4-9d71-72267889f48c.roa (raw, json)
Hash identifier: uTPKlIXxTOOq9LInvNcDfn+Dy3GtLMXFP0q9hDPOwUo=
Subject key identifier: 8A:94:15:A8:C0:37:A6:2E:F2:03:D1:86:53:4E:51:9D:61:55:75:D0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA60875D5614D5D140F6380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65eb4ed0-c2ee-36f4-9d71-72267889f48c.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 140052
IP address blocks: 2001:470:134::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:08:75:d5:61:4d:5d:14:0f:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=ab59592c-5315-4c4e-aafa-6221f542835c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:5d:ed:83:be:5c:6c:ce:c0:87:7d:b3:29:
48:96:d9:08:f3:8d:fd:77:f1:33:4b:89:bd:ff:f2:
8e:d5:69:30:1f:c8:f4:87:8b:47:85:b5:79:d8:9f:
43:4c:83:e6:4a:80:55:e4:40:6d:74:52:fe:7b:62:
1f:16:65:7e:65:6a:55:c8:c0:63:0c:40:32:e4:84:
0b:ae:1f:6d:d8:01:10:84:a1:f0:d7:ae:15:df:52:
6d:89:45:4a:12:96:3d:92:af:ae:71:4f:bf:73:cb:
eb:3e:8b:2a:ba:34:94:b4:a0:ce:b1:f5:d4:da:0b:
6c:15:d8:17:a6:00:31:32:f4:e1:3e:71:f7:4a:af:
dd:cf:ab:48:0a:b7:71:65:e9:78:92:8e:0c:ba:de:
83:66:9f:22:4d:a2:5b:7c:15:e9:4d:c0:44:4d:34:
5c:ff:d8:70:b1:da:eb:b5:f6:5e:f2:f6:8b:ee:42:
22:24:86:62:00:78:2e:5b:72:15:8b:35:36:97:42:
13:7d:5f:e5:c6:a3:6e:ba:cb:4e:a1:64:b3:a1:15:
13:f3:88:bd:a7:6b:04:e0:aa:0e:96:f2:03:7e:52:
0a:3e:70:f1:95:f8:98:bd:e5:a4:75:1b:23:68:a0:
03:06:35:7b:f5:63:a9:f7:9c:b1:3f:db:28:eb:ab:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:94:15:A8:C0:37:A6:2E:F2:03:D1:86:53:4E:51:9D:61:55:75:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65eb4ed0-c2ee-36f4-9d71-72267889f48c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:134::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:b2:6e:a2:cb:c6:92:25:7d:b0:d6:5d:1e:e7:1f:7c:81:71:
a1:52:35:76:a6:0e:5f:f5:00:01:ec:f9:72:fc:23:60:36:99:
aa:7f:5e:bb:28:d4:8f:d0:aa:32:ff:1f:1b:62:35:d8:fa:a8:
07:6d:32:56:67:56:c6:7a:3f:83:f4:20:60:0d:3f:e7:94:39:
27:5f:40:7d:95:2d:26:5d:0e:07:df:d9:36:7b:cf:17:4b:06:
4c:8a:59:e3:83:f4:ea:5e:05:01:0b:53:9e:30:58:b6:c6:7f:
5c:e3:71:c4:36:c8:78:0e:73:62:1f:73:b9:da:71:3c:fc:70:
91:ae:65:0b:57:fb:f2:2e:63:d9:7d:f7:1c:d5:49:dd:9e:ef:
c3:93:50:cc:5f:03:5b:26:06:c3:9d:59:ff:fe:ef:6c:00:21:
b4:c5:37:1b:eb:fb:09:dc:12:cb:21:33:19:3d:9f:7e:de:76:
4e:dc:a2:a1:3e:88:10:31:63:77:dc:a5:73:ab:13:81:ef:06:
4c:03:a6:2e:a5:f9:44:82:5b:83:9a:0e:3b:be:de:6e:04:5a:
74:8e:6d:09:7d:67:55:2a:b6:22:91:6e:99:5b:87:85:72:0f:
a9:1e:f1:d7:09:3d:c0:2e:ab:76:89:c2:a6:64:8b:b4:4e:af:
9b:d6:14:5d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDv9pgh11WFNXRQPY4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
YWI1OTU5MmMtNTMxNS00YzRlLWFhZmEtNjIyMWY1NDI4MzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrZd7YO+XGzOwId9sylIltkI8439d/EzS4m9
//KO1WkwH8j0h4tHhbV52J9DTIPmSoBV5EBtdFL+e2IfFmV+ZWpVyMBjDEAy5IQL
rh9t2AEQhKHw164V31JtiUVKEpY9kq+ucU+/c8vrPosqujSUtKDOsfXU2gtsFdgX
pgAxMvThPnH3Sq/dz6tICrdxZel4ko4Mut6DZp8iTaJbfBXpTcBETTRc/9hwsdrr
tfZe8vaL7kIiJIZiAHguW3IVizU2l0ITfV/lxqNuustOoWSzoRUT84i9p2sE4KoO
lvIDflIKPnDxlfiYveWkdRsjaKADBjV79WOp95yxP9so66ufdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIqUFajAN6Yu8gPRhlNOUZ1hVXXQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjVlYjRlZDAtYzJlZS0z
NmY0LTlkNzEtNzIyNjc4ODlmNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAE0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACqybqLLxpIlfbDWXR7nH3yBcaFSNXamDl/1AAHs+XL8I2A2map/
Xrso1I/QqjL/HxtiNdj6qAdtMlZnVsZ6P4P0IGANP+eUOSdfQH2VLSZdDgff2TZ7
zxdLBkyKWeOD9OpeBQELU54wWLbGf1zjccQ2yHgOc2Ifc7nacTz8cJGuZQtX+/Iu
Y9l99xzVSd2e78OTUMxfA1smBsOdWf/+72wAIbTFNxvr+wncEsshMxk9n37edk7c
oqE+iBAxY3fcpXOrE4HvBkwDpi6l+USCW4OaDju+3m4EWnSObQl9Z1UqtiKRbplb
h4VyD6ke8dcJPcAuq3aJwqZki7ROr5vWFF0=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:40:28 2025 by rpki-client