Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b7d26e8-dfac-3f52-8ffe-5a77525fc85c.roa
File: 6b7d26e8-dfac-3f52-8ffe-5a77525fc85c.roa (raw, json)
Hash identifier: yu+vnFV26JH7VaWMZcbb5H3BxL3yTqfOVbF3Et2U6x8=
Subject key identifier: 32:56:A2:CF:04:7A:A3:4A:47:B8:59:89:D8:CC:65:89:10:25:8B:34
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583EB8DC5786D2F707A46B9D92C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b7d26e8-dfac-3f52-8ffe-5a77525fc85c.roa
Signing time: Wed 27 Jul 2022 12:00:00 +0000
ROA not before: Wed 27 Jul 2022 12:00:00 +0000
ROA not after: Sat 28 Jan 2023 05:00:00 +0000
asID: 400429
IP address blocks: 2001:470:aa::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b8:dc:57:86:d2:f7:07:a4:6b:9d:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 27 12:00:00 2022 GMT
Not After : Jan 28 05:00:00 2023 GMT
Subject: CN=d79814f8-5535-4e26-be73-ff020d0d9fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:3f:06:43:4b:61:df:ad:24:10:48:63:90:
17:97:92:e7:3a:98:40:4f:be:47:7f:64:5a:ef:be:
4d:67:83:18:87:43:57:28:c9:1f:d8:46:4f:01:3e:
de:95:81:74:57:1f:95:62:45:6a:d0:a5:6f:b3:d4:
34:f5:c6:d9:ed:a4:82:70:11:22:70:13:5b:d8:7d:
52:35:05:5f:d1:50:6e:a3:b0:bd:3d:ce:56:04:30:
18:e8:7d:57:fc:16:ff:a7:15:75:10:0c:5c:73:72:
36:7f:61:dc:35:4c:5f:d6:47:28:1a:db:cf:bf:5c:
8a:92:1a:03:d5:09:52:8c:6a:a8:83:62:0e:30:f1:
8e:58:5a:ae:c9:d4:64:f9:ff:82:48:f5:1a:d7:48:
06:15:b9:62:2b:fa:3d:df:13:be:21:a6:1b:20:0a:
04:ba:78:1d:da:f3:08:3d:7a:0e:ab:e0:1a:e5:a4:
8c:a5:1a:b4:9b:36:d1:3e:e7:92:56:50:47:62:e0:
fb:0a:82:61:5b:f7:2a:a3:1d:7f:7e:96:7b:f7:91:
72:d1:8b:a2:79:a0:d4:38:82:1c:2c:aa:8c:28:24:
96:a3:d6:fd:75:c3:d4:d7:5c:f9:3b:42:da:ff:80:
b2:33:00:6d:e8:48:75:dd:60:0f:b4:d1:83:22:a0:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:56:A2:CF:04:7A:A3:4A:47:B8:59:89:D8:CC:65:89:10:25:8B:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b7d26e8-dfac-3f52-8ffe-5a77525fc85c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:aa::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:15:e5:14:78:ad:c2:f5:44:de:7f:8f:8f:12:d2:42:4c:02:
82:37:7e:10:1b:9f:88:be:f1:60:4c:95:97:58:7e:68:ba:4c:
6b:d1:b5:d4:d1:a2:7e:b4:06:7b:5d:77:11:a7:a5:6d:bd:4a:
97:f7:52:a3:5c:92:d9:86:19:bc:54:83:5c:7e:18:08:e5:12:
9a:37:b6:96:29:57:0f:31:39:3b:32:86:96:68:5f:95:2b:f9:
cd:26:cb:cd:4a:d2:e4:a9:85:78:7b:08:30:47:f5:86:41:79:
b1:69:3c:25:aa:aa:70:8f:dc:46:99:dc:c8:27:c3:53:2b:1d:
e7:0c:6b:fb:42:51:e4:92:da:e8:9b:f7:db:71:39:ed:35:d4:
a6:47:d8:8b:63:dd:5b:c6:39:61:9a:06:e7:aa:f7:5a:dd:3c:
a1:40:a1:09:b0:27:12:a7:f8:a2:46:d5:98:dd:4f:f8:01:91:
9c:62:5a:b1:db:d6:57:53:30:87:da:b9:52:69:5e:3d:3c:08:
c0:de:95:92:43:44:8c:7a:89:79:40:42:c5:97:8f:fb:6d:84:
24:62:a0:b1:d0:dc:9e:6c:02:ce:80:ce:41:53:80:b9:d9:e7:
e7:c2:9c:1c:0b:1c:4a:7a:e2:df:1a:64:be:ba:19:39:17:df:
df:5d:20:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:45:06 2025 by rpki-client