Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94bb0207-f481-3fad-9e00-d837de37c159.roa
File: 94bb0207-f481-3fad-9e00-d837de37c159.roa (raw, json)
Hash identifier: u9Y1kBhWQHp7SsBUv+yXzBNk01YTsfSOlYtPRYTfviU=
Subject key identifier: 3F:C0:F0:43:5A:1D:29:34:E7:13:EC:F9:07:F2:80:8A:CF:4D:0C:A8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50B5968FB652BA7C9FD580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94bb0207-f481-3fad-9e00-d837de37c159.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 18638
IP address blocks: 2001:470:8c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:b5:96:8f:b6:52:ba:7c:9f:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=4cb6dc51-96dd-43bd-8ce9-4f4855bee559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:12:22:97:7d:8b:a1:41:b3:b6:31:f9:d9:20:
10:74:7f:6b:33:79:86:f5:90:c9:82:3b:c3:60:b8:
19:f8:3e:23:36:7c:a5:9c:fa:e5:54:3d:4f:4f:6d:
92:15:a0:a4:51:4e:5e:b8:46:65:e5:77:6b:12:d2:
86:fc:ce:da:0b:80:5d:92:e2:89:2a:0d:bd:1a:df:
49:56:9d:f4:28:ff:a3:de:cb:ba:b1:fd:39:bb:a2:
42:bb:c2:5c:41:4e:79:50:66:d3:d0:10:ff:30:88:
de:b5:fc:b2:c5:b7:42:34:09:ed:92:51:a3:f1:1e:
e5:14:1f:bb:f4:0e:15:b5:1c:ab:57:8a:2c:cf:c4:
88:89:47:e2:ef:50:7a:c4:f3:9d:2b:0e:2e:07:fc:
60:c8:5d:33:2a:6f:33:1f:f9:98:7d:6b:7e:ab:7a:
81:a4:b6:9f:5f:56:33:95:ca:64:b6:44:0c:77:50:
b3:a1:e3:3a:7f:f7:e5:96:2a:57:a4:10:6a:02:22:
8f:c0:9d:f0:76:9d:77:c9:b2:ff:66:a9:a3:13:ec:
6e:88:6c:1e:23:08:57:51:3d:c2:7a:08:13:33:38:
a4:3b:b9:ad:91:aa:83:6d:0f:e7:39:55:3d:23:ce:
b5:06:a4:42:b5:f1:42:0b:14:61:64:a3:55:07:12:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C0:F0:43:5A:1D:29:34:E7:13:EC:F9:07:F2:80:8A:CF:4D:0C:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94bb0207-f481-3fad-9e00-d837de37c159.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:8c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:98:9e:34:c2:c4:11:2c:8a:ed:a1:b5:72:c5:5d:d2:5e:05:
d3:92:94:4f:00:35:31:e8:96:2f:7a:fe:b6:4e:50:e0:5a:05:
a6:9f:7e:e4:6b:87:15:e9:e6:4c:b2:17:bd:cc:52:82:73:c8:
fb:01:47:8d:07:58:d8:43:aa:5c:f6:56:de:73:4a:2f:c2:da:
aa:db:dd:2a:5e:9d:e6:75:44:e3:1b:15:5b:8e:04:d7:9d:79:
c4:24:5a:34:2f:88:f6:76:f7:ed:c8:89:33:00:2a:e4:7d:b5:
19:30:49:b7:2e:a7:50:f8:64:44:b5:3a:a7:a1:1a:b4:53:55:
e9:90:28:ae:3e:b7:bb:db:2e:24:35:c8:81:03:4c:42:9c:56:
4f:40:c5:2a:e1:2d:34:c2:ad:9f:2a:be:b8:fb:e1:07:91:36:
f7:e5:d4:30:f1:a3:e5:f6:dc:0e:cb:6b:ae:db:f7:d6:df:a9:
c9:b6:92:91:43:13:12:6a:9f:da:d9:93:bf:bc:c9:93:46:60:
0f:c2:e2:2f:51:4d:fa:7f:cf:40:bc:52:d3:3c:bb:f7:6f:6b:
0c:15:1c:19:68:76:46:ac:1e:79:86:a3:74:1f:d8:64:9b:c2:
cf:5f:27:c6:ec:55:a9:02:d7:32:3f:0a:4c:16:32:6c:7b:da:
65:86:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:18 2025 by rpki-client