Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96428057-4bb0-3e54-adee-6b153238c07f.roa
File: 96428057-4bb0-3e54-adee-6b153238c07f.roa (raw, json)
Hash identifier: s3NbQiaTbrrXxPuFygg73BqA5g18rL+HSCUWYWaqOzU=
Subject key identifier: A1:78:D8:F4:8D:99:97:58:D1:AD:B4:34:57:CA:92:84:78:A2:F0:45
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935F5701EEB6F5205532900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96428057-4bb0-3e54-adee-6b153238c07f.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 36315
IP address blocks: 2001:470:fe::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:f5:70:1e:eb:6f:52:05:53:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=a8a8ae43-e7a4-4c89-ba47-32dcd76229f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f5:21:c6:6b:1f:e5:4c:7d:3b:66:aa:31:93:
f7:fd:41:21:d8:9e:89:f6:d5:de:5c:0c:b6:0f:bb:
3d:f3:04:f2:bc:5c:d7:21:25:4b:be:e8:c5:7a:8e:
61:22:aa:e0:ec:89:5c:4d:7e:99:e5:c5:e5:e2:e7:
47:4c:32:75:24:f0:ab:fb:2c:38:1a:8d:07:af:43:
28:b3:40:3c:71:e4:09:6a:b5:74:a4:a1:7e:52:f4:
32:77:93:22:7e:21:ec:dc:97:f7:a6:dd:0f:45:f0:
44:61:94:9d:a7:f3:63:bc:77:f8:09:97:56:88:50:
52:9c:3e:23:be:63:10:4b:42:ed:b3:9c:f1:d8:cf:
20:ba:e1:ff:1a:67:6d:20:c8:d4:21:f8:b6:ff:87:
1a:9c:61:e1:21:e4:92:42:c2:79:0c:a1:72:fd:4e:
66:9c:eb:0b:ae:96:ce:70:ef:d5:14:88:c6:3b:3a:
d5:fa:d1:38:07:05:94:f9:1a:13:bd:24:fc:b6:95:
e5:bd:b8:34:0a:15:b7:b8:e1:c4:20:3d:dd:29:b5:
6f:7f:db:c0:bd:90:9d:75:57:c1:c0:2a:0f:39:be:
d1:8d:52:15:49:47:34:b0:c0:cf:fd:1d:d4:df:0c:
51:14:49:a5:5b:6c:fc:bd:a2:60:80:04:c8:54:96:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:78:D8:F4:8D:99:97:58:D1:AD:B4:34:57:CA:92:84:78:A2:F0:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96428057-4bb0-3e54-adee-6b153238c07f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:fe::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:17:32:b2:3f:e1:7a:a4:54:11:6a:1a:c6:70:5e:49:b5:c3:
12:a2:aa:13:11:4c:7f:d6:6b:a3:be:fa:90:d9:1f:17:a0:c1:
ca:1e:8a:cf:0a:5f:cc:2a:8c:12:41:c5:6b:39:17:43:36:0a:
4a:05:29:34:95:62:c5:af:b0:7e:ae:fe:b4:7b:03:a7:94:8b:
bd:ae:87:4c:9f:b6:19:e4:4e:3f:b2:8e:52:fb:3e:6c:d6:bc:
85:df:b9:32:53:67:2f:d0:77:d5:15:8b:53:8a:93:af:f4:d4:
18:b5:d8:63:2e:32:22:35:88:a2:16:b0:31:81:cb:2a:f4:65:
f0:07:9c:af:55:ed:8b:c4:d8:11:dd:ae:fb:55:a3:2a:4d:d5:
1d:df:05:91:d7:f4:d5:ca:ca:a4:f9:e7:2b:52:aa:53:f7:02:
2b:36:6b:d9:24:6a:44:5d:10:62:5b:6a:71:62:8d:38:95:e9:
76:11:7e:8a:9e:d6:3a:ea:46:af:be:35:6e:9c:ad:57:e0:83:
81:9b:5f:e3:7d:d4:76:04:f6:ad:f9:41:ad:cb:d4:04:5c:b0:
56:4f:56:86:c2:86:4e:ee:bc:13:c6:84:36:3d:a9:4b:95:14:
de:7b:34:e0:e0:5a:f3:da:ba:fb:75:53:12:5f:16:bb:38:a9:
a7:53:59:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:00:40 2025 by rpki-client