Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/97a9bf2b-de41-35fb-9ada-3ac361b7fed8.roa
File: 97a9bf2b-de41-35fb-9ada-3ac361b7fed8.roa (raw, json)
Hash identifier: K0h50/Lq61lbA37qRPAD0ITvdYZsHV2qXP7UJk5k6kw=
Subject key identifier: 42:AA:40:6D:80:56:73:5B:09:41:5F:6B:66:F3:B7:AB:ED:DD:4C:17
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583C1DC0A81B9DEAAB2CDE123080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/97a9bf2b-de41-35fb-9ada-3ac361b7fed8.roa
Signing time: Wed 01 Dec 2021 05:00:00 +0000
ROA not before: Wed 01 Dec 2021 05:00:00 +0000
ROA not after: Wed 01 Jun 2022 04:00:00 +0000
asID: 393552
IP address blocks: 2001:470:c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:1d:c0:a8:1b:9d:ea:ab:2c:de:12:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 1 05:00:00 2021 GMT
Not After : Jun 1 04:00:00 2022 GMT
Subject: CN=579c6cba-a592-4cf5-8a24-376af71e8513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:65:c4:01:c2:21:a4:9d:aa:4c:6e:b5:3f:
76:f1:02:09:df:33:58:4f:9d:bf:dd:ec:1f:17:3b:
73:ab:b4:a9:81:5e:7b:9d:b2:c5:d5:9f:66:6a:a6:
4b:40:90:bd:a8:36:3b:36:1c:d9:55:71:b9:d8:94:
54:7e:70:e8:dc:aa:6f:6b:a3:d9:3e:07:c4:6b:43:
fa:2c:0a:3a:b4:ab:7f:3e:ae:66:5a:bc:cd:23:31:
db:df:6a:5e:d1:97:3c:0c:2e:71:e1:f1:55:6d:06:
31:45:e1:73:b7:18:a5:7f:c6:84:38:36:11:59:a6:
fb:b7:05:e1:b6:4c:74:74:fa:91:dc:35:51:f2:a0:
27:8a:f2:d9:b4:2a:e5:69:16:ab:57:15:3c:75:42:
91:85:c9:24:ac:0a:8e:78:e4:3e:dd:bf:da:4a:7f:
fa:31:a4:0d:af:49:e7:e9:46:08:9b:dc:46:f6:fd:
3e:18:3b:7b:95:bc:87:66:b5:79:09:65:44:a5:b2:
bd:33:1f:41:3d:19:8b:ae:4c:59:55:f3:19:dd:66:
b5:16:05:d6:65:34:26:0d:56:1b:97:74:91:6c:91:
14:0f:15:48:91:33:6d:d8:ce:f8:0d:e2:23:65:eb:
e6:26:f6:19:90:8b:e9:7d:0d:64:dd:25:49:64:ed:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AA:40:6D:80:56:73:5B:09:41:5F:6B:66:F3:B7:AB:ED:DD:4C:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/97a9bf2b-de41-35fb-9ada-3ac361b7fed8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:c0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:ee:73:6a:96:4e:11:56:bd:61:34:28:44:0a:2f:b1:db:f2:
66:52:7e:3c:e9:81:b9:8c:64:2d:e7:63:aa:9a:4c:15:ad:7a:
92:e8:a7:cd:de:46:8a:ff:42:6a:8d:bb:9d:de:a3:f4:57:de:
d1:9f:25:71:87:23:f1:bf:c5:22:80:f9:20:4a:1b:83:2e:33:
aa:ce:f9:33:2b:88:79:75:40:9b:1b:b8:66:f5:29:7d:fc:cb:
d7:da:33:d5:17:da:bb:33:b2:76:b4:79:ad:0a:13:f0:80:6a:
8e:aa:e8:c9:45:f5:1e:e4:9d:e5:4a:e8:4d:e6:11:5e:d4:30:
70:c3:cf:0d:f8:7a:14:c8:3e:72:e2:36:7c:a7:5e:50:2a:0e:
4b:54:c8:a1:92:f5:37:61:8b:25:d7:7a:7d:22:b9:80:e2:6e:
e5:51:5a:c4:b9:8e:4e:ef:63:67:b3:c8:96:c0:a7:0d:5d:ae:
14:ef:f6:88:29:d7:30:a0:0d:32:3e:5b:0f:90:26:64:8a:3d:
fe:9a:7a:3c:dc:6b:d4:79:b7:81:eb:c9:d5:86:9e:55:f9:e1:
4d:ab:fe:03:34:f6:d6:ce:e6:b0:23:da:f7:2b:e0:2a:62:d0:
2f:01:3d:3b:62:70:0c:b8:07:62:5b:d1:b0:4a:8e:4a:ed:05:
50:f7:e7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:42:16 2025 by rpki-client