Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b784102f-ecea-3d0b-bc95-16a3d538ebfb.roa
File: b784102f-ecea-3d0b-bc95-16a3d538ebfb.roa (raw, json)
Hash identifier: K7DAHULzGXJxWAeo0V3r+TkBPG5mfJUml/Qz8FJJoeI=
Subject key identifier: BD:8A:14:82:89:DF:29:35:8B:67:14:C7:A6:7B:87:DE:89:32:3A:F7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D79351A0DE3AD989981BE37A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b784102f-ecea-3d0b-bc95-16a3d538ebfb.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 394330
IP address blocks: 2001:470:b3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:1a:0d:e3:ad:98:99:81:be:37:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=eb5526c3-0e34-4d57-97a4-accc252fe206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c4:df:17:7a:54:17:af:5b:58:be:8d:4e:6d:
e9:0a:63:ee:42:0a:12:83:b3:11:bd:36:8a:8c:1c:
80:1c:a7:ec:e6:0e:94:e8:05:6f:8b:28:92:82:f1:
27:f6:4a:49:2b:86:e5:b9:4b:64:98:9a:9c:14:96:
60:b2:57:00:2e:84:36:9c:fa:c0:af:93:c1:a2:7d:
bc:59:ea:65:e5:55:ba:bd:f9:c2:be:25:ef:4f:87:
70:28:f9:95:d7:db:8a:5a:9f:50:73:f6:4c:bc:f3:
7a:c9:63:d1:58:23:c6:16:dd:6f:6e:29:81:f7:97:
eb:4d:35:4b:a4:3f:a5:43:c0:31:89:d8:e1:56:00:
86:b7:06:3a:04:9b:64:75:18:cc:39:6e:d0:73:8e:
8d:76:c1:81:e1:b5:05:1a:04:07:94:96:c8:ff:99:
8c:1a:b0:ae:0b:fa:12:ec:36:d1:e6:2a:a1:12:89:
21:dc:ff:c4:72:4a:fe:c1:60:8f:ce:6d:6a:a7:be:
fe:12:0d:38:49:e9:85:90:50:ee:f0:69:41:89:a5:
76:37:c3:b7:65:94:bb:c6:e6:a9:97:54:36:9a:47:
22:59:8b:08:00:c3:f3:5c:80:94:02:84:55:f7:e0:
5e:5b:26:36:a9:3a:7e:e5:69:ff:73:13:66:29:c0:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:14:82:89:DF:29:35:8B:67:14:C7:A6:7B:87:DE:89:32:3A:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b784102f-ecea-3d0b-bc95-16a3d538ebfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:b3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:f3:f3:d6:8a:9b:78:4b:65:c5:c4:64:a6:2d:06:98:ea:ef:
73:80:2e:54:8c:07:cd:c2:5d:56:48:98:1e:5b:35:22:20:92:
72:25:91:fc:c9:76:8d:21:d6:43:ca:b0:09:87:bc:4d:c5:3a:
85:57:82:e9:9e:26:90:69:d7:c9:87:84:80:81:46:06:b6:5c:
c7:31:7b:58:d2:e3:6b:16:5b:93:9d:26:fc:c4:e9:18:97:20:
b7:82:1a:45:da:3c:0b:5c:40:bf:7b:0e:41:3e:cb:25:37:15:
f4:d6:8a:60:c0:5c:f5:b2:06:07:60:61:44:b1:31:1f:bf:1a:
e5:5a:22:3b:19:3e:52:15:99:af:dd:14:67:9c:ef:c5:37:f0:
92:41:81:12:43:bd:43:30:1e:c9:08:47:88:0a:67:7b:ee:4c:
af:76:bd:c2:de:22:cf:ec:31:a1:de:03:41:1d:de:bd:34:df:
85:35:c8:ef:ed:66:7f:f0:13:d7:70:bc:c9:74:e6:3a:a9:76:
61:1d:9d:5e:98:b0:dd:e5:b3:eb:0f:ad:ae:0a:de:d9:d4:4b:
d7:aa:31:48:9c:f8:f5:17:bd:57:b0:dd:da:91:71:52:a7:73:
41:86:a5:40:9f:5e:68:5e:39:b7:ac:32:31:11:ee:8f:62:77:
08:83:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:20:37 2025 by rpki-client