Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8f53678-f497-3a9f-9bc2-dec864f514bc.roa
File: b8f53678-f497-3a9f-9bc2-dec864f514bc.roa (raw, json)
Hash identifier: 3EIw7CHv+g+vfgZknVUNTLMeh5C9AzEPNtAy+gI2jR8=
Subject key identifier: 15:D4:48:58:9F:6B:79:60:B4:54:9B:71:71:77:AF:5A:8E:D1:32:10
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D79368184A6E45914AC283A40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8f53678-f497-3a9f-9bc2-dec864f514bc.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 7175
IP address blocks: 2001:470:11c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:36:81:84:a6:e4:59:14:ac:28:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=9027c656-c06b-4ec3-a6d3-58c97f5f2c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:46:aa:83:fd:7b:1d:84:7a:67:75:ec:86:ca:
e7:42:18:fd:9f:68:32:54:62:0f:b1:aa:4d:8f:69:
a7:95:40:15:e0:23:be:bb:39:1e:00:db:2d:d1:08:
4e:bf:4f:38:a6:2e:9d:f7:91:ab:47:db:76:88:8b:
a1:73:6d:ea:3f:8f:f4:55:15:92:12:95:39:2c:22:
5e:40:9d:63:18:12:19:3e:01:7a:67:50:77:9b:97:
33:49:fa:c5:03:64:4f:f4:28:0c:2c:80:84:a0:ab:
9e:b1:39:c8:17:b5:9b:a7:a3:ac:ef:00:22:18:b8:
0d:14:11:80:78:28:e5:84:87:87:ea:95:f7:e0:e5:
20:bb:c7:cc:aa:79:6f:86:94:7d:97:81:0a:52:01:
4d:d2:2f:75:40:4e:14:0b:92:4e:7c:e0:8c:92:f2:
bc:66:2b:b1:0f:bf:ea:76:c2:95:61:d0:65:3e:10:
99:dc:08:59:45:7d:d5:8f:39:dd:e9:22:0f:82:cf:
50:e4:7b:b9:21:65:b9:fb:7b:28:7e:fd:7f:9f:58:
ae:06:5f:7f:76:2d:dd:2a:39:31:08:77:22:7f:ec:
46:e7:c5:0c:49:cd:bd:b0:56:bc:4d:a3:ab:47:23:
3c:74:82:20:d5:90:15:a0:c4:71:74:10:c3:78:b2:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D4:48:58:9F:6B:79:60:B4:54:9B:71:71:77:AF:5A:8E:D1:32:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8f53678-f497-3a9f-9bc2-dec864f514bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:11c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:21:d8:9f:12:1c:4a:5c:b3:1a:fe:a8:a9:a8:f5:37:dd:f9:
53:73:97:80:27:91:0f:83:2e:f8:f4:b6:6f:c7:31:f5:20:10:
d6:28:cf:ad:5d:4b:fb:fc:c7:57:5a:fa:17:da:60:e0:00:d8:
6f:d2:06:b6:d1:b3:10:b5:7c:80:14:2c:8d:9d:ed:36:df:70:
22:c2:d7:54:71:bf:d9:39:21:cc:24:47:06:c9:00:a7:28:41:
c3:fa:ef:e7:01:a1:40:b5:e6:77:0b:f3:d0:02:fd:33:7a:60:
a2:5f:e1:df:bb:16:b4:2f:92:75:48:30:97:90:50:a4:cd:68:
31:fd:7d:53:c8:d5:77:12:fa:6e:67:bf:ee:03:77:1d:33:94:
5f:ab:e4:2b:28:86:93:67:1a:88:ad:6d:c3:77:15:10:9b:56:
90:a4:d7:43:03:31:ea:13:e7:ce:a8:0a:d7:f3:d9:d2:66:63:
53:8a:f4:c7:ab:fc:d4:42:a0:d1:33:61:14:2b:5b:0f:f4:4a:
64:c1:b7:df:75:08:3a:c1:e5:66:b9:37:e1:b9:ac:84:bb:b8:
21:9c:26:63:ca:80:f3:17:06:1b:05:0a:a3:c6:e6:6e:d4:d7:
39:76:c2:33:81:b3:d5:ec:3a:33:ab:1c:bc:6d:47:01:1e:11:
92:e8:30:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:26:09 2025 by rpki-client