Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfd045ed-c973-3dfe-90c6-e282726e075c.roa
File: bfd045ed-c973-3dfe-90c6-e282726e075c.roa (raw, json)
Hash identifier: NZVXqRFNFG8XUGP3MuPp/sPi+CZRqS9CyO+CIbFe8S8=
Subject key identifier: 73:A0:DF:40:CB:87:80:6B:98:8B:37:95:85:B9:FA:09:8F:46:AA:25
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648DD2D9337E4C3081C87F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfd045ed-c973-3dfe-90c6-e282726e075c.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 17085
IP address blocks: 2001:470:f5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8d:d2:d9:33:7e:4c:30:81:c8:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=b80d6dcc-5f96-4c03-a246-31974dc986cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:7f:14:0a:94:d6:29:c0:5b:69:e6:27:ec:
e6:e5:71:cf:c7:5f:01:4e:a6:1e:6a:a7:15:81:aa:
44:54:24:5a:d8:0c:55:4b:a1:9e:fa:f6:bb:df:63:
72:bc:3a:f1:0e:65:3a:13:70:26:b4:d3:c9:9c:4c:
54:be:c4:5a:bb:15:39:f1:89:68:81:29:64:82:ad:
04:19:0d:23:5f:4d:9a:a7:63:5b:4e:79:1f:be:13:
38:1f:86:de:56:59:ec:0e:69:d6:86:f9:c9:43:f5:
fa:c8:58:f3:78:b6:cf:28:a6:c4:be:3b:1c:c8:02:
a6:01:17:fd:f0:31:09:85:d3:c1:f6:ce:82:56:13:
b6:3f:be:1b:24:c2:4d:de:8d:45:ae:d1:94:4c:0e:
c1:c7:bf:d1:bc:1d:16:1b:4d:67:62:f9:b6:22:71:
9e:70:26:b4:ce:46:22:a6:c0:58:45:06:3d:27:5f:
69:58:5a:f0:a2:5c:b0:a0:36:75:89:3a:b0:eb:38:
dd:b0:96:25:0d:53:53:90:23:2a:84:7b:71:20:09:
06:f5:e1:b4:9b:70:81:45:d8:a4:a5:cd:9d:bb:b2:
19:96:e2:bf:22:4b:11:51:02:34:d2:1f:22:94:be:
b1:36:d6:1f:f6:0c:64:7e:a8:46:4e:10:21:fa:4a:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A0:DF:40:CB:87:80:6B:98:8B:37:95:85:B9:FA:09:8F:46:AA:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfd045ed-c973-3dfe-90c6-e282726e075c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:f5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:ab:1e:0c:5b:a7:33:a0:1b:11:55:83:bb:e0:7f:8b:c4:9e:
f7:d0:e0:d2:26:a0:ef:16:d1:2d:f8:ed:f8:66:4c:90:83:4a:
a0:9e:5d:c5:0e:21:03:8b:91:9f:79:70:a5:aa:36:01:26:09:
3b:12:c4:0d:fc:f3:74:6f:3c:e7:44:d6:8d:95:12:c2:ef:9c:
8f:6f:b3:c8:25:53:d7:01:ce:cc:16:48:1d:a0:d0:84:9b:cb:
30:ae:89:05:9a:83:96:33:eb:76:51:e5:6e:04:cb:7a:cd:54:
50:e4:68:3f:c6:cd:2e:9f:15:91:03:18:a7:64:b5:76:ab:66:
b3:c8:b6:f9:9c:ca:43:5e:6e:65:e6:9c:c1:4d:cf:88:26:57:
8f:bb:f6:bd:bd:b6:72:85:ef:a3:0c:15:d7:50:81:35:69:3e:
5d:41:df:f2:7f:9f:d6:b1:f3:70:3e:9e:37:95:49:ed:26:c8:
ce:96:f6:1f:b5:be:0d:03:bb:f8:87:6b:14:d6:ad:70:a7:d4:
de:6e:44:0a:05:a9:14:4b:2a:52:32:1f:89:77:7a:c1:49:44:
c7:4b:5e:e3:b0:ac:38:c7:31:80:71:af:2a:a5:00:be:8f:1b:
e8:69:82:ea:29:a6:dc:c1:fe:a8:26:22:eb:e0:49:87:35:bf:
78:47:15:66
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD9kjdLZM35MMIHIfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
YjgwZDZkY2MtNWY5Ni00YzAzLWEyNDYtMzE5NzRkYzk4NmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+R/FAqU1inAW2nmJ+zm5XHPx18BTqYeaqcV
gapEVCRa2AxVS6Ge+va732NyvDrxDmU6E3AmtNPJnExUvsRauxU58YlogSlkgq0E
GQ0jX02ap2NbTnkfvhM4H4beVlnsDmnWhvnJQ/X6yFjzeLbPKKbEvjscyAKmARf9
8DEJhdPB9s6CVhO2P74bJMJN3o1FrtGUTA7Bx7/RvB0WG01nYvm2InGecCa0zkYi
psBYRQY9J19pWFrwolywoDZ1iTqw6zjdsJYlDVNTkCMqhHtxIAkG9eG0m3CBRdik
pc2du7IZluK/IksRUQI00h8ilL6xNtYf9gxkfqhGThAh+koYxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHOg30DLh4BrmIs3lYW5+gmPRqolMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmZkMDQ1ZWQtYzk3My0z
ZGZlLTkwYzYtZTI4MjcyNmUwNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAD1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJirHgxbpzOgGxFVg7vgf4vEnvfQ4NImoO8W0S347fhmTJCDSqCe
XcUOIQOLkZ95cKWqNgEmCTsSxA3883RvPOdE1o2VEsLvnI9vs8glU9cBzswWSB2g
0ISbyzCuiQWag5Yz63ZR5W4Ey3rNVFDkaD/GzS6fFZEDGKdktXarZrPItvmcykNe
bmXmnMFNz4gmV4+79r29tnKF76MMFddQgTVpPl1B3/J/n9ax83A+njeVSe0myM6W
9h+1vg0Du/iHaxTWrXCn1N5uRAoFqRRLKlIyH4l3esFJRMdLXuOwrDjHMYBxryql
AL6PG+hpguopptzB/qgmIuvgSYc1v3hHFWY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:57:56 2025 by rpki-client