Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cce5cb4d-0770-3426-95ff-45db96f5ece2.roa
File: cce5cb4d-0770-3426-95ff-45db96f5ece2.roa (raw, json)
Hash identifier: zj+vfJ4909KzP8edRtl6lKLcN4nK8ko5ouuhp+B2d4Y=
Subject key identifier: F1:CE:35:47:44:16:9F:E1:B2:49:99:7F:A8:F0:A5:6F:E5:BB:86:82
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648EBEBEB787C51C4717C2C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cce5cb4d-0770-3426-95ff-45db96f5ece2.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 7500
IP address blocks: 2001:470:123::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:be:be:b7:87:c5:1c:47:17:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=23d770bb-7f27-4621-8e08-8308937a8c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:66:87:1a:e7:65:46:08:c6:63:7c:5e:51:
2a:3c:0b:87:77:1e:82:38:b6:4d:9a:a3:00:5c:8f:
1c:3c:88:fd:cb:67:89:b7:50:2f:a8:2a:8e:19:6b:
dc:fe:77:6e:b5:b7:1b:55:97:88:7c:0c:4c:27:b0:
fa:68:90:5e:23:73:64:df:ad:8f:ef:00:f0:26:8e:
e1:60:17:89:92:26:2b:4d:69:b0:bb:e7:83:8d:86:
37:5e:f0:ae:d9:90:9c:ad:bb:47:a9:a3:84:b2:c0:
b1:c9:17:ea:60:04:26:61:5b:57:95:7d:a4:95:2e:
d4:2b:14:d5:48:be:4e:34:05:4d:b0:f5:45:4f:5b:
a3:55:0e:d6:5c:ed:f8:0e:51:ef:53:52:13:7f:ba:
82:2c:28:9f:48:9c:a9:dd:b8:47:7a:92:33:66:8c:
09:21:05:61:e8:16:25:8b:d6:a1:65:ca:1b:be:71:
c8:b5:61:0f:46:47:42:7a:15:73:62:9f:99:ef:2b:
2e:53:59:f8:c0:be:95:92:56:b3:ed:44:48:4d:a7:
b9:41:bc:af:02:49:a1:96:50:71:ce:41:03:b1:ff:
b4:6d:b1:91:2d:45:08:7c:5d:6a:51:7f:12:77:2a:
b5:cc:5f:7a:26:74:68:95:54:3e:6f:22:49:58:15:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:35:47:44:16:9F:E1:B2:49:99:7F:A8:F0:A5:6F:E5:BB:86:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cce5cb4d-0770-3426-95ff-45db96f5ece2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:123::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:3b:f2:9b:ca:5a:89:7c:56:3a:78:7f:44:f2:f2:ae:6d:69:
98:32:20:0a:73:2f:06:e0:d2:68:6b:29:6a:46:29:a5:21:a0:
7a:42:34:af:16:4e:7b:db:ae:93:40:d6:78:45:7c:82:93:9c:
82:9b:fc:f3:d2:9c:7e:30:da:c7:26:5c:34:f9:47:01:f5:a0:
7c:a3:a6:31:92:c4:d6:e3:cf:74:00:0a:87:26:77:da:b0:1f:
1c:c8:bf:c9:35:29:31:a3:51:06:ed:22:5d:7f:57:c4:bd:fa:
6c:51:f7:a7:73:63:49:97:96:9a:e7:b6:c0:0c:e8:49:b5:60:
48:7e:71:5e:e4:28:db:99:42:f0:e3:d1:0c:5b:3e:3a:56:f2:
54:7a:fc:44:03:ea:a2:51:93:a2:83:a4:a9:63:26:8e:90:04:
14:bb:24:51:f4:c5:8f:f9:36:10:5d:19:1a:6d:30:3e:73:5c:
bb:4a:eb:18:5e:fb:dd:9e:fd:02:41:42:f5:3b:8d:bf:99:fd:
7e:45:3a:22:77:5b:32:0e:f8:61:bd:1e:0f:1f:28:7e:c3:f1:
38:8b:33:5b:35:a4:2e:b2:f3:6a:66:2c:21:9a:a7:e6:e6:7c:
f8:70:ab:39:da:65:d0:a1:5c:bb:f3:30:65:de:e6:1f:43:07:
5d:fd:98:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:37:22 2025 by rpki-client