Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0635a99-a3cb-3d8e-a6e3-7e3c14addd48.roa
File: d0635a99-a3cb-3d8e-a6e3-7e3c14addd48.roa (raw, json)
Hash identifier: JOGs49f1MA+bKRrqAMMIGWhev9bq2pLEN8FUoYPwB2Q=
Subject key identifier: 3D:5F:30:73:62:03:3F:8A:8F:84:16:6C:B6:EF:FD:83:C1:E0:2D:77
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50C4C686B74F0F3AD02880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0635a99-a3cb-3d8e-a6e3-7e3c14addd48.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 16871
IP address blocks: 2001:470:8a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:c4:c6:86:b7:4f:0f:3a:d0:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=e8aeacda-69db-4e51-ae40-51fb78c2ce74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:3d:09:17:96:07:11:b0:ad:3e:5c:b2:cc:
76:2f:5d:01:aa:20:e4:94:a3:7e:19:53:71:6a:d3:
a1:f9:3e:64:20:8b:9a:f5:9a:fa:6e:db:a4:7b:0c:
f8:07:f6:be:aa:8b:59:17:70:ef:1b:34:9d:21:cc:
b8:5b:ee:6f:2c:1b:c5:3c:16:4d:03:30:77:2c:5c:
8a:b4:23:bd:8c:db:cc:1f:31:04:d9:68:52:a8:f8:
13:5a:94:4d:b5:67:72:bc:7f:99:33:3b:d3:24:c7:
09:b7:20:c3:49:0a:ff:c2:57:d2:86:f6:fd:bb:00:
ca:88:9b:bb:2e:29:04:0d:34:ff:ff:8d:f4:ec:28:
8d:d7:39:45:e3:5a:5f:f5:1f:2e:19:d6:b0:b6:23:
a5:7c:35:f3:1c:72:72:12:4e:53:a4:dd:66:a5:bc:
fe:c9:bb:f7:d0:c7:ef:a3:e3:fc:57:69:d4:44:3c:
df:42:3f:71:46:b5:26:8c:78:89:b4:db:d5:69:d9:
9b:96:b0:d1:d7:dd:cc:a7:cf:a0:a2:28:6e:64:e1:
5b:6c:2d:33:ed:04:29:0e:91:4b:4b:2b:55:2b:06:
49:8c:9d:35:99:f4:63:a0:c4:0f:46:58:5a:c8:ab:
ec:a7:c6:e2:6c:85:ea:e2:95:b9:24:c8:4a:3d:f1:
87:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5F:30:73:62:03:3F:8A:8F:84:16:6C:B6:EF:FD:83:C1:E0:2D:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0635a99-a3cb-3d8e-a6e3-7e3c14addd48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:8a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:84:9c:33:cc:6a:34:cc:ac:7d:b7:8e:d2:e5:df:c8:6e:54:
00:02:3f:c1:c7:02:dd:18:c6:4e:f6:eb:a8:5d:be:ac:da:2e:
0b:78:f4:5f:72:79:7a:6e:58:60:61:aa:e7:95:3d:43:32:a8:
bc:81:f5:3e:c3:20:c8:76:7c:6c:84:fa:eb:10:41:50:04:41:
52:82:22:a0:6e:ed:15:37:91:68:97:a4:82:7f:af:0b:1f:c1:
c0:e4:33:5a:16:4a:4b:be:20:e6:15:32:01:dd:fe:2e:8f:81:
9c:5c:54:fc:d7:2b:54:db:7f:f3:11:99:44:34:a9:cf:3b:19:
55:b9:38:25:af:23:f4:1e:f9:e8:e6:d5:f6:12:2e:3d:10:b1:
11:df:24:96:68:b6:72:99:4b:28:a0:85:03:4d:31:e1:65:25:
4d:e7:98:7b:17:85:42:bb:bc:e3:0a:9b:ac:81:d3:62:e4:6e:
16:d4:e6:b7:9f:f0:a4:56:86:52:95:53:5d:3d:ab:84:7a:a6:
bd:39:f1:38:bb:ff:71:0f:35:33:f6:42:3b:fc:01:52:9d:f2:
c7:31:66:13:e8:37:5a:da:ac:4c:8d:1f:35:c7:f1:17:77:69:
dc:15:3f:45:0c:85:ae:64:3b:b9:cb:db:c0:b3:fb:b3:b0:f5:
5d:b0:f3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:34:07 2025 by rpki-client