Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee23c2ec-2831-3bbc-8245-34d0ec9e2bff.roa
File: ee23c2ec-2831-3bbc-8245-34d0ec9e2bff.roa (raw, json)
Hash identifier: n+gmxrsNHbmMBzAUo3jNGmkJrPHmrZG1hZ/vZ9ttrcA=
Subject key identifier: 33:DF:D4:E1:CC:4E:1C:F0:1D:3C:01:57:36:DA:90:61:FE:E0:8C:48
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA64E9AEADEB25E87958140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee23c2ec-2831-3bbc-8245-34d0ec9e2bff.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 33097
IP address blocks: 2001:470:2c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:4e:9a:ea:de:b2:5e:87:95:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=708984a6-e806-452a-a87e-e719fad071a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:a4:20:17:e5:28:6b:d7:02:f8:4d:02:ad:
3d:6b:86:e4:b2:31:4c:af:ca:09:cf:af:94:1d:9b:
3f:dc:19:c8:7b:e3:e5:9e:cc:de:3b:12:f0:c7:15:
1a:2f:76:22:3d:68:d7:66:c6:93:8b:0a:38:1a:50:
1c:ba:c9:fc:60:21:d0:bf:b5:45:5e:da:64:57:60:
55:fb:81:bc:52:de:72:e2:28:51:1e:4c:73:ce:0c:
36:a1:ee:fb:06:81:37:e4:fe:ad:8d:17:66:a8:5f:
67:8a:c7:3b:e7:7b:bb:12:07:3a:86:6a:41:d5:d3:
a5:34:1b:c7:03:7e:5f:2a:e5:01:59:92:78:22:2a:
65:b6:76:7d:13:ad:54:1e:70:74:ed:a4:75:33:62:
20:fd:a1:c3:dc:de:50:69:b8:0d:31:d5:65:50:da:
1b:91:2e:75:fe:ef:94:4a:ea:f0:31:29:e1:30:3c:
ba:0c:11:84:64:8d:73:ce:26:e8:be:74:96:e6:33:
3d:c8:af:d8:88:9a:ea:76:a4:c7:a4:a4:ff:11:f5:
f9:9c:ab:39:a8:ca:89:a0:85:d2:1c:51:b6:8f:71:
a4:b4:d3:95:1c:26:68:75:1d:cd:d6:b5:3b:50:07:
d9:ac:01:28:6b:04:17:f6:7b:f5:c5:4a:99:1a:e7:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DF:D4:E1:CC:4E:1C:F0:1D:3C:01:57:36:DA:90:61:FE:E0:8C:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee23c2ec-2831-3bbc-8245-34d0ec9e2bff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:0f:cb:2a:53:e7:a7:eb:75:19:56:78:a5:c4:08:d4:f9:01:
22:43:ba:f4:1d:2b:44:8c:27:a6:2e:8e:00:f9:e9:38:01:8f:
b4:0d:c4:f2:1a:16:85:d1:31:66:44:7b:7c:72:85:0e:cf:4c:
81:96:97:0a:fd:84:3b:53:ed:03:ae:ff:28:25:83:57:52:32:
26:17:74:4e:2d:a3:e9:89:ea:02:3f:14:e7:a2:5f:ea:68:5a:
ff:a2:80:ca:70:8b:30:a7:3d:44:77:6f:6c:69:19:9f:e9:5d:
f7:1d:bc:81:a2:93:f1:60:c2:47:fe:4f:5a:d8:e7:f5:2b:3b:
64:7e:1b:2a:72:94:5a:df:c1:aa:37:cc:f4:e4:12:11:b2:e4:
5a:7b:61:c1:9a:08:bf:84:ae:b3:48:d8:56:7b:f3:00:77:cd:
58:d2:d4:2f:17:fb:4a:c2:59:9b:4d:76:2c:2a:8a:d1:9f:e5:
b3:30:f9:d7:b4:ac:fb:46:e2:85:20:0e:73:ca:fe:ce:11:50:
f2:f2:65:6b:9b:a6:a8:78:c6:ad:f6:3f:7b:52:17:51:c2:c6:
8e:95:7c:8e:ca:75:b8:87:3d:99:20:ba:ac:f9:a2:ad:4f:ca:
51:03:5a:1a:50:94:75:a4:08:7d:fa:b0:ba:fd:71:d8:9e:79:
f7:51:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:44:44 2025 by rpki-client