Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75a1587f-df41-3247-a2e9-d1e9f2f778a2.roa
File: 75a1587f-df41-3247-a2e9-d1e9f2f778a2.roa (raw, json)
Hash identifier: V51CkM/MKSk043MVSODtlRblb68cEQM1BLcdsl/fPMM=
Subject key identifier: F2:4D:F6:9F:F1:DF:89:85:D6:C9:42:A0:27:67:48:FB:45:12:FE:5B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583B26914ED38379095C354CBA40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75a1587f-df41-3247-a2e9-d1e9f2f778a2.roa
Signing time: Sat 04 Sep 2021 04:00:00 +0000
ROA not before: Sat 04 Sep 2021 04:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 328528
IP address blocks: 2001:470:51::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:26:91:4e:d3:83:79:09:5c:35:4c:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 4 04:00:00 2021 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=00a2a095-88ce-408b-8971-9d0a47069c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:be:42:4e:81:2c:72:ea:f4:26:14:34:87:
4c:a6:3c:0c:ad:d3:c4:9d:79:d9:8f:6e:66:de:ca:
0e:65:59:0b:ef:f2:32:04:c3:bc:e9:0a:0b:7e:b2:
01:0a:ad:11:68:a8:45:cc:31:9f:72:9e:16:ba:0d:
90:c3:37:f8:6a:0f:bc:36:4e:9a:30:bf:96:e6:cd:
10:78:e4:66:3e:dd:0e:51:3c:cd:2a:ab:32:78:f2:
25:1f:56:20:43:cd:b9:49:ed:74:23:bd:ea:3f:f6:
92:47:12:6a:3f:8d:23:08:4f:9f:e4:b8:3d:1b:d8:
e1:02:23:e1:bc:1e:59:89:64:39:1f:31:e2:2e:f8:
fa:64:be:0e:7a:87:71:08:2c:3d:fa:16:7c:bc:d0:
f5:e3:83:ce:30:8a:88:8e:5a:2b:b1:ea:25:cf:72:
d4:11:00:ee:fc:9f:46:f0:7f:dd:02:db:f3:55:3d:
46:18:8b:3d:d3:b8:b5:9d:61:c6:4f:e3:65:ec:0e:
bc:bc:dd:61:7d:2b:01:c7:8b:b6:a9:04:1b:78:87:
8b:7d:31:22:f7:6d:c6:79:27:b5:88:3c:f9:ef:41:
6e:ca:d1:c9:51:2f:57:9e:a0:37:e4:7f:67:2f:38:
0c:ed:f3:58:fc:44:b0:db:3d:ff:ba:13:0c:f5:34:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4D:F6:9F:F1:DF:89:85:D6:C9:42:A0:27:67:48:FB:45:12:FE:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75a1587f-df41-3247-a2e9-d1e9f2f778a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:51::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:a9:8f:52:5b:83:69:7c:c5:4c:68:0c:ad:9a:e5:99:f7:40:
55:70:7d:be:8d:a2:72:64:16:5a:a6:02:2f:23:fe:f2:7b:23:
dc:ca:86:59:7a:2d:a3:7f:40:c7:cb:5b:b9:ec:f7:43:03:62:
bd:b1:1f:34:19:82:cf:8e:fe:d0:fd:9d:78:cb:bb:15:e9:d6:
b6:d1:27:c2:7b:aa:69:c0:78:ff:3d:33:6a:0a:ae:0e:6c:4a:
f1:d2:cd:1d:0e:ff:22:40:e8:a6:ee:a4:eb:ae:b5:6f:64:5d:
d5:71:5c:60:a9:cd:a3:7e:a7:9a:9e:d3:81:4a:10:b2:db:d7:
4a:d0:a9:13:b3:91:62:3e:23:d3:87:b5:5a:ce:70:94:8f:f7:
a6:ca:de:e0:f9:08:c0:4d:54:86:9c:84:11:12:1e:a7:57:f5:
0d:ee:78:77:a3:cd:aa:01:33:e4:50:98:05:da:9e:c2:bc:7e:
1a:38:6b:f4:b5:b3:7e:be:8e:f3:dd:57:89:1d:fd:b4:26:d0:
e1:1b:01:87:32:02:8c:98:43:bd:a0:32:e5:6f:5a:e5:7c:4d:
18:40:23:a6:2e:47:d0:74:ed:ea:b9:cc:bf:37:de:51:3d:ad:
68:38:93:61:75:9f:af:b7:a0:5a:4b:1d:50:79:db:e8:f3:69:
85:38:dc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:31:24 2025 by rpki-client