Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8168d3d7-45c1-3729-9fcb-8d507d5e31b6.roa
File: 8168d3d7-45c1-3729-9fcb-8d507d5e31b6.roa (raw, json)
Hash identifier: g0jrZA442kSUdiP01vR7cL04ooEBqDgAvq3WcFCrW5Q=
Subject key identifier: CA:2D:0A:4D:3A:C1:B4:42:10:83:2E:AD:51:D3:34:D2:09:A7:ED:68
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA648258DA82E4EC0874C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8168d3d7-45c1-3729-9fcb-8d507d5e31b6.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 33309
IP address blocks: 2001:470:5f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:48:25:8d:a8:2e:4e:c0:87:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=21f11c06-d975-47a0-b791-c2c81b67b5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:0c:b7:1f:0b:09:d1:30:8e:a3:7d:ae:a1:
49:a7:da:06:c4:b5:cb:79:a1:58:ef:ce:74:18:f6:
25:63:12:87:f6:8a:52:b2:75:92:f5:ad:3a:0e:87:
b1:fe:0f:69:75:76:79:c3:bc:d8:92:30:f5:69:2c:
55:d1:42:ab:b2:3b:2c:c7:99:66:99:53:11:14:8c:
ba:f1:f6:82:3e:5d:9d:74:41:c6:35:66:a6:8d:6f:
7c:03:40:85:60:fa:1d:8d:b2:71:31:85:21:73:b7:
b3:3a:2b:6b:5e:89:f7:50:94:e8:18:82:b3:fb:b1:
3e:13:33:eb:5b:8b:f7:69:f8:79:44:e2:80:08:65:
b1:e7:7c:8d:e4:14:c0:df:ea:91:9c:8d:9d:8b:fe:
e2:64:bc:e4:17:e9:47:f1:47:77:87:0a:1d:e7:b2:
af:8e:19:d2:25:76:bb:4e:a9:97:11:9e:16:0b:b4:
8d:10:47:af:80:c8:31:ea:d1:ab:3b:34:f7:04:2b:
17:e4:d7:73:83:ca:fd:16:c9:f5:84:dd:aa:b4:00:
c4:bb:ea:12:68:25:5a:f8:7d:0c:0f:0c:b8:06:fe:
22:98:e3:73:6d:13:96:b3:89:59:29:f1:ea:4b:23:
0e:c1:01:1f:75:1c:64:d1:99:83:b0:66:9b:43:b2:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:0A:4D:3A:C1:B4:42:10:83:2E:AD:51:D3:34:D2:09:A7:ED:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8168d3d7-45c1-3729-9fcb-8d507d5e31b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:5f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:c4:00:b6:46:47:f0:96:c5:bc:13:21:32:94:15:a7:50:b6:
d5:30:a4:88:0f:b7:84:21:f1:7f:cb:23:45:85:cc:6c:48:81:
aa:f9:c2:1c:6b:36:c8:3e:64:7b:3d:69:74:31:a0:b2:1e:23:
69:cb:d1:e9:f6:93:94:d7:3e:13:c3:70:e5:e9:3b:c3:c3:ce:
d6:48:5e:6a:1b:5a:ed:1b:92:e7:54:ac:e5:f0:40:73:4c:80:
79:2f:74:f1:79:a6:43:a6:1c:a4:1a:14:e5:13:f5:c5:33:04:
71:ad:3a:33:d2:aa:41:af:6d:3e:eb:40:35:74:c8:4d:38:93:
5c:80:6e:f5:7f:df:04:90:00:e3:41:06:d6:c9:8d:ae:a7:18:
e4:1a:c0:62:dc:3c:81:04:39:2a:44:05:4c:ba:de:a8:f6:99:
3a:1f:36:8b:02:46:ad:58:30:06:0e:cd:8f:69:a2:0c:21:72:
ff:c1:3f:c0:ec:b9:38:47:41:1e:c8:e9:b7:29:b8:0e:6e:18:
a8:f3:9f:49:6e:10:3f:8d:19:c6:3d:2d:3d:e9:1b:16:d6:c8:
bb:7e:13:3b:47:1f:d5:40:c2:d2:30:d5:1b:4f:24:37:89:4c:
26:00:bc:54:d5:3b:fa:63:6c:f4:c3:f4:77:52:e0:16:77:07:
73:4d:7f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:13:14 2025 by rpki-client