Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/939e1024-2b81-3ae6-b72c-0242384ab2df.roa
File: 939e1024-2b81-3ae6-b72c-0242384ab2df.roa (raw, json)
Hash identifier: bBbH9vRsH0JvrcizGO869ioCtrUkAKGC1LDRF/OMFBo=
Subject key identifier: 17:E3:43:D1:91:B1:5E:AC:8E:5A:FC:BE:C4:F6:0D:50:5C:F3:64:3B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842D6BDB67D45EE7652C27426B0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/939e1024-2b81-3ae6-b72c-0242384ab2df.roa
Signing time: Wed 09 Aug 2023 12:00:00 +0000
ROA not before: Wed 09 Aug 2023 12:00:00 +0000
ROA not after: Sat 10 Feb 2024 05:00:00 +0000
asID: 46972
IP address blocks: 2001:470:16e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d6:bd:b6:7d:45:ee:76:52:c2:74:26:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 9 12:00:00 2023 GMT
Not After : Feb 10 05:00:00 2024 GMT
Subject: CN=2c1514f1-1cb2-4f4c-b975-4a7cca552ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:5b:9c:85:d1:93:07:e6:7b:76:47:0d:cb:
46:aa:1f:57:c9:90:66:be:a0:1b:3c:2e:9c:9e:bc:
7d:7f:13:f3:7f:d0:66:e3:65:2a:37:96:81:14:6b:
9c:f7:7a:36:94:19:5f:1e:59:d8:8b:2e:ec:31:e3:
0e:dc:e8:ca:42:3e:59:cd:74:fe:b2:5b:f3:4c:84:
7f:a7:f0:42:13:68:06:08:68:48:62:6a:34:11:a0:
2b:30:16:5f:7f:13:1d:c2:cd:48:81:f0:f5:11:cb:
ea:25:b0:0b:48:64:14:1f:f3:18:ea:94:1c:a3:23:
a9:e7:45:f9:99:6a:d8:be:01:63:67:f4:53:02:32:
91:8d:9e:2e:9f:27:d8:d0:6b:78:66:24:dd:bf:03:
0b:bb:32:85:0a:9f:17:01:32:0d:74:61:11:79:32:
b0:6b:b8:a6:7e:2c:8c:5a:dd:ca:f2:59:83:b5:76:
1a:a0:94:4b:9e:cc:e5:40:18:02:1a:0c:47:3e:52:
2e:50:3c:22:89:bf:b9:e3:cc:80:61:0f:7f:e9:2a:
19:c3:3d:e2:90:e4:9c:b7:ce:ca:13:97:0f:ca:80:
5e:0d:59:47:df:48:cf:a1:1e:df:ab:b7:1a:3a:e6:
fe:44:e5:0b:63:06:c9:51:4f:44:4f:88:a8:d5:f1:
c1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:43:D1:91:B1:5E:AC:8E:5A:FC:BE:C4:F6:0D:50:5C:F3:64:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/939e1024-2b81-3ae6-b72c-0242384ab2df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:16e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:f5:40:6d:f1:bf:f8:b3:f9:c8:a3:93:bf:dc:e2:c3:c6:fa:
7a:49:e1:3a:60:8d:b7:6a:84:aa:db:23:a7:a2:5b:37:7a:e8:
cb:1b:9e:ed:4b:1e:0e:c0:df:e9:d5:60:63:dd:dd:8c:16:36:
88:de:03:66:ce:76:c2:98:0a:89:b7:ce:51:4c:60:17:31:66:
0d:ac:5b:cb:6f:1d:b1:3c:ff:b6:87:8e:0d:38:91:f8:88:c6:
dd:48:e7:55:b5:17:b2:45:a3:fa:f9:a3:a1:c8:55:47:5b:37:
60:32:b3:96:95:3c:05:89:fc:62:61:96:f0:c5:e5:cb:bf:c5:
24:8e:b8:39:5c:54:64:9c:b9:e7:e9:09:11:63:e7:11:46:2a:
0c:c0:4a:97:7b:e7:46:8a:07:db:1d:d9:3c:2d:88:d4:e3:25:
3f:ef:93:e4:f7:5f:77:66:05:9e:fd:4e:6a:a0:46:5f:25:ef:
b0:12:42:71:94:ba:6d:e4:28:ea:b2:d2:3f:1f:a7:8e:d4:66:
89:8e:1f:49:8d:6a:b8:2d:19:dd:08:66:91:fb:0c:50:a2:ce:
e5:ec:38:f1:7b:a6:2e:bb:73:b4:97:7f:78:45:80:c6:49:bd:
fa:35:61:9a:55:f1:63:86:8f:96:0d:11:98:a6:ab:e3:30:5b:
32:19:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:17:42 2025 by rpki-client