Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94dcbe70-dad9-3782-b2ec-f5ccac9a3f44.roa
File: 94dcbe70-dad9-3782-b2ec-f5ccac9a3f44.roa (raw, json)
Hash identifier: wzBW75ff0v+5+NyUNj/LSGZmUiUSDhFZsYvBGSOplls=
Subject key identifier: 9B:4B:12:2C:C8:D3:97:CD:AA:45:F3:5C:9B:19:C1:BC:2F:11:DD:39
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA5DC0C5F965AE40B260800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94dcbe70-dad9-3782-b2ec-f5ccac9a3f44.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 12287
IP address blocks: 2001:470:13b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a5:dc:0c:5f:96:5a:e4:0b:26:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=4b4a1a3c-27c7-4df2-aa41-c47b8866e9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:90:2c:77:d3:7c:dd:08:03:af:36:ab:37:
35:11:d9:b0:09:7a:b8:fe:7e:65:31:e6:c7:91:ce:
bd:13:dd:a3:77:6a:e3:76:9e:f7:02:ab:4c:43:8e:
26:d0:63:66:62:a1:7f:49:6e:45:fb:85:36:69:f9:
86:35:6d:7c:ef:04:be:96:e8:62:49:e7:ee:8c:b0:
c4:68:7d:2f:fb:14:db:4a:af:00:40:eb:03:17:45:
e4:ab:ef:f2:bf:bb:79:a4:f6:ec:9e:67:33:a8:3d:
8e:2c:fe:37:59:c5:b4:d8:55:b2:45:47:f3:46:c9:
4b:bc:de:bd:5d:88:d8:41:df:ca:b9:b6:db:cb:5c:
e7:d7:64:1e:d4:96:53:74:c5:16:c2:18:85:c1:b7:
7e:cc:f1:93:8d:e5:36:fa:cf:30:d2:85:0b:56:76:
2e:76:a4:e9:aa:07:fe:25:98:1c:e5:20:ab:98:60:
f6:fc:5e:1c:a1:0c:59:ea:64:08:51:4e:f3:89:6c:
b4:22:1b:00:5f:29:1d:a0:54:4d:1d:4a:d7:3b:3b:
28:d8:47:cf:97:89:1b:ca:be:ca:53:53:4b:4e:a1:
ec:74:19:58:d8:1a:2c:09:cc:af:87:35:e0:00:8f:
44:d0:0a:56:ad:64:c5:78:49:89:ad:c9:7d:b9:76:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4B:12:2C:C8:D3:97:CD:AA:45:F3:5C:9B:19:C1:BC:2F:11:DD:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94dcbe70-dad9-3782-b2ec-f5ccac9a3f44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:13b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:fc:ea:b0:e6:f6:dc:be:50:2a:c3:2e:9c:b0:a4:49:20:7a:
27:45:d1:e6:84:b5:3c:8d:49:41:b9:8c:40:2c:8a:0c:3a:e2:
4e:4f:c8:59:50:dc:4b:2a:89:b2:41:32:81:b9:de:78:5d:0d:
1a:d7:ef:2e:c7:de:f9:cd:9f:23:23:e0:10:7a:36:2d:4a:ee:
1b:7f:33:96:8a:d8:a9:a5:f8:32:c4:cf:b7:65:cc:19:d4:f1:
79:3c:c7:d9:e6:07:04:9c:df:61:74:bf:0c:04:ea:1f:5d:76:
3a:a7:21:76:c0:49:9a:46:60:d4:1a:74:ea:bd:45:d1:28:7f:
9d:51:b4:e2:eb:d0:04:29:23:be:fb:09:0d:a1:f4:9d:b3:57:
5a:60:ac:a6:6a:2f:9f:72:9d:bb:a6:d4:49:36:4f:88:97:61:
50:d8:8a:c5:6d:01:ea:ff:8a:3d:11:2c:7d:96:35:bb:82:c9:
12:14:0c:ff:21:4f:0f:34:56:d2:3c:74:8d:59:dd:5e:ca:03:
ab:2b:6f:b1:f2:c4:7e:35:a0:89:c7:58:71:05:4b:55:bd:64:
4e:e7:44:15:eb:b6:ef:9a:d8:98:20:9f:cd:96:b0:0a:7b:cf:
0b:7f:f4:c6:00:40:58:63:c0:3b:85:4c:8a:16:af:1f:b7:2a:
b5:72:c8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:07:03 2025 by rpki-client