Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa075a91-10da-3711-a347-79ce84502853.roa
File: aa075a91-10da-3711-a347-79ce84502853.roa (raw, json)
Hash identifier: i9YA0rRQXqk11xTYGzZ4z1kAjMBEAH52HWQDcE913yI=
Subject key identifier: B1:7F:70:F1:29:73:89:C1:88:C3:C0:FC:D6:9D:74:A6:A2:56:FC:DF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50F1AF6768FC1932C4A880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa075a91-10da-3711-a347-79ce84502853.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 46154
IP address blocks: 2001:470:10b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:f1:af:67:68:fc:19:32:c4:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=6083e68a-c5cf-44e5-b6a1-29921bc3c997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:97:4c:9d:15:4b:69:78:5c:61:ab:cd:00:
a5:29:1f:3b:a7:23:b7:b2:ff:f3:19:08:d3:8d:cf:
5c:7d:e9:36:96:f9:cb:9e:14:bd:f7:00:f2:41:91:
92:e2:3c:61:ae:55:31:40:8d:1d:b5:2c:d0:dd:2c:
b8:dd:1f:67:7a:88:19:da:5a:a3:a5:29:41:b1:25:
cd:bb:31:c9:58:b5:e4:23:18:f0:24:bf:58:40:c6:
c0:66:04:04:b9:60:91:6a:de:64:d6:f3:4c:85:79:
6f:fe:09:ae:77:fd:a1:a4:9c:36:60:c1:1b:06:e3:
b1:bd:ed:4d:ae:aa:c0:8f:14:97:4a:8f:8f:5e:23:
29:29:0f:dc:62:1b:40:b3:3f:1f:95:36:1e:86:a0:
96:a8:58:54:18:22:dc:4c:c2:64:f1:ac:38:ab:86:
a1:d9:36:60:58:7c:46:ba:1b:b8:bd:b0:50:4d:36:
96:d1:21:53:84:46:01:2a:3c:ed:b8:06:43:e4:e1:
3d:4f:20:3c:e9:b0:a9:2a:4a:49:9a:f6:09:32:7c:
24:d6:72:4a:64:83:47:ba:d0:e2:94:62:e4:13:65:
81:c4:7f:00:47:35:8a:12:b0:6d:02:00:8a:94:08:
46:9d:12:3f:b3:d0:6f:f8:aa:18:15:1a:8d:54:2b:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7F:70:F1:29:73:89:C1:88:C3:C0:FC:D6:9D:74:A6:A2:56:FC:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa075a91-10da-3711-a347-79ce84502853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:10b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:65:b7:21:ae:5f:da:42:b6:c4:18:bb:ea:c0:a1:5a:cb:01:
09:25:96:20:b0:d4:a3:16:cb:7a:6c:38:56:4e:e6:a7:61:e6:
99:e2:0b:7e:3b:5f:a8:86:ce:ac:e6:27:90:43:62:d7:78:91:
a2:1f:0e:a7:59:f8:62:be:cf:e5:f4:ec:6a:1a:f1:2e:a9:f2:
d2:70:d8:57:b9:cb:11:81:8a:ab:d0:f0:22:c2:f5:f9:1e:82:
38:8a:76:4b:72:74:34:25:80:11:0d:7f:49:38:5a:9b:ca:06:
a7:0f:27:48:ca:dc:7f:d5:67:1d:70:ee:1e:a5:00:cc:a7:8c:
97:51:13:14:09:1d:f1:77:d5:b8:94:96:1a:14:66:ec:e2:a2:
a1:87:ec:0c:1c:1e:29:62:79:79:20:23:b2:a5:bf:dc:90:c3:
8c:e2:a9:8f:7f:48:44:5d:54:df:27:e3:7e:8b:22:ca:c4:6f:
cc:12:19:66:7b:43:2e:bb:0f:54:09:5a:12:32:81:b1:29:65:
e9:ca:d8:58:f4:2b:13:b2:55:c5:d4:c9:f9:48:e2:c1:73:09:
c5:87:02:c7:0d:7c:62:7d:ab:c5:0f:3d:b6:d7:ec:50:7b:c0:
4a:ff:82:c3:b8:68:d2:35:2e:7d:93:91:d6:6c:56:e4:ed:d2:
76:25:1a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:57:15 2025 by rpki-client