Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9fdf5a6-0582-3797-b7ec-289b5d04f3b6.roa
File: b9fdf5a6-0582-3797-b7ec-289b5d04f3b6.roa (raw, json)
Hash identifier: 8fdau4zty0TZt4osFCSBp0X+w2ZQhiwlhQNBXiY5u0Y=
Subject key identifier: BE:5A:B6:E1:14:EE:B2:7F:67:BD:56:F4:7C:8B:19:70:08:03:FE:57
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285841E97192275BD9F8ABD707ECA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9fdf5a6-0582-3797-b7ec-289b5d04f3b6.roa
Signing time: Tue 16 May 2023 12:00:00 +0000
ROA not before: Tue 16 May 2023 12:00:00 +0000
ROA not after: Fri 17 Nov 2023 05:00:00 +0000
asID: 398297
IP address blocks: 2001:470:81::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e9:71:92:27:5b:d9:f8:ab:d7:07:ec:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 16 12:00:00 2023 GMT
Not After : Nov 17 05:00:00 2023 GMT
Subject: CN=8b5dde7c-c05c-4e6b-9cdc-a762f902197b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:6a:38:ac:eb:f7:84:85:e8:84:59:5c:7d:
2b:92:88:da:94:06:c4:bb:b6:be:75:35:4a:de:39:
ca:a1:d0:4e:f8:60:8f:94:c5:bc:bb:5a:62:6b:c3:
c0:05:2f:a3:45:e4:b1:6e:45:3d:68:cc:b1:9d:7a:
0f:64:3f:92:27:26:97:57:1d:7a:18:83:b2:d0:52:
72:ca:03:e0:7b:61:63:68:88:2f:f6:3b:8b:c0:c3:
7f:bd:d6:a1:48:7b:f6:0f:0e:2f:1a:78:e9:6b:39:
14:93:8f:54:7d:bd:32:8f:01:0b:ba:f7:4b:c6:55:
f7:92:46:bb:52:2e:69:1c:7d:7d:de:2c:6d:12:00:
44:cc:7b:4b:1b:56:be:37:55:19:76:dd:37:8c:72:
a7:b8:02:fd:3e:41:4d:57:18:60:7e:21:6c:ca:bb:
b5:ed:ce:30:e8:c0:5f:e6:f2:7b:54:75:db:d4:6a:
9f:06:e3:53:54:30:99:8e:13:d9:cf:53:92:ad:4c:
ef:8d:77:98:71:1a:60:f7:c2:57:15:ea:6b:91:04:
0e:c1:8e:b6:e6:70:99:15:83:2f:3d:6c:d1:5c:f9:
69:72:c1:e5:16:f7:e9:09:cd:09:f4:fe:cf:9c:7f:
9d:55:32:34:e2:18:2c:4d:9b:52:79:c2:c9:a8:e5:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5A:B6:E1:14:EE:B2:7F:67:BD:56:F4:7C:8B:19:70:08:03:FE:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9fdf5a6-0582-3797-b7ec-289b5d04f3b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:81::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:58:e9:46:66:61:c5:63:30:2c:0e:c7:c4:63:ad:3b:de:6f:
dd:a5:1b:6c:7a:2d:1f:70:79:aa:cb:11:e2:65:20:16:a9:73:
91:76:c0:0b:7a:5b:d8:22:0d:f5:d6:4a:ff:7d:55:60:d0:14:
a3:c9:3d:bd:96:9f:d8:8c:0f:6a:2f:a4:77:dd:a8:48:bc:16:
15:61:f4:6c:81:aa:a6:0e:24:10:f7:62:28:ff:b0:57:16:a9:
f1:b7:ba:55:e6:68:ea:08:de:2e:be:b9:3e:96:18:6e:2b:f5:
40:43:72:83:10:e5:89:38:1d:f5:5c:68:09:1e:57:01:98:72:
3d:ec:37:f1:20:dd:64:4d:c1:19:1e:4e:45:e6:ba:59:aa:8b:
2e:8b:82:02:1b:31:6a:0f:65:98:85:c3:3c:c5:ab:a3:ec:0e:
8e:1c:8e:af:90:a7:44:51:bc:dc:b7:8c:07:c6:09:4e:50:1f:
af:de:43:8d:67:4a:d7:02:45:ba:23:00:ee:40:32:b1:bb:c1:
bb:7b:b9:1e:25:22:58:47:a3:e0:b0:51:c6:3a:8a:94:9d:fa:
11:d1:29:4c:a1:0f:a4:82:74:77:d1:e5:0a:d0:93:07:ba:8f:
5f:03:b4:fd:a0:7d:41:67:10:f2:52:03:75:ce:23:05:82:b2:
e7:82:d3:d2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEHpcZInW9n4q9cH7KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDUxNjEyMDAwMFoXDTIzMTExNzA1MDAwMFowLzEtMCsGA1UEAxMk
OGI1ZGRlN2MtYzA1Yy00ZTZiLTljZGMtYTc2MmY5MDIxOTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp51qOKzr94SF6IRZXH0rkojalAbEu7a+dTVK
3jnKodBO+GCPlMW8u1pia8PABS+jReSxbkU9aMyxnXoPZD+SJyaXVx16GIOy0FJy
ygPge2FjaIgv9juLwMN/vdahSHv2Dw4vGnjpazkUk49Ufb0yjwELuvdLxlX3kka7
Ui5pHH193ixtEgBEzHtLG1a+N1UZdt03jHKnuAL9PkFNVxhgfiFsyru17c4w6MBf
5vJ7VHXb1GqfBuNTVDCZjhPZz1OSrUzvjXeYcRpg98JXFeprkQQOwY625nCZFYMv
PWzRXPlpcsHlFvfpCc0J9P7PnH+dVTI04hgsTZtSecLJqOWgmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL5atuEU7rJ/Z71W9HyLGXAIA/5XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjlmZGY1YTYtMDU4Mi0z
Nzk3LWI3ZWMtMjg5YjVkMDRmM2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEhY6UZmYcVjMCwOx8RjrTveb92lG2x6LR9wearLEeJlIBapc5F2
wAt6W9giDfXWSv99VWDQFKPJPb2Wn9iMD2ovpHfdqEi8FhVh9GyBqqYOJBD3Yij/
sFcWqfG3ulXmaOoI3i6+uT6WGG4r9UBDcoMQ5Yk4HfVcaAkeVwGYcj3sN/Eg3WRN
wRkeTkXmulmqiy6LggIbMWoPZZiFwzzFq6PsDo4cjq+Qp0RRvNy3jAfGCU5QH6/e
Q41nStcCRbojAO5AMrG7wbt7uR4lIlhHo+CwUcY6ipSd+hHRKUyhD6SCdHfR5QrQ
kwe6j18DtP2gfUFnEPJSA3XOIwWCsueC09I=
-----END CERTIFICATE-----
Generated at Thu May 8 02:59:54 2025 by rpki-client