Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd372c51-ad58-37c8-8707-50fffd8609a8.roa
File: bd372c51-ad58-37c8-8707-50fffd8609a8.roa (raw, json)
Hash identifier: Dg4RMyUFg4FnNBTqqPKngbT3pRAB+VHQWiAVFS+wj88=
Subject key identifier: 5F:17:17:CB:7F:8C:37:F2:89:8C:82:7B:F1:E0:42:4B:E9:59:4E:E5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935C23FE513FAF703B6C350
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd372c51-ad58-37c8-8707-50fffd8609a8.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 22663
IP address blocks: 2001:470:2c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:c2:3f:e5:13:fa:f7:03:b6:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=0bf3f013-7e4b-4414-885e-0b6cd177ef15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:3e:ff:06:5e:eb:44:0b:b5:a9:ae:38:d8:
17:8f:a6:d9:62:f2:1a:f2:40:29:88:bd:da:23:46:
eb:a2:c9:93:62:fb:14:17:9c:78:19:f1:b0:66:e0:
d0:24:57:88:f3:09:94:5a:82:7d:fb:64:f3:f1:ae:
64:df:97:32:be:53:25:95:ba:40:bc:23:eb:25:7a:
2a:e2:cb:4a:79:d9:32:6b:48:60:94:ac:19:97:9a:
4b:7a:ec:f6:d1:33:65:67:d7:30:7a:f5:95:15:f8:
69:9a:fe:e1:53:5d:c5:c9:00:8b:30:e7:ff:92:42:
69:90:95:86:b8:73:32:d7:53:ae:73:c3:53:69:d4:
d3:51:89:fb:db:f5:34:69:1f:af:37:93:bf:4c:a1:
23:1e:de:64:fb:0d:d3:db:07:bd:30:57:6b:75:88:
32:7c:4e:21:94:1e:63:38:66:dd:7e:78:be:0f:2c:
b7:ca:d2:b9:a4:12:db:a2:9f:74:11:7a:56:c8:d1:
49:13:0a:25:b4:55:b4:4c:66:5e:a1:ba:e6:ff:07:
bf:0a:80:1c:55:2d:05:69:8f:24:8a:eb:4b:9f:c0:
a4:fb:c3:d8:3f:5b:53:fd:03:7a:d4:ac:1a:83:ce:
ed:16:e2:4f:45:7d:d6:16:04:37:95:7b:4e:96:46:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:17:17:CB:7F:8C:37:F2:89:8C:82:7B:F1:E0:42:4B:E9:59:4E:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd372c51-ad58-37c8-8707-50fffd8609a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:24:f3:a7:22:39:51:13:fa:05:bf:85:53:6c:92:67:f1:0c:
f4:26:f8:5d:f0:75:8a:5b:02:84:96:a5:aa:80:ec:d2:c0:61:
0e:49:e4:8a:58:db:f0:3f:43:73:65:a3:c3:43:a5:dc:16:cd:
b2:f6:01:4c:25:f5:af:68:04:c1:e4:10:bf:63:b1:ce:d7:d8:
eb:bf:59:68:43:b0:e3:b2:b5:97:de:27:cc:7b:a4:38:f6:de:
8b:a4:c5:49:a8:ce:c0:8f:0d:bd:24:49:0c:19:5d:6d:c4:41:
ff:f2:be:ec:ce:94:ad:6f:d4:97:db:ca:35:e0:81:46:37:62:
9f:53:2a:d9:fa:23:3e:2b:c3:e1:ad:92:f3:03:54:11:b0:ba:
ac:79:18:9b:a6:f6:ca:09:9f:78:24:82:64:e7:2e:8a:23:82:
22:03:ed:58:9a:53:48:e4:fa:20:86:0c:d2:9c:06:13:12:f6:
c4:19:b8:8d:69:04:c8:f7:a1:a7:4d:84:27:31:11:06:1f:28:
ff:c5:e5:1f:41:59:0c:43:07:f4:db:a2:69:98:1e:a3:6b:06:
8e:b7:34:0c:50:c9:25:e5:46:e5:18:a8:05:20:6a:90:c7:3b:
28:93:84:5e:65:9d:4c:0c:84:3f:2b:35:65:ef:df:ea:ec:17:
77:8a:70:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:31:57 2025 by rpki-client