Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8b511e8-6ad7-319b-b815-a8f953fe70f6.roa
File: c8b511e8-6ad7-319b-b815-a8f953fe70f6.roa (raw, json)
Hash identifier: X+LuLQSGZ6SY1lILmiHxZoLg1cBmrvVyZsQi4259i5U=
Subject key identifier: BB:83:26:25:E7:2B:64:3B:5C:01:39:46:82:5C:35:B9:15:FD:69:FF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648E7881CD63BFA38165C480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8b511e8-6ad7-319b-b815-a8f953fe70f6.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 40862
IP address blocks: 2001:470:9d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:78:81:cd:63:bf:a3:81:65:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=ea7a9917-e242-4cfb-b5cc-e8004027b695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:10:eb:00:56:05:bf:bc:42:1b:70:d7:a8:
e4:75:b0:57:a5:2e:68:19:b4:04:c2:18:be:6c:37:
09:d5:f6:ea:98:3a:e2:9c:b9:d7:75:7f:f3:57:81:
c1:4e:66:52:e7:c6:59:3b:98:ff:d6:71:be:c6:17:
a6:eb:bf:54:9a:50:73:35:c9:15:5f:fe:69:8a:79:
50:c3:2c:2f:a1:57:07:9a:6d:4d:2f:98:32:14:b0:
7c:76:43:8e:6b:63:da:9f:c4:58:09:ce:d6:11:f6:
a0:6b:81:6c:20:83:6d:af:2b:7b:d7:d7:ee:89:db:
cd:b7:6f:be:fd:8e:bc:2e:bd:d7:03:74:a3:ba:a1:
77:80:f1:62:b0:88:4e:ed:bb:86:c1:73:cc:c1:73:
1e:09:4f:2f:34:38:79:76:5a:e6:a6:e7:02:f0:e0:
ad:bc:53:e5:d9:ae:55:f7:d9:42:e8:d7:42:37:f8:
92:b9:3c:f4:60:2e:1c:99:48:7c:c8:c5:13:17:52:
25:db:f6:f4:75:cd:06:ea:b5:a4:ad:ca:2b:a9:15:
2b:e3:fa:25:e5:f7:7a:39:64:1a:ae:c0:06:82:d5:
85:54:1a:85:9f:d3:d5:1b:6c:39:18:fd:b8:b2:0c:
af:46:ae:32:64:25:04:51:06:21:c1:24:4d:26:cb:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:83:26:25:E7:2B:64:3B:5C:01:39:46:82:5C:35:B9:15:FD:69:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8b511e8-6ad7-319b-b815-a8f953fe70f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:9d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:73:ff:2b:63:1d:db:a0:f2:62:6c:ab:2a:03:fb:f5:44:28:
1a:24:0f:e9:75:d6:52:86:ac:34:cd:2b:c9:b8:52:c4:1d:41:
03:df:bc:cf:25:48:1d:b5:98:40:78:84:75:5f:97:90:39:a8:
e9:ef:a8:83:80:1e:ca:ad:5a:dd:a5:3f:09:6a:45:60:41:d0:
e2:d2:9b:2c:3d:e3:c5:10:47:0c:cd:03:6b:dc:41:1f:ae:9c:
92:d1:2f:b9:8b:f3:e0:97:37:85:3a:21:fa:64:29:3b:30:a6:
bc:ab:fc:d2:39:12:87:08:13:fb:ed:c3:c4:79:92:d2:90:38:
01:f1:0b:10:33:fd:a8:f8:21:bd:49:72:2e:78:71:5c:9f:06:
f4:f7:55:19:a2:3b:b6:1c:2b:ba:b6:06:d6:81:74:c4:cf:81:
d2:ee:eb:3f:5e:ba:6e:8a:d7:c7:dd:72:ef:09:bb:e4:e7:6a:
3c:c0:88:a3:7b:79:80:3a:76:1d:fe:b0:d2:16:ec:96:6b:ed:
ea:66:95:03:d4:d0:4a:ef:57:41:0e:fe:cf:f0:18:17:0d:55:
b6:a0:41:7f:f6:7e:9b:ab:1b:09:5d:7e:47:b8:9c:90:e4:d9:
1c:62:89:d2:ee:71:ea:b8:f3:b3:9b:6c:08:28:be:14:6f:f6:
e6:2f:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:13:50 2025 by rpki-client