Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20a923e0-45c6-3969-86f7-f5841d27bb2d.roa
File: 20a923e0-45c6-3969-86f7-f5841d27bb2d.roa (raw, json)
Hash identifier: CIp1VxXapbj9ZdWbwtheQvPDveVWrcqiOsAV7sv/G1w=
Subject key identifier: B2:89:90:E7:55:80:79:0A:E6:C7:7A:0B:C7:22:49:A5:B1:7A:9D:57
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858463133517B69298215E4D31C40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20a923e0-45c6-3969-86f7-f5841d27bb2d.roa
Signing time: Thu 13 Jun 2024 01:31:01 +0000
ROA not before: Thu 13 Jun 2024 01:31:01 +0000
ROA not after: Wed 11 Sep 2024 01:31:01 +0000
asID: 23703
IP address blocks: 2001:470:314::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:31:33:51:7b:69:29:82:15:e4:d3:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 13 01:31:01 2024 GMT
Not After : Sep 11 01:31:01 2024 GMT
Subject: CN=471d2ef1-992a-428a-8a51-b0c7250d664c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:6a:93:75:3d:ec:b1:e9:d2:07:0c:b3:f7:
db:8e:ab:4f:43:2e:46:95:de:d5:49:34:ab:30:cd:
db:d6:c7:7a:84:97:b4:df:c9:2b:8a:28:36:69:24:
d9:21:e4:17:ed:21:87:84:b6:3b:b8:7a:ac:ed:cf:
65:cf:75:81:2e:57:39:ab:65:54:4e:47:ac:fe:cd:
ac:dc:ea:3a:44:de:bb:bb:9e:a5:37:91:b4:f3:0a:
c9:81:8d:e0:f9:96:89:b8:c8:75:13:a4:37:fe:75:
50:a5:03:e9:53:c6:79:8f:a7:bc:c9:28:24:4f:ba:
9c:6a:fd:87:42:70:62:a0:5f:ab:1c:6f:60:a7:dc:
e5:ae:67:ef:64:0a:79:54:a1:b3:ca:d9:75:17:2c:
cb:4d:30:58:d5:0a:5c:bb:b9:84:0d:87:1e:d1:17:
33:68:61:95:4d:c2:15:eb:48:90:eb:69:c2:f4:b5:
8e:08:d1:b2:84:53:a2:70:43:48:37:f4:3d:9a:f3:
6a:a7:e1:55:a8:c7:14:c8:b5:88:14:39:d1:6a:a1:
95:1f:cc:45:7c:c2:ff:78:75:e0:cb:83:89:a5:10:
ff:fc:45:8c:39:c4:19:9c:36:6a:7f:94:7e:c1:2e:
aa:b5:d5:2c:98:e7:c7:51:c0:d9:b8:df:8e:78:23:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:90:E7:55:80:79:0A:E6:C7:7A:0B:C7:22:49:A5:B1:7A:9D:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20a923e0-45c6-3969-86f7-f5841d27bb2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:314::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:97:fb:a6:40:9e:71:ea:b1:39:6e:7a:4d:d0:e8:7a:83:21:
61:40:62:99:d3:7e:9d:44:7a:84:be:94:64:15:8c:8d:ef:14:
32:cc:08:1e:37:83:06:c1:d0:67:71:bc:5a:c0:69:af:08:9a:
98:ed:78:20:0b:18:33:d5:f3:71:e9:a6:0f:25:9e:d0:84:2e:
7f:df:1f:6e:5f:b8:eb:23:5b:2b:fc:25:49:06:63:2e:77:b8:
86:4b:1e:ff:e9:07:5b:93:55:de:13:44:5f:a7:30:11:03:d0:
ba:e4:99:d4:57:90:2f:69:24:77:e8:d2:b9:e5:91:2e:c5:99:
ce:93:d3:51:e0:d5:d0:85:ca:1b:8a:73:b9:e0:32:f7:7e:b6:
e1:fb:85:21:f3:8b:f4:5a:de:b6:55:3e:80:0b:4a:a7:ea:81:
05:5f:41:47:60:8e:f5:19:c1:ad:00:69:92:f7:a8:f5:26:dd:
ea:1b:f4:bf:b2:8f:2b:c0:80:6d:66:8e:a9:48:48:64:32:a7:
6b:04:5a:8b:1b:dd:41:1c:7f:82:87:a1:85:6d:de:7c:1d:1f:
5f:ac:c9:22:80:77:bb:40:98:bf:20:71:b8:95:07:ba:55:67:
8e:ae:18:4d:9d:18:67:07:06:07:3d:93:bd:de:f5:f0:58:0b:
12:cc:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:47:00 2025 by rpki-client