Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a083f1d-e24e-3281-94e6-7a046c6b14e4.roa
File: 2a083f1d-e24e-3281-94e6-7a046c6b14e4.roa (raw, json)
Hash identifier: Y3iJbLz8lEEnN/XrS65zqOySVXGjjAYELUhPRG/RFRM=
Subject key identifier: 96:62:E6:A3:FE:B0:41:77:3F:BC:1E:2D:BC:51:D8:F9:64:A6:07:1E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A5144489A26D587DA56DD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a083f1d-e24e-3281-94e6-7a046c6b14e4.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 395127
IP address blocks: 2001:470:e9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:44:48:9a:26:d5:87:da:56:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=8574181d-f895-4986-a4f2-49fbbfb98c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:a7:b9:f6:f2:69:4c:3f:61:3d:7b:2a:55:
8b:eb:4b:9c:ab:f5:10:b2:35:5b:9b:1a:5e:ed:bb:
b7:5b:3a:96:af:ea:0f:38:46:e7:8e:99:6c:09:2b:
af:fd:44:64:63:31:9a:59:29:23:ca:bc:d5:f4:d9:
1c:a4:cc:4f:a6:0a:1a:0d:a1:0b:9a:06:0d:ee:d0:
a1:66:3a:f3:94:9a:54:1d:59:42:67:e5:20:c8:88:
e9:67:88:9d:57:8b:3a:1b:81:3a:93:27:06:19:bd:
c2:bc:18:37:89:74:44:11:ac:c1:61:3a:cb:fd:59:
2a:4a:80:8d:dc:9d:fa:77:14:06:01:83:7d:cd:02:
d3:d1:cc:e1:c2:94:ab:27:02:9e:7e:f6:dc:d0:a3:
ba:47:80:8a:bb:1a:34:ed:f7:06:93:99:48:55:f7:
ea:99:a5:68:10:dd:66:86:1a:27:09:fa:10:b6:b7:
1e:ad:9e:95:b3:90:0b:1b:22:b7:de:10:d9:ee:6f:
86:19:ff:ec:4b:f4:d6:a1:ee:f9:1a:97:60:ac:5d:
0d:85:19:1b:2d:7c:ed:14:10:92:d9:e7:10:0b:7b:
da:ba:6a:4a:8c:9a:cb:0a:85:38:77:9f:b2:7a:b4:
33:72:f3:93:a7:e7:00:15:23:4b:9d:d9:ed:f7:37:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:62:E6:A3:FE:B0:41:77:3F:BC:1E:2D:BC:51:D8:F9:64:A6:07:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2a083f1d-e24e-3281-94e6-7a046c6b14e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:e9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:75:85:69:70:cb:55:32:7f:a3:09:61:3e:aa:07:97:ff:fa:
c6:34:2d:ed:77:4e:b1:c8:c1:f0:bb:f7:12:e7:8f:99:15:80:
1d:9f:70:b2:74:99:dd:44:3a:d2:9f:62:cc:30:c0:12:84:50:
2e:7b:d5:95:f0:7a:b9:02:9b:30:e5:2f:be:51:c7:eb:03:f9:
5b:fe:ff:21:60:07:84:a2:26:5b:f6:fb:02:7e:33:76:98:df:
66:b8:af:db:e1:af:12:af:24:a8:1d:02:8a:7e:a0:ee:99:ea:
e0:e4:2a:ba:84:38:e3:81:a3:ae:20:ca:0f:05:5f:f3:30:4e:
f3:1b:89:d9:a0:e8:a7:be:a1:da:63:61:7a:36:82:b4:97:4f:
86:73:d1:ea:ac:5b:48:aa:18:0e:73:a5:e7:ca:cb:ed:6e:e2:
6d:fd:5d:3e:a6:16:11:65:6b:ab:39:54:bb:d8:02:0d:0d:c3:
c2:39:42:70:f1:93:06:56:27:be:cb:58:ad:77:0d:a1:7a:c2:
e9:91:58:c9:75:15:0d:bb:02:ea:c4:5a:2c:b3:7c:1c:bc:5c:
4a:cd:f1:a6:17:e8:90:e9:28:64:97:22:6a:8a:27:1d:c8:56:
83:52:b4:17:e5:cd:86:eb:cf:f9:60:ae:b9:4a:cf:55:0d:fe:
de:e1:54:be
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEFKUURImibVh9pW3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODU3NDE4MWQtZjg5NS00OTg2LWE0ZjItNDlmYmJmYjk4YzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsWnufbyaUw/YT17KlWL60ucq/UQsjVbmxpe
7bu3WzqWr+oPOEbnjplsCSuv/URkYzGaWSkjyrzV9NkcpMxPpgoaDaELmgYN7tCh
ZjrzlJpUHVlCZ+UgyIjpZ4idV4s6G4E6kycGGb3CvBg3iXREEazBYTrL/VkqSoCN
3J36dxQGAYN9zQLT0czhwpSrJwKefvbc0KO6R4CKuxo07fcGk5lIVffqmaVoEN1m
hhonCfoQtrcerZ6Vs5ALGyK33hDZ7m+GGf/sS/TWoe75GpdgrF0NhRkbLXztFBCS
2ecQC3vaumpKjJrLCoU4d5+yerQzcvOTp+cAFSNLndnt9zfZBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJZi5qP+sEF3P7weLbxR2PlkpgceMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmEwODNmMWQtZTI0ZS0z
MjgxLTk0ZTYtN2EwNDZjNmIxNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJZ1hWlwy1Uyf6MJYT6qB5f/+sY0Le13TrHIwfC79xLnj5kVgB2f
cLJ0md1EOtKfYswwwBKEUC571ZXwerkCmzDlL75Rx+sD+Vv+/yFgB4SiJlv2+wJ+
M3aY32a4r9vhrxKvJKgdAop+oO6Z6uDkKrqEOOOBo64gyg8FX/MwTvMbidmg6Ke+
odpjYXo2grSXT4Zz0eqsW0iqGA5zpefKy+1u4m39XT6mFhFla6s5VLvYAg0Nw8I5
QnDxkwZWJ77LWK13DaF6wumRWMl1FQ27AurEWiyzfBy8XErN8aYX6JDpKGSXImqK
Jx3IVoNStBflzYbrz/lgrrlKz1UN/t7hVL4=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:38:16 2025 by rpki-client