Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3148c0f2-efe8-30cb-ab7c-e1bac1d2b9f4.roa
File: 3148c0f2-efe8-30cb-ab7c-e1bac1d2b9f4.roa (raw, json)
Hash identifier: fU5mpF9foJinRxd7IimFGXXlMvg2aNwUWdXqmExye3A=
Subject key identifier: 56:3F:FF:A4:BC:C8:C5:1B:80:D5:D9:C9:DF:DD:47:EF:83:C5:95:D2
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50F7C78D93D243C84DB740
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3148c0f2-efe8-30cb-ab7c-e1bac1d2b9f4.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 29844
IP address blocks: 2001:470:c1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:f7:c7:8d:93:d2:43:c8:4d:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=f3d35e85-eb1a-4868-b9e7-63224970a0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:09:b3:5c:0b:e9:70:22:02:94:31:dd:41:
6c:f5:ed:35:0b:aa:58:6f:a3:65:23:7c:84:d3:49:
4c:86:de:7d:11:2b:a6:0b:f5:84:74:7b:ff:16:47:
9c:75:00:be:5e:df:9b:eb:9f:22:f0:b3:fa:62:b6:
ee:ba:b7:b8:71:fc:1d:e6:1c:46:21:42:1a:0d:47:
0b:31:b4:f9:a9:52:af:74:67:11:2c:4f:87:70:ca:
c4:0e:18:5c:d8:f2:eb:49:f6:4d:de:83:19:dc:f2:
70:81:fa:7d:53:34:71:82:df:1e:92:b4:03:b9:5e:
d2:b6:65:63:37:9c:63:d6:af:20:1b:b1:fa:22:6e:
3d:73:fb:3a:a6:1d:4b:71:c2:76:9b:7d:94:0d:23:
05:44:01:6f:7b:bf:e3:03:f0:0a:e9:08:ef:d4:f3:
87:74:fa:b0:f9:c3:d5:d0:96:97:de:44:73:b7:56:
46:52:03:7d:28:ea:7f:d9:61:f1:2a:46:bd:79:b4:
69:2a:5b:d9:a7:8d:9a:f9:3b:ac:bd:cc:d2:bb:ac:
62:4c:f1:0d:fb:ab:3a:b1:ab:09:13:c3:ae:36:cd:
4a:cd:d6:4e:42:ec:84:39:c4:e7:05:4f:0e:b7:ad:
19:90:73:b9:cf:1e:1b:44:d4:13:a5:ac:a3:d3:80:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3F:FF:A4:BC:C8:C5:1B:80:D5:D9:C9:DF:DD:47:EF:83:C5:95:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3148c0f2-efe8-30cb-ab7c-e1bac1d2b9f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:c1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:3e:43:08:a4:bf:1a:46:ea:86:bc:e0:ae:96:09:2f:f4:16:
1d:7c:4f:08:d7:ea:14:4b:2e:be:60:2a:65:76:59:ea:fa:e8:
cb:dc:cd:5d:a3:8c:a7:27:d7:32:c8:94:0a:d5:79:30:4f:e4:
c6:f6:2c:e8:74:38:74:4e:38:d4:69:d7:f3:9b:95:11:c6:18:
9a:15:1d:84:f0:04:6c:70:6f:0b:86:6e:ef:fe:62:26:b3:56:
80:cb:14:8e:88:fe:d3:f4:08:89:a5:e3:50:e4:f4:7a:26:63:
ee:83:9b:9a:70:ed:46:39:2b:49:bb:3f:00:e7:e1:49:20:e9:
65:1a:c0:4e:fa:33:37:ac:2b:29:b8:e0:87:ad:ad:f5:4d:8f:
b8:44:25:2a:36:0c:87:39:c9:eb:83:51:71:fd:c7:ae:b4:b1:
0e:57:eb:d7:69:98:7d:f0:2a:43:ec:fa:ae:3b:e6:1e:82:a9:
eb:95:b4:86:51:36:c5:7e:c9:df:dd:44:59:cf:e4:eb:4f:3f:
83:f3:be:a7:f6:0c:7c:6b:2c:dd:2e:a8:06:e4:5e:25:91:6c:
36:4a:d6:89:a7:fe:bc:d0:d8:43:a1:33:fd:12:1e:5d:12:07:
82:06:4c:55:85:38:d7:81:48:6d:37:45:d6:ad:8b:99:3e:de:
e4:fc:ad:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:36:24 2025 by rpki-client