Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/442dbaa2-dd24-3092-99ff-1dff2eb16121.roa
File: 442dbaa2-dd24-3092-99ff-1dff2eb16121.roa (raw, json)
Hash identifier: NvzbFo3jpOHxfVEJBBr4aJd3/lGONbWZH4yIYQg9gnQ=
Subject key identifier: 24:2C:1B:41:FB:6A:D4:C5:EA:C5:5D:46:A4:7E:E2:E4:38:7D:FE:F5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583C8C06A45BB40447D1C0B47780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/442dbaa2-dd24-3092-99ff-1dff2eb16121.roa
Signing time: Mon 10 Jan 2022 05:00:00 +0000
ROA not before: Mon 10 Jan 2022 05:00:00 +0000
ROA not after: Sun 10 Jul 2022 04:00:00 +0000
asID: 46276
IP address blocks: 2001:470:73::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:8c:06:a4:5b:b4:04:47:d1:c0:b4:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 10 05:00:00 2022 GMT
Not After : Jul 10 04:00:00 2022 GMT
Subject: CN=5ad5b094-520c-407a-85d2-a633cd62ff23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:6e:13:95:d2:1a:8b:29:31:90:79:a3:2e:
19:55:f4:f2:31:ac:be:b9:3f:2f:96:31:50:2e:c7:
cb:1a:0c:06:6d:c9:27:bc:c2:fd:a5:b1:7b:36:ab:
98:15:e1:79:67:53:6a:22:89:2f:87:ae:64:e6:3d:
89:82:43:64:43:40:05:cc:d7:85:e6:c9:69:d1:62:
e1:22:3a:d3:4b:06:13:e0:1e:03:ca:74:72:24:28:
fc:77:d6:0e:64:d7:34:4a:35:51:df:0a:53:4c:4c:
1e:f4:a4:c4:e1:02:3d:57:a1:73:57:8b:9f:67:3d:
19:ec:b6:a7:1e:1e:87:4b:b7:22:bd:45:b9:6f:1c:
41:5a:ea:ef:53:af:4c:c6:4f:71:ea:4e:de:2c:30:
cf:d9:f6:f3:56:9f:1b:06:a4:6f:f9:77:6f:1e:7b:
14:3c:f2:69:35:64:73:f1:e7:2d:23:20:af:09:ed:
26:94:90:30:24:e7:e8:b0:a0:c9:aa:20:6a:e7:bb:
f9:d6:d5:5d:b4:0a:3e:4c:80:0a:25:21:0e:f7:52:
29:79:70:8c:a3:85:c1:4e:9d:95:d1:04:76:71:04:
70:57:1e:2b:16:8a:2e:63:b9:b9:4c:67:4b:58:34:
d4:36:e0:94:20:82:3b:23:c1:5e:46:24:55:bb:46:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2C:1B:41:FB:6A:D4:C5:EA:C5:5D:46:A4:7E:E2:E4:38:7D:FE:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/442dbaa2-dd24-3092-99ff-1dff2eb16121.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:73::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:a8:d9:4e:43:1e:19:ee:f9:b6:2c:76:8c:ca:ef:53:89:32:
2a:fd:74:36:c7:5f:84:77:dc:96:7e:91:74:c8:4b:a3:70:38:
19:e5:28:04:35:00:15:a5:20:28:d8:11:7d:6b:26:8c:b7:3a:
c3:be:9c:00:6d:92:22:a5:e1:e7:32:71:f0:28:91:d4:58:a3:
37:17:36:48:22:8a:29:e3:ca:4c:dc:81:35:93:b8:11:a2:ed:
04:5e:c7:8c:a4:e8:1f:ef:a1:2b:e5:c4:50:f8:8d:b0:dc:19:
58:ba:21:d2:43:10:b8:3d:ac:47:2c:6c:56:d5:c0:7a:2c:0a:
49:68:30:c9:18:f5:8b:7a:89:24:e1:d4:32:2e:cb:c6:f9:78:
f6:96:ac:b1:72:0c:8e:b7:a2:98:2e:41:db:96:a3:2a:5c:e5:
b9:ca:38:b1:ad:f1:90:94:a5:17:c5:66:26:ba:4d:bf:cf:7b:
1e:65:fd:85:b3:34:e8:10:c6:8b:47:20:da:72:bc:c2:6a:ca:
48:10:2a:06:02:92:30:b6:21:dc:76:49:52:7f:8d:47:ab:9d:
35:26:a5:9d:db:47:0f:f2:fe:c8:87:3d:8e:1e:43:2a:70:bf:
c9:28:4a:f0:fe:c9:a3:2b:55:c3:94:7b:2b:73:d6:8e:a8:4d:
a9:1d:01:9c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDyMBqRbtARH0cC0d4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDExMDA1MDAwMFoXDTIyMDcxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NWFkNWIwOTQtNTIwYy00MDdhLTg1ZDItYTYzM2NkNjJmZjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6tuE5XSGospMZB5oy4ZVfTyMay+uT8vljFQ
LsfLGgwGbcknvML9pbF7NquYFeF5Z1NqIokvh65k5j2JgkNkQ0AFzNeF5slp0WLh
IjrTSwYT4B4DynRyJCj8d9YOZNc0SjVR3wpTTEwe9KTE4QI9V6FzV4ufZz0Z7Lan
Hh6HS7civUW5bxxBWurvU69Mxk9x6k7eLDDP2fbzVp8bBqRv+XdvHnsUPPJpNWRz
8ectIyCvCe0mlJAwJOfosKDJqiBq57v51tVdtAo+TIAKJSEO91IpeXCMo4XBTp2V
0QR2cQRwVx4rFoouY7m5TGdLWDTUNuCUIII7I8FeRiRVu0b7QQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCQsG0H7atTF6sVdRqR+4uQ4ff71MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDQyZGJhYTItZGQyNC0z
MDkyLTk5ZmYtMWRmZjJlYjE2MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAKo2U5DHhnu+bYsdozK71OJMir9dDbHX4R33JZ+kXTIS6NwOBnl
KAQ1ABWlICjYEX1rJoy3OsO+nABtkiKl4ecycfAokdRYozcXNkgiiinjykzcgTWT
uBGi7QRex4yk6B/voSvlxFD4jbDcGVi6IdJDELg9rEcsbFbVwHosCkloMMkY9Yt6
iSTh1DIuy8b5ePaWrLFyDI63opguQduWoypc5bnKOLGt8ZCUpRfFZia6Tb/Pex5l
/YWzNOgQxotHINpyvMJqykgQKgYCkjC2Idx2SVJ/jUernTUmpZ3bRw/y/siHPY4e
Qypwv8koSvD+yaMrVcOUeytz1o6oTakdAZw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:41:19 2025 by rpki-client