Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0057f85a-c6bb-3ee8-a3f6-0c2630cff82d.roa
File: 0057f85a-c6bb-3ee8-a3f6-0c2630cff82d.roa (raw, json)
Hash identifier: DUTpRRtXim1eFyBsOTIoM7smbiwybSQMtlwbc6bv+EE=
Subject key identifier: CB:20:EA:16:2A:8F:4D:3E:C2:9B:2C:53:BA:F9:AF:C2:86:68:B0:17
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845B64E087154175740EBD9CC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0057f85a-c6bb-3ee8-a3f6-0c2630cff82d.roa
Signing time: Tue 30 Apr 2024 01:00:25 +0000
ROA not before: Tue 30 Apr 2024 01:00:25 +0000
ROA not after: Mon 29 Jul 2024 01:00:25 +0000
asID: 25625
IP address blocks: 2001:470:188::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b6:4e:08:71:54:17:57:40:eb:d9:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 30 01:00:25 2024 GMT
Not After : Jul 29 01:00:25 2024 GMT
Subject: CN=d98bfe02-25c3-4e8f-bee0-9c77af63f1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:c0:7e:57:3b:57:8e:54:98:5b:99:14:d7:
14:b0:1a:e6:fa:3c:05:63:0e:a1:92:fa:74:3d:0c:
d6:c0:f1:6b:a8:f8:ef:0e:4e:ea:f8:5e:52:71:f4:
13:30:5b:61:75:49:26:cd:2a:ab:3e:ba:19:bc:60:
9a:03:ce:89:5b:0b:63:53:77:6f:25:fc:ee:6b:1b:
02:65:98:5d:1e:bb:f1:bd:68:6f:93:ff:62:a1:7d:
af:f0:6b:1a:44:f1:9c:7c:d3:7d:31:3b:3c:66:8f:
c3:cd:9b:3d:fa:8c:d9:cb:0d:01:e7:25:51:14:68:
13:13:43:a1:62:2c:e3:7e:3d:fa:a9:82:c2:32:94:
85:79:ef:f5:75:29:f1:ae:de:66:6c:6c:d8:f5:63:
72:2f:01:80:76:78:ec:db:f5:79:8a:4a:cd:28:9c:
a6:5c:6d:50:c2:fa:63:c1:9c:96:1f:95:0c:72:5c:
ef:21:71:b4:d7:c3:2e:4d:b2:de:72:ee:88:83:bc:
b5:a3:de:60:cc:3d:77:79:c5:67:9f:1e:71:d3:68:
8b:7f:e1:63:05:c0:f4:1f:7b:86:3a:61:ef:b5:be:
ab:cb:33:a3:9a:dc:bd:c7:a8:a3:de:e0:d3:76:b1:
65:f7:b9:fa:16:d8:3a:b2:e9:d2:18:46:8b:10:82:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:EA:16:2A:8F:4D:3E:C2:9B:2C:53:BA:F9:AF:C2:86:68:B0:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0057f85a-c6bb-3ee8-a3f6-0c2630cff82d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:188::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:b2:5e:6e:7c:1d:da:dc:cd:53:04:cc:9f:c2:0f:ee:fc:89:
66:15:9e:f8:79:fc:6e:f0:bf:42:ab:cd:9b:f5:ab:30:af:fb:
43:d8:b9:78:01:d1:32:af:8f:fc:6f:33:29:08:2e:97:07:6e:
5b:0e:3f:7a:9e:0f:93:e2:cd:6e:3f:f5:15:91:6f:32:50:e4:
c8:ae:0a:5b:58:b1:fd:56:ff:1a:9d:1d:69:ac:11:2c:f5:99:
c6:f0:52:e3:c6:e4:fe:76:1f:bd:6a:6f:3c:04:b5:ef:30:80:
aa:3a:19:48:16:4b:3e:cb:0b:77:25:df:40:10:b7:36:1e:b0:
70:64:96:61:b0:35:b3:85:d3:74:70:5b:66:6d:1d:1a:d4:3b:
30:da:2f:bf:be:51:92:4f:44:d1:17:08:e4:05:fb:b0:3b:64:
7b:b2:ab:0b:1a:82:e0:44:e8:c0:98:36:ce:49:f5:65:d4:b9:
cc:41:a3:c7:32:dd:40:e4:dc:ee:ac:8b:0d:d2:53:86:50:93:
9d:63:f0:c6:6e:bf:f1:83:41:44:5a:dc:50:16:83:8e:5e:de:
b8:10:83:1e:b1:97:f4:b7:3d:52:d5:23:79:c0:53:a9:3b:10:
e9:cb:40:d1:ac:00:10:92:f7:da:b4:c0:3d:f4:07:90:9b:82:
af:15:d9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:28 2025 by rpki-client