Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02a3c49a-07e8-3382-b266-fd272e1cd2fc.roa
File: 02a3c49a-07e8-3382-b266-fd272e1cd2fc.roa (raw, json)
Hash identifier: 4+Au9CIZaC2aLpU80b1dUAVxXU7m2Wdm/sqPasarS+0=
Subject key identifier: 4F:A6:3F:C1:3D:7C:2F:BE:2A:58:AB:40:3A:BB:DE:91:67:97:A7:C2
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858476F74D960225519CDA99F5F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02a3c49a-07e8-3382-b266-fd272e1cd2fc.roa
Signing time: Sat 05 Oct 2024 01:30:07 +0000
ROA not before: Sat 05 Oct 2024 01:30:07 +0000
ROA not after: Fri 03 Jan 2025 02:30:07 +0000
asID: 12025
IP address blocks: 2001:470:3a1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6f:74:d9:60:22:55:19:cd:a9:9f:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 5 01:30:07 2024 GMT
Not After : Jan 3 02:30:07 2025 GMT
Subject: CN=91a42643-2531-4b4a-96ab-cf87413b099a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5f:fa:66:b1:6e:71:86:72:34:64:9c:15:1a:
e1:98:d0:6f:b1:d2:df:9e:28:2f:20:1a:0d:24:f6:
f6:ab:be:54:37:3f:be:23:b0:5f:9d:f4:17:f3:5b:
72:22:9d:64:57:c8:6d:b1:0d:ec:dd:02:cf:3c:4c:
c0:77:cc:dd:93:e1:aa:7a:65:27:ef:32:03:9d:13:
db:89:3b:c9:41:0b:5b:a3:ed:76:b1:56:71:3d:1b:
bd:ac:e2:d1:36:59:ac:e0:9a:a8:8a:46:cf:98:5f:
96:43:47:23:9c:ef:4a:37:56:27:2d:a6:a6:f9:f6:
30:9b:d8:07:31:a2:bb:d5:49:5f:30:26:cd:39:27:
d2:63:5e:b9:2b:77:fe:88:cb:a4:8d:3f:d5:5d:05:
20:48:4a:7e:a7:48:39:97:b8:4e:80:8e:24:f7:a6:
ca:77:36:24:77:2c:82:13:ca:06:7c:2b:7b:98:82:
ee:62:fd:4d:8c:4f:88:4d:ab:c7:f2:4f:77:a5:8b:
46:ba:0a:2a:c7:e2:90:ef:7b:02:aa:c4:9f:2e:44:
32:40:67:cb:23:28:b8:da:34:62:dc:91:d3:b2:c3:
6f:a2:3f:b9:5f:6a:8a:75:73:0a:36:5f:55:91:9a:
87:7a:fc:79:d4:39:73:da:96:8d:74:69:a3:b6:28:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A6:3F:C1:3D:7C:2F:BE:2A:58:AB:40:3A:BB:DE:91:67:97:A7:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02a3c49a-07e8-3382-b266-fd272e1cd2fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:4e:9f:60:38:a4:d6:c8:d4:14:2d:53:98:82:c0:55:43:fc:
e3:72:8e:86:80:ec:b6:bd:bf:e1:88:da:04:11:a9:cd:5c:07:
50:23:9a:ac:1e:42:00:cc:d4:83:1c:be:75:9c:a8:5a:f1:9f:
d5:49:f3:91:f8:96:3a:19:1d:5c:a9:03:11:5b:64:18:36:1f:
2e:d4:c4:16:20:67:e3:c5:09:2b:95:4d:58:5f:84:24:ee:95:
de:06:87:10:04:3e:91:73:5a:f0:d0:e1:f3:67:cb:45:aa:86:
04:17:7c:41:e4:16:47:93:c3:6f:fd:55:a9:71:25:d1:a0:79:
1f:f0:10:f5:bf:91:5a:19:9f:02:e4:22:4f:bf:04:0c:84:d7:
6a:43:9a:38:30:a9:6a:8a:bb:92:8e:80:81:31:df:1d:75:2e:
a7:38:63:ce:13:69:03:d7:44:6d:01:fd:52:c3:2b:4c:42:d9:
7f:4f:cf:d8:dc:ce:2b:a1:8b:26:d5:4c:c5:aa:88:9f:57:66:
a6:e9:4c:4a:4b:4e:46:d0:8b:61:83:3d:6b:1d:83:0f:a4:2f:
6a:40:d2:9c:49:9c:e2:c9:3c:a0:c3:06:08:25:41:78:22:17:
e1:43:e5:ad:e1:28:de:03:4a:53:2c:6c:f0:6b:70:96:21:bf:
e9:8a:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:26:08 2025 by rpki-client