Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02d6d1c8-ec34-375d-a1a3-65e38a2bf6f6.roa
File: 02d6d1c8-ec34-375d-a1a3-65e38a2bf6f6.roa (raw, json)
Hash identifier: ZmwdCSWf+O6VNC1wJVV7A2eRYhXVKuW3Hp+ENvXD/Qc=
Subject key identifier: 58:C3:46:D3:06:E8:C9:FE:35:72:FF:17:B0:32:E3:51:50:A7:54:C7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846381F04405B6F95D3BE1B2F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02d6d1c8-ec34-375d-a1a3-65e38a2bf6f6.roa
Signing time: Sat 15 Jun 2024 13:00:35 +0000
ROA not before: Sat 15 Jun 2024 13:00:35 +0000
ROA not after: Fri 13 Sep 2024 13:00:35 +0000
asID: 54686
IP address blocks: 2001:470:251::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:38:1f:04:40:5b:6f:95:d3:be:1b:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 15 13:00:35 2024 GMT
Not After : Sep 13 13:00:35 2024 GMT
Subject: CN=0d2d010d-5e34-4a81-97e1-46029f365eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:3f:ed:fe:81:cf:13:45:79:64:5c:31:98:
86:43:4a:a4:b0:c2:17:cd:e0:85:32:1f:54:9c:20:
f6:51:c4:25:dc:3e:8d:76:66:9a:af:5e:4d:7f:b5:
aa:04:6e:b8:23:da:81:06:f3:5a:0e:59:a3:dc:01:
1e:bf:32:5a:e7:63:41:95:6a:8c:f2:e9:c1:d5:ed:
31:d4:84:04:62:81:46:59:55:0d:fd:5d:45:37:be:
88:11:d6:16:94:b2:84:40:76:54:38:33:19:5f:75:
a4:08:fe:50:ad:e8:2d:10:7d:40:d4:2d:56:37:fd:
e1:e6:62:1a:1a:94:86:4a:2a:ef:53:a0:53:b7:86:
20:7c:90:e0:0c:b0:bb:bf:9d:ab:dd:a2:41:9a:19:
3f:8b:f9:d7:ab:a2:8c:be:55:61:e9:58:73:0e:e0:
35:75:73:17:33:d8:25:7a:93:33:58:2f:ad:e2:ec:
f4:f8:b1:e5:7b:54:92:06:81:3b:57:a4:18:8c:f7:
d6:d7:80:f5:5b:7e:fc:72:3a:86:1e:6b:6e:7e:78:
c5:2a:73:fa:66:12:cc:03:e9:fe:77:8b:64:21:15:
3f:d1:de:08:a9:e0:4a:10:ae:4b:a1:bd:4c:fb:7f:
48:b3:fe:ba:68:22:b6:80:61:d3:ff:df:8e:41:f8:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:46:D3:06:E8:C9:FE:35:72:FF:17:B0:32:E3:51:50:A7:54:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02d6d1c8-ec34-375d-a1a3-65e38a2bf6f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:251::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:76:7d:8b:fc:1e:59:42:64:7f:fc:ca:8f:f9:03:46:c2:7b:
f4:3e:d2:1a:59:2e:e3:07:29:d3:fc:6d:17:84:aa:80:80:1b:
e5:9a:bf:d3:05:e8:1e:9c:86:13:f1:03:18:ba:13:18:ed:8f:
c4:11:9a:59:84:b6:20:c8:66:33:ec:48:23:a2:eb:7b:3c:1b:
4e:79:ae:a6:68:12:52:53:c2:1a:65:dd:2b:34:37:b7:bd:fd:
26:7f:e9:23:3f:23:97:93:3a:fb:a1:8b:0f:9f:5c:d9:95:74:
fc:e2:82:d8:d2:a2:ba:33:26:ad:2f:be:08:b0:fc:43:a2:0b:
81:aa:a1:e7:7f:c7:c2:96:f5:a6:cd:33:0f:f5:09:68:dc:19:
3a:f5:85:59:da:b2:ae:0a:f2:8e:85:c0:d0:c4:0d:7d:ea:d0:
10:86:4a:18:b4:01:38:7b:60:9a:b2:0f:3f:89:50:ee:63:a1:
da:05:52:4c:88:f5:ce:3f:36:fb:3c:04:0c:09:4b:00:0e:61:
d3:da:91:6c:55:03:d4:90:5f:f4:87:f6:66:39:93:6e:1a:9c:
32:2e:7e:8b:22:df:39:c6:52:29:e0:d2:58:61:30:27:2a:1c:
2e:0c:a5:17:a5:b1:8f:ec:c2:58:21:ec:ce:5c:91:c1:df:91:
f7:3b:33:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:26:16 2025 by rpki-client