Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03a11845-d21e-3899-bc99-ee20b014538e.roa
File: 03a11845-d21e-3899-bc99-ee20b014538e.roa (raw, json)
Hash identifier: zXU/4J92rvk2zgadaZE1AUPtfRZfstFZb7x5/zGjbp0=
Subject key identifier: A3:B2:C7:8B:BF:15:2E:F6:FB:34:CE:3F:28:71:D9:BF:D3:A2:80:DB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A737D699A37D99F1A477F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03a11845-d21e-3899-bc99-ee20b014538e.roa
Signing time: Thu 27 Jun 2024 20:08:28 +0000
ROA not before: Thu 27 Jun 2024 20:08:28 +0000
ROA not after: Wed 25 Sep 2024 20:08:28 +0000
asID: 2033
IP address blocks: 2001:470:30::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:73:7d:69:9a:37:d9:9f:1a:47:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:08:28 2024 GMT
Not After : Sep 25 20:08:28 2024 GMT
Subject: CN=904cc4b1-4d9a-41c7-af8e-ef141c44a0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:e5:01:ce:a9:e6:7d:44:b5:99:5f:d7:14:
7f:57:ca:16:f7:ba:ec:5f:a2:a6:85:ba:1f:8c:8c:
b8:47:55:97:e2:3e:87:53:38:3e:4b:c8:50:af:93:
0f:bf:1d:c1:e5:70:ab:c9:62:c5:2f:47:5c:e7:5c:
e2:92:65:dc:1b:df:ba:18:14:8e:52:61:92:58:b6:
55:92:f8:7f:02:a8:28:c8:0c:ca:f5:8b:f7:48:85:
0b:8b:c1:bf:78:7b:f1:98:b5:9e:1f:3d:f2:ea:a5:
5e:be:be:3e:fb:f4:18:5d:6f:55:bc:50:0f:70:00:
80:4f:ab:08:a5:f7:ce:0f:a0:8f:4b:dd:2c:4b:98:
11:26:c4:7d:b2:12:95:46:f1:36:37:fd:73:63:f0:
c9:65:34:b2:07:44:6b:93:f7:e8:3c:dd:8c:ec:70:
60:4b:ec:ac:62:93:5e:ca:7f:64:11:40:f7:ac:52:
1b:1a:7f:f7:fe:0d:22:37:3b:7a:1f:00:e3:4a:f7:
c3:83:e9:9a:4a:46:a5:20:39:4e:6b:29:04:40:8e:
8b:fe:b0:c7:00:30:9c:3b:23:fa:c4:8d:23:db:01:
73:72:ae:10:0e:0b:95:9f:6f:e4:09:a8:37:59:23:
21:8c:92:cf:f7:4d:37:d1:6a:a7:43:1f:23:ff:ed:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B2:C7:8B:BF:15:2E:F6:FB:34:CE:3F:28:71:D9:BF:D3:A2:80:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03a11845-d21e-3899-bc99-ee20b014538e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:30::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:4d:2e:56:1f:bd:20:97:59:5d:53:ac:a0:b6:2e:bd:bb:5b:
70:fe:f9:11:d5:54:58:96:e5:43:93:4d:2f:3a:09:3d:06:c3:
b9:25:9a:03:2b:13:de:d0:cf:22:61:ba:a5:c0:be:41:a7:87:
bc:c5:da:45:74:51:c3:12:a4:da:66:60:cf:86:49:3a:e4:34:
2f:57:94:45:66:32:4d:f6:c5:42:43:28:4e:c2:51:3e:ab:0a:
83:29:7d:9e:35:24:6d:8b:a3:69:82:25:a9:62:7c:43:9e:f0:
ee:c3:82:d0:47:59:17:81:fc:bb:f6:0c:c7:d1:3c:67:dd:a4:
35:65:2a:dc:51:5e:dc:89:d1:4e:c3:7f:af:1f:8b:b0:61:79:
e9:81:1d:f1:4c:09:d3:75:ef:f3:a1:80:83:f8:cc:5c:a6:ef:
bf:10:14:6c:60:21:a8:dc:93:9a:a5:28:b8:13:18:a1:5b:70:
dc:7d:47:4f:62:fe:9c:4b:e1:c6:c4:46:b0:13:db:59:8a:e0:
02:ab:48:78:d6:35:de:df:ad:a8:41:80:a4:03:f6:c2:a4:f4:
13:87:78:31:a4:ec:89:cc:9c:92:68:47:8c:7c:e2:ce:ac:67:
a9:66:75:d2:c3:40:23:e1:cc:fb:ee:ed:03:3e:34:20:14:d9:
92:4c:00:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:42:13 2025 by rpki-client