Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/04188350-00b1-34ad-8936-9f8a764fa379.roa
File: 04188350-00b1-34ad-8936-9f8a764fa379.roa (raw, json)
Hash identifier: RJXITEkL8hkz9zqCZyjngvxf+Am6TR/V1EijDp9sIrM=
Subject key identifier: FC:93:C7:CD:1F:2E:28:CF:FD:C7:D5:8A:9E:6C:55:A6:B5:74:42:B2
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846196971AAED58BBBEF2F0C600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/04188350-00b1-34ad-8936-9f8a764fa379.roa
Signing time: Tue 04 Jun 2024 13:00:34 +0000
ROA not before: Tue 04 Jun 2024 13:00:34 +0000
ROA not after: Mon 02 Sep 2024 13:00:34 +0000
asID: 3242
IP address blocks: 2001:470:2bf::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:19:69:71:aa:ed:58:bb:be:f2:f0:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 4 13:00:34 2024 GMT
Not After : Sep 2 13:00:34 2024 GMT
Subject: CN=1ae782f5-f26b-435a-9099-f2816373ff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:4c:5c:c0:f3:a0:8d:cf:7d:8a:38:8b:63:
7a:13:71:d2:de:93:4c:9d:ab:d2:5e:09:ee:7b:8c:
38:b4:f2:14:14:8a:1e:0b:5f:22:dc:2c:f3:f5:28:
73:d3:ef:a2:3a:75:7a:a6:6d:28:00:24:b2:db:87:
fe:24:86:af:f0:65:21:1d:57:c1:05:c6:f3:b0:61:
c5:9b:12:6d:32:82:1e:95:aa:47:48:1c:56:82:df:
07:c4:f9:30:57:29:41:20:8a:59:a7:3b:c7:8e:e5:
eb:59:60:25:44:47:7d:8e:39:72:0e:c9:2f:49:d3:
4b:59:de:f9:e4:2e:2f:60:54:01:28:07:78:dd:bb:
8d:97:4f:78:f6:f4:eb:17:04:3f:6c:ee:94:08:f1:
4a:83:26:56:ce:d3:3a:1c:ae:67:63:a3:14:7f:7e:
29:49:c1:28:84:fa:54:a1:f6:1e:37:1d:d0:79:21:
83:02:d0:40:e0:98:ee:ce:89:bc:e3:16:4b:08:0d:
e2:a1:63:6f:76:98:ba:ef:9a:7a:ef:92:d3:c4:17:
bc:fa:db:b1:d7:51:54:40:e7:bc:58:53:90:e1:d3:
41:c7:f9:e5:50:d8:68:c1:82:29:29:fd:51:0b:cd:
c0:d3:1a:88:36:d0:12:c1:bb:9f:b5:7d:11:c6:e3:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:93:C7:CD:1F:2E:28:CF:FD:C7:D5:8A:9E:6C:55:A6:B5:74:42:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/04188350-00b1-34ad-8936-9f8a764fa379.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2bf::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:e0:18:94:a1:e4:d9:87:b1:62:ba:fb:c4:bc:53:5a:05:7c:
e5:fd:c9:a6:f4:91:7b:f0:70:44:ba:83:3a:25:83:72:6a:5b:
a8:5d:72:22:c3:bf:eb:74:09:bf:9b:20:fa:a1:05:1a:55:1e:
f2:3a:03:9f:fd:73:44:00:71:69:76:ee:49:8d:60:e7:8c:0c:
3a:1d:b4:31:1f:1c:43:d4:b7:bd:ef:df:a8:06:f0:9b:8d:e3:
6f:47:53:7a:59:7c:08:84:94:d5:db:57:c7:f8:24:51:6e:2f:
dc:9b:be:5b:1c:0a:13:36:74:f0:50:55:01:57:fe:dd:75:99:
61:31:70:5c:7a:d2:82:a0:92:23:08:c8:dc:06:62:be:9d:ae:
1a:05:c0:a2:b8:d0:c5:49:99:4a:51:6c:21:3f:68:d0:2b:25:
49:5d:cd:7b:14:81:50:2a:be:b1:e5:ce:79:ce:68:1a:f3:c4:
88:7a:6a:55:34:71:c0:d3:82:8b:9d:3d:83:91:1f:72:96:fe:
34:29:74:ef:67:82:30:8f:57:df:e7:39:6d:62:2b:92:81:33:
e3:d9:ef:37:fa:12:98:cc:ee:c7:c7:f6:56:c4:4b:49:d8:ae:
7f:c1:24:2c:26:66:d0:a1:c9:6c:f3:43:61:8e:60:0a:43:b9:
7b:ab:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:41:52 2025 by rpki-client