Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0de8d8e5-f8be-3c82-87ba-9b28703a3d4a.roa
File: 0de8d8e5-f8be-3c82-87ba-9b28703a3d4a.roa (raw, json)
Hash identifier: EYDGIscKH0axUXhplYIZiW08GTDYyYXhf+uWHjWstgM=
Subject key identifier: 7A:F4:0E:DF:58:29:D2:7B:1E:BB:C9:FB:36:08:D5:FC:D4:75:7E:DD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858464A44626C8F43AC6D011F7980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0de8d8e5-f8be-3c82-87ba-9b28703a3d4a.roa
Signing time: Sat 22 Jun 2024 01:00:24 +0000
ROA not before: Sat 22 Jun 2024 01:00:24 +0000
ROA not after: Fri 20 Sep 2024 01:00:24 +0000
asID: 14695
IP address blocks: 2001:470:1e7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:4a:44:62:6c:8f:43:ac:6d:01:1f:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 22 01:00:24 2024 GMT
Not After : Sep 20 01:00:24 2024 GMT
Subject: CN=3345ae72-3a9a-44ba-8b20-b59d87f2bd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:aa:e1:0d:e7:12:59:29:bc:99:0a:0d:ab:
01:9f:a8:a4:85:3b:e4:89:2d:04:06:09:e4:1e:c8:
f3:b1:a1:ee:d3:ec:f2:42:96:34:df:e6:fd:45:d8:
60:b2:7d:24:d2:2f:61:31:59:e2:fc:cd:ef:3d:79:
3b:30:67:b0:d7:d1:5d:c2:85:99:aa:fd:02:bf:5d:
6f:f8:c2:7c:c2:2f:34:dd:77:89:c9:82:12:2f:37:
e0:dd:09:c1:10:ec:48:ec:ed:07:32:d6:c0:78:5f:
8f:1a:6e:2d:2b:99:59:a2:1a:eb:c7:7a:60:fd:5d:
b5:af:f6:e4:56:e0:42:9f:ed:e9:12:c6:9b:5c:62:
66:d1:07:04:b6:d6:51:bc:f9:b6:83:f5:92:1e:a4:
10:5a:ef:38:fd:35:51:9b:60:3a:c4:55:52:46:44:
ee:fc:8e:10:ba:34:c5:ac:5e:44:24:df:88:84:60:
be:18:f3:6e:47:a0:2d:32:6e:94:dd:39:ca:ad:ee:
e7:86:49:9f:5d:d0:e3:6b:cb:be:61:12:b2:f7:40:
9c:0b:9d:ad:96:46:31:13:09:f3:f2:65:99:d6:43:
91:66:86:fe:8d:3e:55:fa:d1:26:fd:f2:f8:35:36:
1b:5e:d2:a9:f9:fb:6f:c1:4d:fc:e6:59:b3:c4:19:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F4:0E:DF:58:29:D2:7B:1E:BB:C9:FB:36:08:D5:FC:D4:75:7E:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0de8d8e5-f8be-3c82-87ba-9b28703a3d4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1e7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:1d:5d:43:5b:fd:ed:5f:a9:7a:44:b0:e7:5f:33:8a:7c:e9:
34:e5:4c:eb:0f:3b:c4:74:59:70:88:01:33:d1:a8:80:a5:6a:
f3:77:ab:7f:7c:ee:6c:1b:cd:37:7f:85:f6:88:da:d5:34:70:
3c:85:f9:72:a1:c4:48:d1:a9:8e:9c:f5:ab:65:8b:80:72:23:
4e:55:b7:ed:67:31:00:e8:8a:45:b7:e4:57:3b:43:64:27:ef:
bf:e4:3f:2f:78:1e:7f:cf:51:95:da:60:b2:08:aa:91:f7:85:
96:86:36:e2:48:5a:9f:78:08:70:3a:8c:99:b5:19:4f:ed:8d:
02:5d:8d:1e:5f:23:89:9c:74:38:58:fc:9f:c1:b3:d8:92:28:
a4:9f:b3:86:d3:b2:bf:dc:18:55:ae:b3:06:3b:02:57:0c:90:
96:a8:2d:ac:f9:49:1b:ae:bf:d5:8f:d4:be:f4:1c:f8:1f:4f:
90:4c:b9:b0:6e:1d:f2:36:6f:80:4f:61:6b:e7:a3:f7:b9:a3:
e9:ea:28:43:46:b3:64:4d:9e:54:77:03:df:7b:72:57:a2:55:
8b:86:ee:99:3c:a2:69:2b:5f:b1:6a:65:94:4a:ab:39:31:8a:
ef:be:33:31:05:d1:67:b9:e2:42:a7:fa:da:87:09:c0:9d:ee:
9b:44:24:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:34:04 2025 by rpki-client