Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0ece2c07-2958-316a-9442-820c9654e47a.roa
File: 0ece2c07-2958-316a-9442-820c9654e47a.roa (raw, json)
Hash identifier: d38XkZV568/r9K9sWRyz3GaYOIe9i7w4s0CrqI+h7xY=
Subject key identifier: 1D:5B:ED:55:F9:B7:BF:08:E8:CF:C6:63:AB:F9:EA:C2:4B:14:72:08
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584644AF05E1FDDEC6C765832400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0ece2c07-2958-316a-9442-820c9654e47a.roa
Signing time: Thu 20 Jun 2024 01:00:24 +0000
ROA not before: Thu 20 Jun 2024 01:00:24 +0000
ROA not after: Wed 18 Sep 2024 01:00:24 +0000
asID: 397468
IP address blocks: 2001:470:26c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:44:af:05:e1:fd:de:c6:c7:65:83:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 20 01:00:24 2024 GMT
Not After : Sep 18 01:00:24 2024 GMT
Subject: CN=fb87bb87-cea5-4b87-9e0f-171c41d83513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:c2:09:25:8f:8e:e2:14:cc:a6:dd:6c:86:
a5:ba:cb:88:5f:bb:3e:08:c8:89:d3:33:5a:a2:c8:
49:56:9f:7a:8e:e7:8d:6c:bf:8b:db:18:22:55:f4:
ff:70:ae:8b:4e:7b:05:d5:88:92:70:a1:57:25:1e:
60:da:cd:7b:fa:36:91:49:b8:07:73:a8:0c:ba:26:
cc:bb:e9:2b:63:c6:1d:d0:c9:ea:ae:36:ab:9e:69:
58:80:e9:d1:70:36:80:15:4a:9c:66:68:4d:70:c6:
c2:63:aa:21:51:31:4f:b5:70:d8:20:1c:bc:f1:45:
64:8d:93:fc:50:86:b8:59:7e:22:22:61:fe:88:fc:
19:bd:34:8a:b2:11:f0:b8:ee:d3:bb:b6:5e:21:ca:
09:b4:72:8b:50:95:d5:b6:2d:bf:0f:66:b5:2a:5d:
09:e8:ad:29:88:12:78:c4:81:ab:67:83:72:9c:2e:
dd:da:b4:52:9a:42:9a:d3:5b:de:4b:b2:41:74:08:
cc:53:99:a9:c5:e3:c0:57:f2:6b:21:2b:67:e5:04:
da:09:84:70:24:6f:96:fd:ee:49:1f:55:8d:c2:24:
47:f2:27:68:f2:91:a7:d9:7b:8f:3a:73:5d:51:e7:
de:0f:ab:ba:e6:fa:90:62:01:33:43:5c:c9:c1:85:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5B:ED:55:F9:B7:BF:08:E8:CF:C6:63:AB:F9:EA:C2:4B:14:72:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0ece2c07-2958-316a-9442-820c9654e47a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:26c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:1e:d3:23:de:6d:31:e0:23:d2:b7:16:9a:0c:5e:bc:a9:62:
8b:1b:a1:b9:06:e7:eb:d2:5c:9d:f4:65:70:56:b2:1b:e6:4f:
76:96:5c:3f:10:02:2b:36:34:4f:44:37:3d:52:bf:2e:bd:f8:
3d:e7:7a:75:37:5c:37:a8:30:c1:f8:9a:a2:43:f4:ad:90:3d:
3b:29:3d:5e:fa:1c:8c:d6:e7:3f:df:9f:df:1f:4e:1c:7f:e3:
c7:1a:8a:46:6d:78:4f:19:6b:d7:5e:c4:59:0f:8c:bb:4f:fd:
cc:02:51:72:c8:83:42:c1:be:82:53:3c:db:a0:5d:81:22:b2:
9a:3c:32:ec:aa:ff:ed:44:69:5f:68:49:ff:a9:8c:b5:d1:51:
03:eb:a0:5b:75:b3:c0:37:b1:bc:44:e7:4a:a3:d7:bc:78:44:
0c:7f:3f:b3:62:54:3e:42:57:a3:64:6f:93:ee:7d:ba:89:9e:
08:32:5a:a0:ef:8b:60:86:8b:46:44:62:61:84:a0:69:7b:26:
de:33:ff:f9:e8:1b:bc:07:56:68:fb:68:9b:06:f9:fd:f8:75:
2a:d7:ca:c8:4f:62:ad:7f:14:31:12:e7:c2:40:9f:ce:5f:0a:
37:10:ba:13:35:ea:64:3f:7c:b1:e4:65:80:a7:0c:8b:a1:27:
51:df:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:25 2025 by rpki-client