Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/130ef12f-0137-3500-bdf8-5c22dff508a8.roa
File: 130ef12f-0137-3500-bdf8-5c22dff508a8.roa (raw, json)
Hash identifier: otClzKACXfWqrWvv+fhSBRgD0/wTfjUrDI8DzG+YMf8=
Subject key identifier: 02:B6:0B:3D:FB:92:A9:50:E1:8D:8B:45:9A:1F:B9:9E:7E:0F:27:D3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584729A9C1244954E83C8405C3C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/130ef12f-0137-3500-bdf8-5c22dff508a8.roa
Signing time: Tue 10 Sep 2024 01:30:08 +0000
ROA not before: Tue 10 Sep 2024 01:30:08 +0000
ROA not after: Mon 09 Dec 2024 02:30:08 +0000
asID: 399337
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:29:a9:c1:24:49:54:e8:3c:84:05:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 10 01:30:08 2024 GMT
Not After : Dec 9 02:30:08 2024 GMT
Subject: CN=242314e9-370f-4ba7-84a1-ab82704b9c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:05:c5:3c:4a:7a:69:7b:7b:f6:d4:c7:b3:
f0:64:d8:5c:84:00:f1:a1:ea:a2:60:55:68:96:d5:
dc:9a:6e:0d:28:73:c7:f8:f3:f8:07:9a:81:fb:a9:
13:e2:96:1e:79:24:4d:95:c1:be:d2:e8:3f:4f:04:
46:a7:8b:a4:39:a4:e5:ea:87:e2:28:eb:f7:15:72:
b4:75:74:6e:fc:c5:37:90:06:6e:f2:77:2a:54:63:
9d:db:99:1e:19:b3:e0:2c:1c:90:03:46:8e:93:e1:
6d:e5:39:10:30:e8:6f:45:24:be:2a:ca:50:2a:76:
ae:74:a5:25:b2:f7:f5:9f:3f:2e:b6:cf:c3:ed:05:
66:d8:df:82:01:c0:d2:f6:ac:65:73:d9:4a:0d:e1:
02:b6:4e:30:d7:5e:a2:ba:cf:5f:ba:f1:29:ea:94:
c6:44:76:0a:17:0e:89:9f:93:4b:ce:61:66:03:c5:
54:35:d5:b5:68:50:bf:1b:b4:c7:15:0c:dd:3f:99:
43:94:d9:60:15:0c:fe:ff:31:b0:cc:d2:5c:cc:1a:
b5:ce:b3:5c:7e:73:40:16:1a:11:29:8c:4c:eb:0a:
ac:58:a6:83:9e:0c:58:b1:4d:1b:6b:ac:a1:81:86:
18:48:cd:16:72:ce:9a:ce:20:d7:12:b5:53:2e:21:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B6:0B:3D:FB:92:A9:50:E1:8D:8B:45:9A:1F:B9:9E:7E:0F:27:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/130ef12f-0137-3500-bdf8-5c22dff508a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:56:e7:51:b6:88:92:6f:e4:e5:e8:52:c1:32:77:da:24:9b:
34:1d:ca:55:43:3a:ea:43:28:cb:75:4e:17:b0:dd:e0:65:d4:
80:16:71:45:2d:ac:ca:5b:2c:7c:c3:f0:de:0d:f6:4e:75:a4:
9d:92:d7:dd:27:7d:80:74:20:5b:40:42:e3:b1:52:d0:09:d0:
ea:cc:aa:17:11:4f:50:11:78:68:ed:35:ba:78:a9:50:fb:f8:
c4:a6:03:aa:9e:ae:6b:e6:2c:70:03:9e:5d:90:fa:fd:13:8e:
b4:bd:49:8b:73:80:5c:8a:89:34:aa:b5:24:80:5a:9f:2e:76:
7e:2a:54:47:03:e9:58:65:5b:a0:29:7c:d6:04:52:09:82:04:
32:9e:e0:d0:11:9a:15:b1:26:cf:9b:ce:0a:59:8d:37:88:a6:
8c:02:12:5c:40:da:ce:09:41:a3:b1:be:84:9c:50:79:65:3a:
f5:61:8e:27:ea:b6:a6:58:73:23:b6:bc:0f:bd:62:b1:11:b9:
de:8c:22:d8:69:13:2a:0a:b6:89:c0:6d:35:30:0f:53:28:27:
98:08:f6:89:d8:b7:2c:3c:d5:64:0f:4b:d2:0d:74:a5:ee:e0:
e2:6e:27:0e:58:68:0b:dc:3c:0c:d2:f5:13:15:67:d6:3b:59:
8a:88:1a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:56:07 2025 by rpki-client