Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/140da0cd-8ed4-37b2-8c3c-c3249e897188.roa
File: 140da0cd-8ed4-37b2-8c3c-c3249e897188.roa (raw, json)
Hash identifier: igKTRIt94DLrUtOqzIsPQeQ6XRIJvHBN2v13IZ+b3QQ=
Subject key identifier: 66:D5:F9:A8:59:75:C7:5F:09:07:87:54:66:73:E5:72:A4:9C:DD:E3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584632898DD31DC03D2B7D48AF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/140da0cd-8ed4-37b2-8c3c-c3249e897188.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 33765
IP address blocks: 2001:470:2c7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:8d:d3:1d:c0:3d:2b:7d:48:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=e04ed4f9-1c32-46a7-a2b9-139a363ab31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:3d:a8:d9:2e:f9:0f:eb:f4:f7:5d:50:55:
3d:89:3c:7e:c3:e8:b7:36:c9:3e:2f:ac:f5:f3:50:
da:f9:8e:1f:28:46:f4:9b:aa:42:e7:2e:7d:37:a5:
2b:2c:7b:e0:85:6a:86:26:4a:1d:d7:18:7e:48:d6:
78:de:bb:b5:91:34:4e:2e:78:7e:5c:b3:8d:e3:f3:
f2:e1:27:95:dd:78:c7:0d:64:7e:fe:85:e6:12:92:
e8:30:bd:a2:29:a4:b0:66:ae:a9:7e:d6:b2:c2:67:
06:25:27:7f:34:45:55:5e:6e:4c:b1:aa:43:9b:17:
ff:c1:b6:84:22:af:da:af:27:74:93:3b:cc:1b:e4:
2a:2d:e8:6e:38:56:39:c6:ec:17:57:de:35:9b:52:
65:47:88:c4:f0:c9:69:59:3a:9d:20:39:37:88:1a:
6b:1c:a2:b9:7a:1a:e9:19:50:57:79:86:0b:52:d0:
fb:fa:6b:b6:71:f8:93:1e:63:19:16:17:27:5b:45:
a5:d7:3c:16:6c:f8:b8:98:96:2d:a8:a0:a2:a6:39:
06:21:c8:6b:35:97:f0:12:04:04:8d:f8:1b:33:65:
4c:a7:8d:79:7d:50:cc:ac:01:5b:33:48:35:82:6d:
1a:8b:d1:04:af:f0:61:25:fd:e1:03:e6:88:76:91:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D5:F9:A8:59:75:C7:5F:09:07:87:54:66:73:E5:72:A4:9C:DD:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/140da0cd-8ed4-37b2-8c3c-c3249e897188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2c7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:dd:73:a1:5c:42:68:c9:b9:18:92:cb:cb:58:5b:85:29:ad:
17:7f:e0:2e:3c:b8:79:69:96:08:a8:ed:7e:2e:f3:6e:08:bc:
3a:2c:ee:f3:49:31:f3:a9:e2:bf:fe:36:d1:f1:a5:d9:8e:b3:
14:78:97:67:9c:62:bc:fb:0c:be:e7:7c:f6:33:be:51:a0:b4:
7b:b8:c5:da:2e:a7:64:c7:6b:ed:18:dc:20:9a:87:ff:28:8c:
69:66:f4:a9:bf:a3:90:c4:d3:ae:3c:de:cb:92:8c:07:73:a9:
b8:c9:6c:16:2f:a1:16:7f:5c:03:70:8d:61:12:27:5e:4a:49:
e2:4d:d6:c9:14:61:8f:34:d4:86:c1:06:87:14:eb:99:52:1d:
c4:e3:54:47:e4:9e:a7:67:7a:ff:03:a5:91:e3:07:e8:ca:15:
71:91:05:31:15:c5:1f:95:e1:d4:76:01:b6:33:6b:ec:c2:c9:
c3:78:d9:24:32:0d:20:26:1e:fa:dc:6f:e6:ae:33:1e:02:23:
83:52:36:2e:17:b4:bd:fd:44:fd:22:fd:8b:35:c4:30:88:0a:
00:15:37:56:0b:24:2d:b3:8f:cb:0e:7d:8d:29:03:ea:b2:5f:
29:cd:81:a6:fd:59:a2:1b:da:a7:e4:c6:3b:46:37:af:f7:85:
c9:6e:ed:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:28:30 2025 by rpki-client