Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/161e37b7-3ba1-3a3c-a355-2e18b96b174a.roa
File: 161e37b7-3ba1-3a3c-a355-2e18b96b174a.roa (raw, json)
Hash identifier: k0ApyKjeQ3pj4WltTE2CYpCXf8Rn/h9nkUUE3jxRpaw=
Subject key identifier: B3:ED:01:81:1E:39:7C:79:EF:E3:46:CA:1A:E8:01:16:D3:BD:B1:2F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584834555A2108A2245A96DFC8E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/161e37b7-3ba1-3a3c-a355-2e18b96b174a.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 393238
IP address blocks: 2001:470:391::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:5a:21:08:a2:24:5a:96:df:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=36ec73f1-a4ff-4a50-929d-ef7e6c5f33fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:37:53:b9:7c:65:95:08:65:4a:55:4a:ca:45:
83:4b:8e:38:02:91:0b:c1:35:4f:cd:b3:04:30:1f:
ca:bc:b4:18:6a:8e:52:a1:14:8a:26:ee:ae:7c:c6:
8c:fb:bd:52:6f:26:e2:4a:e1:e2:f9:da:9e:6d:65:
fc:c7:41:26:b7:7b:89:e3:64:80:8f:a5:ce:03:17:
a6:f7:96:08:8f:05:40:58:27:40:e5:90:c0:d8:02:
8f:20:f3:74:26:bd:20:de:14:98:ab:92:6d:06:ae:
f4:27:43:9b:23:65:c0:53:58:ce:c1:c3:f4:9e:e0:
18:32:8c:46:31:b2:20:e0:0b:40:6b:c0:4c:b7:6b:
35:4a:b6:b2:8d:c9:83:9a:65:20:26:fb:e8:c4:de:
43:aa:9c:00:ab:3b:c8:73:ea:12:3e:54:71:b1:6c:
e2:80:7c:ad:3e:10:5b:7b:c8:cd:53:9b:a0:6e:c2:
96:bf:a6:c3:1d:9a:f1:47:f0:27:b0:6b:ca:60:b6:
db:80:25:f1:9a:dd:fd:49:0e:85:cc:21:39:88:f1:
d2:bd:8a:79:b3:6c:9f:e4:d5:51:5e:b6:b1:ec:db:
35:56:77:3d:94:b5:13:44:c4:a9:4d:f1:70:65:01:
59:b2:10:09:29:c4:65:5d:d1:9b:19:bc:9e:0a:72:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:ED:01:81:1E:39:7C:79:EF:E3:46:CA:1A:E8:01:16:D3:BD:B1:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/161e37b7-3ba1-3a3c-a355-2e18b96b174a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:391::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:79:bb:61:e6:f4:7d:ff:7c:fd:1d:43:66:50:6d:17:d9:9c:
1f:f7:a8:ff:e6:fe:b7:3c:84:0c:2c:51:a1:6b:c7:c4:86:1c:
ef:a2:d7:be:8a:ab:57:67:e8:d5:b0:dd:e4:3a:bc:b3:c5:04:
f7:94:9f:ed:a5:ee:c7:60:a7:ab:03:a7:5a:5f:dc:1a:75:6b:
44:a3:b2:60:a5:08:8c:08:0e:86:a4:56:1f:84:89:8a:6a:2c:
1c:ca:23:9d:80:f8:cd:6e:11:8d:e0:c6:69:c8:3b:b8:4d:0d:
89:f1:d4:17:76:3d:27:20:fe:9e:d4:17:c4:61:54:11:ec:82:
60:c0:39:10:83:b9:a6:ee:59:57:89:10:34:83:d0:65:45:52:
4b:78:ec:25:7a:65:0a:e5:fb:0d:a8:03:fa:81:47:18:50:a9:
cc:a4:fd:3d:2c:d3:15:64:03:0a:5b:21:65:ca:51:7d:17:bb:
07:d6:20:27:9f:c1:11:62:f8:86:1f:86:c5:c3:df:7e:c8:28:
56:8d:8f:28:7b:91:c8:27:06:19:9d:27:1b:7d:74:e1:d5:0f:
dc:71:7c:ac:9b:f8:c5:43:30:0d:b9:7b:7d:bd:7f:9b:69:c3:
02:fa:e4:ef:b7:be:4f:70:92:a3:7f:60:9a:f0:c3:83:6c:82:
64:e8:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:17:14 2025 by rpki-client