Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/178af2c1-bb4c-360a-9cf4-d36d005e11c0.roa
File: 178af2c1-bb4c-360a-9cf4-d36d005e11c0.roa (raw, json)
Hash identifier: fHKbXz/U2zNoC4joV76f+iO5VZLzt6KVwtZIKVVkXWw=
Subject key identifier: E5:12:D1:C4:1F:1D:E5:68:91:7C:59:20:B1:7C:9F:17:8A:3F:DB:C0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845C8739D2E696638A5961BCE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/178af2c1-bb4c-360a-9cf4-d36d005e11c0.roa
Signing time: Mon 06 May 2024 13:00:34 +0000
ROA not before: Mon 06 May 2024 13:00:34 +0000
ROA not after: Sun 04 Aug 2024 13:00:34 +0000
asID: 20432
IP address blocks: 2001:470:295::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:c8:73:9d:2e:69:66:38:a5:96:1b:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 6 13:00:34 2024 GMT
Not After : Aug 4 13:00:34 2024 GMT
Subject: CN=ae9b7335-97bf-4097-a28c-c4be0f645e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:cd:63:17:85:87:08:74:74:7a:2c:7a:a1:
a9:4f:cc:47:66:45:1c:ce:48:03:37:a8:80:81:80:
45:79:62:fe:81:bd:cf:35:17:8e:56:0a:4c:45:d2:
23:8a:57:9c:63:a8:18:77:dc:54:6f:fc:7e:38:21:
f3:30:8a:1a:e8:a9:b0:00:90:dc:c3:b9:1a:6f:de:
c8:78:b6:29:27:d9:f7:a1:23:f0:d7:4e:c7:09:ec:
21:30:c6:ee:90:b4:ca:09:30:96:3b:6a:31:69:4d:
76:ea:01:8c:0b:8a:b3:5a:d4:bb:f7:60:b0:6d:22:
03:86:a7:26:ca:87:23:15:0a:dd:59:99:47:c3:df:
37:fd:36:d4:8f:37:ed:27:46:8b:4d:27:e2:ef:02:
e7:0c:1b:ac:04:e5:8c:61:d8:c8:8e:97:3b:b5:58:
22:75:25:94:bf:a2:3b:74:ab:d0:7e:c8:ab:c7:7e:
29:8c:39:6e:c1:bc:0b:39:de:f0:bb:7f:ca:5d:ef:
95:95:40:cf:8a:10:da:e3:17:ea:08:56:ab:ef:63:
51:57:63:9c:d0:93:04:4d:89:12:05:30:8a:8c:28:
41:b7:e2:72:a2:84:e5:d6:2c:51:90:fe:51:ee:ab:
2a:6e:b2:ba:a4:16:8b:fa:5f:00:12:e7:58:d1:89:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:12:D1:C4:1F:1D:E5:68:91:7C:59:20:B1:7C:9F:17:8A:3F:DB:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/178af2c1-bb4c-360a-9cf4-d36d005e11c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:295::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:37:b2:73:81:f2:ec:77:b7:3f:87:33:48:63:b9:ff:a3:e4:
80:00:5c:99:ef:2e:16:95:6b:6f:25:e7:d0:86:86:d3:0f:e6:
51:98:1d:74:f7:38:fc:07:aa:02:da:e0:53:33:eb:cd:d1:f1:
07:3a:73:00:bd:87:cc:7a:57:87:22:89:3e:25:12:3f:81:ad:
b1:9e:29:2f:53:69:ed:c3:41:85:5b:89:8b:65:9e:22:a1:e8:
c3:09:8b:89:ab:17:20:f3:73:2e:0b:b3:5c:2e:31:96:46:25:
7f:84:38:e1:2d:30:43:b9:85:17:26:c7:8d:ad:88:51:09:1f:
cf:39:db:3d:a2:e7:b6:78:23:8f:b6:d9:b6:3a:b1:ea:7f:9e:
f2:19:ae:8b:a2:db:c0:bf:a7:1f:05:44:9c:7a:88:c8:07:49:
95:9e:a3:6a:e5:cd:25:5e:53:93:4f:29:0a:9f:e8:fd:af:b0:
9e:17:6b:83:a1:aa:a6:55:26:e7:e5:ac:33:da:aa:04:9d:0c:
e8:07:6c:fe:96:87:1f:60:ec:43:21:b7:84:82:05:9e:81:1c:
3b:1b:b9:1e:fd:5f:06:3a:28:53:96:7b:d4:b4:c0:63:c4:4e:
68:ae:d3:82:97:ff:30:6f:d2:0c:06:fc:05:7e:03:8d:61:45:
a5:1c:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:22:07 2025 by rpki-client