Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e08a9b7-3dd4-3627-963f-279409cf1283.roa
File: 1e08a9b7-3dd4-3627-963f-279409cf1283.roa (raw, json)
Hash identifier: NcyZMMfW1dQGbQ/C/y4TvCa94K3YHunx7rXuuubQzEo=
Subject key identifier: 93:6E:53:C4:3C:8B:84:47:4C:7C:FE:73:0B:7C:B4:8F:D3:E0:89:6D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A775AA98B3768FEE1DB5500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e08a9b7-3dd4-3627-963f-279409cf1283.roa
Signing time: Thu 27 Jun 2024 20:16:15 +0000
ROA not before: Thu 27 Jun 2024 20:16:15 +0000
ROA not after: Wed 25 Sep 2024 20:16:15 +0000
asID: 329386
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:5a:a9:8b:37:68:fe:e1:db:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:16:15 2024 GMT
Not After : Sep 25 20:16:15 2024 GMT
Subject: CN=41776cf1-2d3d-4548-abc3-57f55bcae052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:8a:6e:8e:e4:f7:ac:e9:f9:e6:df:fb:5a:
0a:b1:45:03:23:2c:bc:b0:5b:eb:c0:36:15:94:f4:
e8:05:1b:44:c3:da:33:83:58:67:5c:2f:7d:7c:15:
e3:40:cf:32:bc:bc:4e:60:c8:e6:43:5a:69:56:ae:
bf:ae:0c:60:1b:bc:0f:95:52:9f:94:a0:b3:a8:cb:
eb:90:6a:74:0d:c7:ab:cf:ad:e3:e4:39:b1:06:5a:
b1:9c:dc:c2:a6:6b:17:c9:b9:44:07:22:cf:11:6f:
24:09:3b:da:ee:eb:00:dc:2c:48:a5:33:32:23:d2:
0c:1c:0b:f3:01:94:58:69:7d:25:22:7d:0f:b3:87:
68:c6:f5:24:06:ea:9c:43:f3:2f:bd:1b:ef:34:db:
f7:1c:fd:ee:cc:69:b2:9f:62:57:d2:d1:31:ce:f7:
58:9b:97:53:5b:66:68:29:61:37:3c:ba:b3:6f:9c:
db:b8:46:52:1e:c4:a2:b0:ef:b2:a0:f2:4c:34:b8:
66:7d:c6:c4:f9:28:32:af:3d:f3:28:e7:4c:39:6d:
b8:c3:0e:c6:01:9b:ac:18:9b:16:03:56:f9:4e:d7:
9c:a0:3e:75:48:fa:19:1d:ce:1b:6f:39:de:b7:29:
ce:61:64:6d:c1:79:8a:f4:35:e8:fb:4d:a4:21:27:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6E:53:C4:3C:8B:84:47:4C:7C:FE:73:0B:7C:B4:8F:D3:E0:89:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e08a9b7-3dd4-3627-963f-279409cf1283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:12:e0:b7:3d:2d:ee:04:99:71:45:85:3a:79:9e:09:1f:bc:
b9:bc:fe:e4:28:73:a4:6b:77:ca:5a:48:c3:a7:05:48:8f:77:
b1:5e:3a:5f:1a:44:e4:39:fa:f2:ba:d2:e0:da:02:d5:ac:83:
93:67:0c:8e:fa:ba:b2:49:01:cd:de:83:02:eb:1e:55:22:ab:
ba:a7:d0:7f:e1:cc:c4:cd:ba:f5:a7:a6:6d:88:d5:d1:cc:a3:
f4:cf:78:7d:dd:ff:ac:95:17:4d:39:40:9b:56:a9:e7:b0:9b:
be:fe:52:b0:5f:57:6c:72:7d:7d:90:0d:69:7a:5a:74:1c:9a:
df:3e:70:80:c4:8a:01:b5:fa:57:49:f1:f9:d2:10:2c:86:8f:
07:ec:cd:aa:49:4b:01:ca:4c:c9:06:dd:1d:b2:53:a1:38:17:
24:be:32:72:bf:1f:7b:5c:eb:7c:26:22:76:f2:d2:44:1f:f2:
b2:f8:c5:78:a5:46:de:30:d7:cc:4d:47:ef:ee:1d:d2:30:2c:
4e:48:fd:22:8b:aa:d9:e1:ce:4f:a9:97:96:9f:03:f6:a6:35:
ca:be:77:33:b7:8c:70:9a:60:d5:1b:6c:3c:2a:9b:09:14:7f:
28:f1:5c:6d:79:af:a2:51:c4:6e:b9:58:44:bb:77:55:e6:7a:
46:61:9b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:35:40 2025 by rpki-client