Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2078ee96-b903-3e4f-9c76-1c371cd3761f.roa
File: 2078ee96-b903-3e4f-9c76-1c371cd3761f.roa (raw, json)
Hash identifier: DLw4FvPB/s4uplhVjfFqtpC0ggFSd33V5DC2WfdIUQ8=
Subject key identifier: B0:64:5B:E8:8B:48:1C:3C:99:26:D2:49:D9:91:34:99:DF:60:C4:13
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846C7F3D4B8ACD3A290BD1B7000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2078ee96-b903-3e4f-9c76-1c371cd3761f.roa
Signing time: Tue 06 Aug 2024 01:30:10 +0000
ROA not before: Tue 06 Aug 2024 01:30:10 +0000
ROA not after: Mon 04 Nov 2024 02:30:10 +0000
asID: 12025
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:f3:d4:b8:ac:d3:a2:90:bd:1b:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 01:30:10 2024 GMT
Not After : Nov 4 02:30:10 2024 GMT
Subject: CN=dab118da-61c2-44c4-b11f-a094142da6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:2a:7c:ea:4c:a8:29:aa:12:82:43:e1:05:
1e:23:fb:fa:39:2a:a0:bc:1b:8a:f1:2d:ef:7a:0b:
a0:b1:d2:a3:a9:93:0d:7e:a7:2e:09:8a:d5:32:db:
e8:92:fd:e6:0e:dc:84:37:30:7f:e7:ad:99:84:94:
d4:96:44:78:e1:16:bb:18:16:db:fd:48:dc:ee:f7:
9a:7c:9b:44:aa:dd:5f:0e:b4:34:17:a5:2a:c8:90:
cb:aa:29:b0:bd:07:8b:e7:f2:cb:b9:b0:4f:40:6a:
cb:13:79:1e:99:ae:e3:02:3c:af:ad:1a:c4:57:10:
a0:d2:0d:c3:cb:ff:d1:74:ca:59:63:26:cf:53:d1:
f4:af:89:7b:2b:e2:48:59:dd:a2:d7:75:69:06:d0:
e5:b6:a0:d8:0d:fe:4f:b8:c2:ff:05:37:37:1c:f5:
76:19:97:3c:7c:f8:a2:a9:e1:d1:6a:db:44:8d:0d:
1b:cf:a7:27:97:ea:11:3f:d7:35:97:fc:9c:53:c4:
bc:c1:63:d4:0e:50:de:5f:3f:ef:e5:00:99:30:7f:
1e:ff:53:f8:4b:61:82:d0:14:aa:69:51:fe:34:4d:
08:2f:87:5d:2f:4b:69:12:8b:a8:7e:6f:05:16:12:
5f:a9:8e:42:0c:cb:98:3e:65:3c:85:7f:c6:a8:57:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:5B:E8:8B:48:1C:3C:99:26:D2:49:D9:91:34:99:DF:60:C4:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2078ee96-b903-3e4f-9c76-1c371cd3761f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:86:f9:3e:5f:7e:f7:ae:b9:92:82:f9:2d:bc:44:b0:a7:10:
70:18:c9:bb:fe:78:5a:d0:e9:ad:46:24:65:99:2b:b2:9d:c8:
d6:f1:b2:f1:9b:e3:22:57:4a:9c:b8:69:2a:92:cf:a7:9a:78:
dd:91:c6:22:d5:7c:24:3c:e3:21:0b:bf:ca:7c:9e:55:ec:98:
94:48:2f:f2:fd:ac:4f:42:15:f3:fa:51:52:ca:45:13:38:8c:
db:a4:e7:2c:6f:f3:6f:76:8c:3d:17:c6:2e:ce:28:5b:a3:9a:
26:39:62:c4:d3:33:80:82:99:1d:8f:51:1e:40:ec:f0:08:da:
51:54:8d:be:51:bd:97:8f:95:06:00:fc:fa:07:7b:58:40:b4:
07:04:11:ec:66:17:f4:77:fc:ec:e7:39:2f:9b:1e:34:79:3a:
45:c7:e2:1c:9b:ae:b1:00:a1:40:23:cb:58:6f:01:34:3e:3c:
8e:2f:1e:11:b0:b1:5f:57:d9:01:5e:65:88:2e:e2:cf:08:d7:
06:78:da:8a:7d:e3:4c:85:d7:8a:cc:1e:39:04:33:c0:e0:46:
74:38:00:98:8c:b4:c7:7e:3b:95:50:07:ff:02:42:73:2c:4b:
51:e2:a6:6d:2d:c9:50:36:45:3a:95:2c:81:03:0c:28:26:ea:
1a:f9:54:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:34:09 2025 by rpki-client