Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2253caa9-8938-39fe-8922-6f4378c1ac38.roa
File: 2253caa9-8938-39fe-8922-6f4378c1ac38.roa (raw, json)
Hash identifier: pc6GJdNf+sG1to5La2dcMeZiGHk4XxMCmq9gitBQx7s=
Subject key identifier: EE:C3:5E:97:BB:E4:4E:48:98:85:41:D1:7D:30:8B:F4:63:9B:5D:73
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858464788C94E30F5A018AC990A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2253caa9-8938-39fe-8922-6f4378c1ac38.roa
Signing time: Fri 21 Jun 2024 01:31:01 +0000
ROA not before: Fri 21 Jun 2024 01:31:01 +0000
ROA not after: Thu 19 Sep 2024 01:31:01 +0000
asID: 142271
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:47:88:c9:4e:30:f5:a0:18:ac:99:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 21 01:31:01 2024 GMT
Not After : Sep 19 01:31:01 2024 GMT
Subject: CN=3554b7d5-5df4-44b3-ad65-cde22f56c1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:50:44:a7:6f:63:53:7e:bc:71:f9:8d:08:
78:fc:65:e2:bc:f2:08:55:c3:9f:80:59:03:4a:83:
22:20:f9:4a:bb:1b:53:92:a0:2a:fd:45:41:34:49:
0f:a0:b2:3d:85:31:95:b4:a0:41:60:7b:b2:9b:79:
86:de:1d:b2:3b:db:4a:58:7a:30:10:0b:28:f9:5f:
c2:14:28:ae:f0:4b:d6:6c:d8:65:97:e6:ac:0d:a5:
09:85:9e:e0:10:f7:d5:9b:82:3d:c7:6d:06:4c:42:
f3:8d:53:ee:79:cb:d0:39:b6:7d:78:b9:b6:25:55:
95:cf:1e:1a:24:20:c7:bb:d9:f5:c7:ca:7a:a3:4d:
e1:34:de:60:5b:ab:80:52:62:01:71:89:27:54:18:
c2:c2:c2:26:c2:df:32:e9:b0:72:2a:5f:29:6c:42:
8e:89:fd:b0:cf:d6:bb:b8:b9:e7:bb:ce:fa:14:02:
dd:4e:95:7f:99:35:32:ff:b2:7d:b1:11:bb:f0:ea:
48:ec:cf:dd:f0:10:80:a8:93:96:fd:61:20:69:48:
4c:bb:dc:d6:31:42:47:81:c1:7d:d7:2a:ec:42:05:
8a:d6:ce:f0:ce:9f:19:8c:a2:29:83:ae:3a:b7:d1:
54:04:fc:b4:ab:bc:d9:09:e5:7e:8e:2e:df:50:f9:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C3:5E:97:BB:E4:4E:48:98:85:41:D1:7D:30:8B:F4:63:9B:5D:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2253caa9-8938-39fe-8922-6f4378c1ac38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:d4:c3:65:4a:34:0b:de:32:f0:c8:a2:a5:e9:e9:3c:c4:ca:
bb:66:b8:04:d9:5e:99:8d:5d:24:ff:87:24:f3:a3:51:b0:18:
3d:ff:9e:f8:34:13:55:bd:f1:6b:bd:42:a7:cc:d8:94:67:a1:
07:c2:00:00:41:70:3a:e5:b5:99:e9:14:bd:d3:02:33:4d:95:
cb:ea:ea:70:7c:5f:42:3d:33:d8:33:0f:b8:1c:6b:9e:9c:85:
dc:71:28:bc:02:7b:4f:8b:14:4d:15:89:2e:5b:86:66:48:01:
e6:92:9d:5a:e7:07:e2:c8:52:8f:c1:41:0f:8c:77:f7:25:4f:
b4:5a:83:00:8f:49:89:e5:f7:58:96:1a:18:dd:70:60:c9:19:
56:84:eb:22:96:7d:93:f0:2d:63:07:d6:8d:88:e0:a5:c8:02:
e2:33:cb:a3:9f:2f:9b:bc:8a:99:d9:9c:db:a6:b1:0a:2d:ba:
dd:42:13:b4:ff:3e:14:c6:b3:02:a7:59:36:d1:69:58:f7:07:
c3:f4:b8:93:1d:cb:14:f1:02:f8:89:78:81:c0:ce:bb:ab:20:
4c:e6:d5:22:0a:6a:a5:cc:e5:c9:fc:37:45:8c:fc:a8:70:d7:
f3:cb:bd:40:7b:e2:d4:e4:9b:7e:99:69:36:64:96:ca:a0:c9:
3e:87:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:21:44 2025 by rpki-client