Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28a523a6-918e-3edc-a7ed-aad5318231c8.roa
File: 28a523a6-918e-3edc-a7ed-aad5318231c8.roa (raw, json)
Hash identifier: sA8kY5TBpfGnzdyfeYDj9Zds79Wc6ChLU/eAbXC19ZE=
Subject key identifier: 83:CF:45:96:A1:C8:E4:AF:35:41:47:8E:9A:61:9A:5D:4A:14:9B:26
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858462B8ECC06CE15FEB6614B3C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28a523a6-918e-3edc-a7ed-aad5318231c8.roa
Signing time: Tue 11 Jun 2024 01:00:24 +0000
ROA not before: Tue 11 Jun 2024 01:00:24 +0000
ROA not after: Mon 09 Sep 2024 01:00:24 +0000
asID: 15353
IP address blocks: 2001:470:1b4::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2b:8e:cc:06:ce:15:fe:b6:61:4b:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 11 01:00:24 2024 GMT
Not After : Sep 9 01:00:24 2024 GMT
Subject: CN=b77d47b7-9c56-4b9b-b280-c9c0959f5ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2a:b6:a1:b7:02:6b:58:bd:9a:3e:35:5d:44:
69:e3:94:33:2f:c9:98:69:a8:01:56:fd:db:06:40:
3d:ab:22:2a:58:1e:73:e8:3b:91:4b:f4:9d:44:68:
a8:fb:f9:13:55:f3:56:4a:ce:85:29:7d:e6:25:32:
12:71:71:b2:55:f5:05:8f:8f:df:d4:55:5d:bd:33:
60:e3:82:14:ce:4c:24:20:de:ba:b2:24:6e:78:43:
cb:7e:1f:08:95:79:c9:1c:ec:c7:c7:15:db:44:af:
ca:3c:47:26:08:38:99:b6:8e:6f:c3:37:10:37:d6:
1f:e0:ed:4b:5e:c5:c2:62:de:5c:74:f2:1e:42:40:
83:38:e2:14:19:e1:2a:56:10:26:6a:8e:47:8b:50:
50:83:e8:7a:6c:8c:fd:a6:42:51:78:c8:fa:17:27:
04:04:5e:20:82:61:6b:7b:db:be:ee:a8:7a:ac:ac:
95:af:9d:34:89:2f:ff:92:4d:4f:f5:f7:2d:55:c5:
a4:be:a2:e1:ef:fb:63:c2:f1:ef:9a:c8:cf:de:7a:
1c:6e:74:99:43:e1:1a:29:ed:7a:5d:83:6f:92:2d:
35:2e:42:a9:4c:c8:1d:75:eb:6f:b9:07:ea:21:3e:
60:82:42:ed:f4:c9:8f:9a:29:58:c5:8d:0f:76:2f:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CF:45:96:A1:C8:E4:AF:35:41:47:8E:9A:61:9A:5D:4A:14:9B:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28a523a6-918e-3edc-a7ed-aad5318231c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1b4::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:94:ee:54:b8:51:b5:85:f2:6c:76:5e:66:4d:62:41:cb:58:
e6:97:26:48:fb:0e:1a:d7:66:98:cb:d2:94:2b:0a:04:d9:09:
f5:47:7a:32:2c:57:57:06:79:80:6f:ca:f1:94:23:97:71:7b:
db:59:c2:6f:7b:f7:1f:7a:a0:a9:a0:84:e3:3a:63:3c:03:40:
b5:ec:af:91:30:e3:18:4b:19:40:7a:75:e3:74:96:94:ed:76:
4b:9e:81:f5:1e:94:c5:0c:23:6f:59:f7:5f:51:b3:ac:e3:6e:
b5:f0:26:6d:0c:ca:5a:ff:ca:12:5b:d9:69:e8:1a:99:95:c6:
4a:30:45:25:c7:83:76:1c:a3:47:cd:03:25:c6:7d:25:b2:ae:
87:f3:95:79:9d:11:3f:9d:7f:3b:7c:59:14:7a:77:d0:6a:c6:
0c:82:6b:2c:6d:a4:d5:ba:1e:49:bf:d3:ac:bf:f8:e0:57:75:
d1:b8:86:ca:58:89:b1:b0:bc:75:fc:eb:e2:6c:8b:86:af:6f:
de:68:ef:e5:be:58:eb:83:16:a6:02:02:77:2c:05:86:c3:49:
1d:b1:99:dd:3d:ea:d3:78:a0:2a:03:4b:1c:ae:0b:67:1b:89:
73:77:44:a4:16:e7:4f:f0:b6:dd:f4:c8:be:db:10:75:4f:db:
89:6b:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:45:02 2025 by rpki-client