Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30def47d-9901-3f0a-9d89-800dc75743c7.roa
File: 30def47d-9901-3f0a-9d89-800dc75743c7.roa (raw, json)
Hash identifier: HtXd/Ux4cp4qoUjTTrJYhSazB9jcP9WTBb3O5Bn8sss=
Subject key identifier: 47:FE:67:AB:13:FB:23:7E:CE:8A:9A:F1:8D:DB:2D:7D:64:84:D4:AE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858476F74E446E89DE5958B351780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30def47d-9901-3f0a-9d89-800dc75743c7.roa
Signing time: Sat 05 Oct 2024 01:30:12 +0000
ROA not before: Sat 05 Oct 2024 01:30:12 +0000
ROA not after: Fri 03 Jan 2025 02:30:12 +0000
asID: 37057
IP address blocks: 2001:470:3a1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6f:74:e4:46:e8:9d:e5:95:8b:35:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 5 01:30:12 2024 GMT
Not After : Jan 3 02:30:12 2025 GMT
Subject: CN=2dacb9d1-dfa3-4e30-bb41-0844f1cc7f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:67:27:1a:51:7e:3a:80:36:98:fd:62:06:
b3:7f:65:d0:e0:f7:44:2f:de:8a:fc:c6:e5:2e:32:
d4:92:a8:e3:49:89:a1:80:d0:61:ef:3a:79:e2:fe:
c9:c8:ca:23:36:7f:b1:44:c8:9f:bd:4c:3e:ec:be:
89:6e:8e:4d:7f:d1:b0:da:86:08:8f:7c:49:b0:a8:
89:2a:b3:c1:99:ff:66:af:97:a7:9d:c2:e0:18:f5:
47:11:b0:9d:7e:d8:ff:f2:65:a4:ca:e8:1f:c7:f9:
40:8d:00:eb:43:b1:50:e6:a8:f8:8e:1c:d8:3f:51:
f4:ee:dc:d0:dd:5c:23:e4:6e:d8:0a:fa:14:c0:dd:
43:2b:02:8e:fc:f4:a7:cb:16:2b:03:9c:c8:ed:bd:
99:84:cc:5a:fc:8b:5a:85:5a:bb:1e:f7:9a:2f:69:
c4:83:0c:91:f8:cf:92:40:5f:0c:1c:3c:a8:f7:2e:
a5:e6:a4:15:43:a9:d1:5d:35:e6:26:de:53:58:e6:
43:44:57:2c:ca:08:48:72:68:36:a8:8a:d5:c0:15:
9b:89:a8:02:d8:f9:25:f8:b9:98:a2:57:8f:f1:60:
02:fd:4d:73:b9:28:52:43:95:f4:55:86:a1:00:7e:
9c:26:12:56:60:2a:ab:ae:4d:9c:3b:01:1c:d7:74:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FE:67:AB:13:FB:23:7E:CE:8A:9A:F1:8D:DB:2D:7D:64:84:D4:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30def47d-9901-3f0a-9d89-800dc75743c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:1a:76:b0:72:5d:a3:15:dd:eb:05:35:e2:e3:35:50:d2:97:
15:8e:0d:b5:5e:d0:3a:a0:28:82:2b:f0:db:c6:29:ee:ca:c6:
51:bb:19:82:d9:cd:d5:cd:ad:f2:02:99:55:81:87:a5:c6:6e:
df:96:e4:f6:c2:ba:8c:56:9e:fd:2d:30:22:a8:ce:16:33:31:
6b:12:89:32:48:00:a8:dd:9b:67:66:b8:a2:66:52:33:2e:40:
a0:c3:f1:c8:d8:09:1f:01:9b:a9:03:78:97:3d:5d:ea:4e:33:
34:96:11:70:a8:c4:f6:28:8f:85:c7:12:d5:11:07:f1:89:db:
b0:a0:ef:82:f0:01:0d:c0:e2:bc:44:1b:3c:f7:09:ba:66:3a:
a6:6d:74:90:e3:e8:cd:40:b0:c3:81:c8:bc:f6:ca:e6:0d:41:
4b:53:47:2f:be:33:b1:07:60:f7:85:23:ab:1d:82:2f:44:eb:
11:3b:91:c4:28:25:35:79:cb:6b:60:11:ec:df:82:5b:2d:c5:
0b:0f:9d:23:7d:66:b6:e9:48:b6:43:e8:44:18:d2:01:a4:93:
71:dc:80:ab:f6:6d:d8:55:63:8b:b1:25:df:e9:d7:8d:3c:ce:
88:54:03:68:3e:e7:b5:bc:82:85:2c:2f:e3:b4:5b:ba:c5:b0:
e6:29:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:32:47 2025 by rpki-client