Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3143c56a-1873-3b8c-88c2-df844f5b4622.roa
File: 3143c56a-1873-3b8c-88c2-df844f5b4622.roa (raw, json)
Hash identifier: jwav9dQBsCViF8r/G52tiWMLU2ODQUT8cxK0SXQiPSQ=
Subject key identifier: 47:CE:CD:A0:F7:2B:88:44:08:02:D7:FC:E9:40:D6:F1:05:9D:50:F5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845F51E8BF149B12507DED6EF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3143c56a-1873-3b8c-88c2-df844f5b4622.roa
Signing time: Wed 22 May 2024 13:00:33 +0000
ROA not before: Wed 22 May 2024 13:00:33 +0000
ROA not after: Tue 20 Aug 2024 13:00:33 +0000
asID: 16637
IP address blocks: 2001:470:2ad::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f5:1e:8b:f1:49:b1:25:07:de:d6:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 22 13:00:33 2024 GMT
Not After : Aug 20 13:00:33 2024 GMT
Subject: CN=d13ff8aa-43b7-4a13-ad09-ce6aeeccf468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:b0:3a:c0:e7:4e:1d:d1:50:06:47:5c:9f:
16:b9:da:c6:17:b4:c9:d7:0b:f8:1b:b5:5b:33:6d:
a8:34:92:26:2c:b1:3c:7e:4d:78:39:78:55:26:95:
0e:ef:29:44:2c:67:d4:5b:dc:8b:48:b0:40:b8:d4:
af:03:3f:c7:0c:bc:c4:44:df:01:76:bd:fa:68:7d:
c4:57:10:a8:13:97:36:d9:f3:89:32:23:dc:ee:fc:
6e:24:d8:2f:8f:2f:85:4e:71:c1:c9:aa:dc:b2:25:
5d:32:40:5b:8e:cf:05:5b:6f:9a:41:44:1f:dd:12:
33:bb:c3:f7:8b:f8:e3:f4:d5:d5:01:26:94:dc:fe:
20:13:d1:6d:cc:92:d2:fe:84:fe:ec:ec:30:0b:7a:
98:6b:58:5f:45:dc:d5:04:79:fa:27:aa:a8:63:ba:
21:6e:6d:34:f9:0f:a9:1e:84:74:ab:58:ec:fc:bf:
49:b7:f1:35:eb:26:97:0b:01:dc:e7:38:8d:dd:0f:
e3:3c:2d:75:e5:a5:29:8d:de:0b:d6:9d:c1:09:74:
06:51:24:e0:96:71:47:31:9e:2f:23:3f:4f:bb:54:
b6:26:d2:78:ca:f1:8c:a6:31:2b:45:8d:a4:ba:75:
18:df:f9:64:f7:02:04:64:1a:b1:6c:fa:12:70:ca:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CE:CD:A0:F7:2B:88:44:08:02:D7:FC:E9:40:D6:F1:05:9D:50:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3143c56a-1873-3b8c-88c2-df844f5b4622.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ad::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:ca:f9:d4:9c:62:72:c9:cc:2f:23:4a:b0:1b:f4:16:01:76:
66:77:87:2a:d7:97:e7:bd:ba:c0:29:6b:41:02:6b:9a:9a:4e:
13:2e:64:84:ff:82:5e:b7:bc:d8:9a:ed:c3:dd:68:39:3e:66:
98:15:70:c9:67:d4:aa:14:8b:42:53:a0:5a:05:0e:19:df:bc:
eb:10:05:af:a7:7f:7c:69:47:e4:b6:9b:2c:bc:e9:d3:b1:23:
3c:d0:fd:70:10:3c:4c:44:cb:72:64:ec:36:7c:3c:a9:02:71:
22:be:ec:a8:ea:9a:8e:27:80:af:34:56:10:6d:b8:79:71:cb:
9b:a7:3a:5a:7a:96:60:7c:4a:fd:8e:d6:ca:ba:e2:2b:05:3f:
c3:3b:6b:ec:23:d3:bc:e0:da:b7:b7:06:00:77:2e:0f:98:18:
eb:77:a2:1a:5c:1b:c6:98:3a:64:78:a6:70:e3:13:3f:52:de:
25:c2:4d:78:5c:fb:00:80:32:7a:cc:50:7a:00:0d:52:14:af:
96:d1:84:99:df:a9:db:f4:36:f0:22:5e:ed:e8:b2:b9:0c:5f:
91:10:78:3d:ad:40:53:29:bc:b2:80:60:c2:32:cb:e6:cd:e9:
2e:ba:bc:0f:23:12:37:42:ce:f7:01:16:3e:4c:02:1d:9a:86:
80:fc:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:37 2025 by rpki-client