Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33d751ae-332b-3078-9d15-f636265b1d11.roa
File: 33d751ae-332b-3078-9d15-f636265b1d11.roa (raw, json)
Hash identifier: Tacdc5vyj3P8Sxebi0O6z4Vr7k/pmgwTAEocEWhlcl0=
Subject key identifier: 4D:2A:CC:44:AE:D5:1E:37:D9:81:B3:09:40:9B:D3:23:EF:1B:F4:5A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846169ED1EE5A79A12A54FE0200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33d751ae-332b-3078-9d15-f636265b1d11.roa
Signing time: Mon 03 Jun 2024 13:00:36 +0000
ROA not before: Mon 03 Jun 2024 13:00:36 +0000
ROA not after: Sun 01 Sep 2024 13:00:36 +0000
asID: 132046
IP address blocks: 2001:470:25e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:16:9e:d1:ee:5a:79:a1:2a:54:fe:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 3 13:00:36 2024 GMT
Not After : Sep 1 13:00:36 2024 GMT
Subject: CN=8bfafd46-1c5e-49ea-bc10-6677d981eb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:93:40:e8:fb:3c:ba:52:c2:bf:fa:fa:12:be:
36:ba:a0:57:eb:ca:ac:8f:2d:d7:56:72:e1:d7:97:
77:24:34:d9:36:3a:b1:d0:f5:54:1c:f2:8d:71:c5:
e4:28:a2:ed:67:8f:86:fa:1e:04:dd:35:92:f9:be:
7e:43:9f:60:40:8b:1c:74:5f:28:4a:b7:23:0b:1e:
9e:8f:aa:f0:b1:f8:43:53:24:d7:58:c3:7a:50:56:
f3:bb:6c:42:02:a7:df:75:94:a2:53:ca:f1:8c:19:
97:7f:d2:7e:78:b9:f4:9a:7f:fe:ce:e8:32:48:a5:
96:29:c6:07:f2:01:93:e8:6c:e1:f2:3a:3d:9d:4a:
fb:76:e3:7d:09:fb:aa:9a:4b:c9:95:d0:56:a4:15:
a9:93:b0:f5:3a:01:6b:90:83:e2:02:7f:13:e9:c2:
47:b3:1f:e7:74:96:ea:32:b8:f0:22:31:71:28:e6:
7d:6d:94:2b:9e:41:d6:74:c6:29:cf:93:eb:b8:a7:
61:d8:c5:a6:87:fa:5f:3b:23:61:9f:a0:5f:31:e4:
8d:41:10:61:cd:6d:be:07:0d:ad:bb:8f:2a:ca:44:
71:a0:ca:2b:0f:39:ef:22:7c:a4:c7:1b:89:c9:51:
ab:ad:af:38:d6:49:ed:6a:e8:46:2c:9a:3d:44:3f:
19:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2A:CC:44:AE:D5:1E:37:D9:81:B3:09:40:9B:D3:23:EF:1B:F4:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33d751ae-332b-3078-9d15-f636265b1d11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:25e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:f4:28:2a:47:d3:83:ff:c8:12:99:1d:6a:22:52:51:ae:0f:
22:81:20:63:85:35:03:4e:94:fe:20:a6:0e:65:33:8c:f4:e4:
e3:ef:6f:a8:48:bc:00:2c:27:3e:83:e3:55:08:34:25:c3:6c:
06:9f:67:98:a3:c2:84:58:03:f3:d4:f6:27:03:7c:81:d3:c2:
03:61:20:28:8c:b3:a4:41:e4:a6:b4:f6:d2:37:b2:43:d1:dd:
86:af:8d:10:2c:45:72:de:80:cc:d2:e4:92:1f:ef:fc:c5:4e:
ae:e3:0e:7e:cb:20:f0:18:21:b4:a7:08:f2:06:b7:82:ba:61:
f9:97:64:9a:28:f5:5b:c4:b5:38:f1:25:86:11:c7:28:f5:b6:
f7:45:76:39:bc:72:fe:40:bc:a8:77:7e:59:65:b0:60:7b:91:
5e:4d:3c:6e:cb:1c:3a:fa:7d:49:12:2f:48:56:40:06:5a:9c:
e8:61:02:86:1c:9e:b5:b4:dd:83:35:ce:a6:b3:8a:bc:26:f9:
5c:e9:e6:5f:e0:31:ed:4f:48:0b:68:d5:12:e5:8c:2b:e5:64:
0d:d5:05:25:3e:6f:36:5d:bc:20:a0:33:48:ab:53:ba:e7:59:
9c:06:27:b7:e6:d5:48:3a:51:1b:9d:ef:e5:3f:bb:f4:4f:1f:
3e:ca:44:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:26:10 2025 by rpki-client