Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3516518f-9bac-3211-b148-0a02d5d5f123.roa
File: 3516518f-9bac-3211-b148-0a02d5d5f123.roa (raw, json)
Hash identifier: gqlszQ7FRN0CuBqRHOP/FW+ybal6ZHckvZoQvqnyUf8=
Subject key identifier: FC:0F:86:F0:69:EB:43:24:93:CD:6A:2F:FB:D8:D8:A5:AE:5B:0D:BF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B5D857FD85EF536FDB520
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3516518f-9bac-3211-b148-0a02d5d5f123.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 142125
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:5d:85:7f:d8:5e:f5:36:fd:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=095ebf9e-549d-475c-806c-dd6bceb4a586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:91:9b:d4:d1:a5:a4:55:8e:70:22:27:c3:2a:
cf:98:22:c2:9b:4b:2e:a3:66:4d:1b:18:27:f0:ed:
86:a2:53:c5:53:84:98:6f:cb:ff:3e:21:2a:05:4d:
03:65:ca:5e:0e:35:b9:63:13:30:18:23:4f:96:3e:
f6:72:54:43:95:64:91:9f:ed:57:07:c2:0b:ff:ba:
58:d4:0a:cf:fa:f2:e4:78:7e:f4:89:c7:67:59:54:
77:ba:23:61:28:32:e6:7e:7e:34:9c:51:f4:73:d1:
09:7d:93:81:aa:20:f1:b9:dd:3c:d8:37:11:d3:de:
f7:f1:3a:8a:86:dc:ee:76:a8:c0:8d:04:38:a4:9f:
e2:dc:78:95:68:ed:f6:d5:3d:1d:c2:40:70:0e:7a:
b8:b6:73:08:54:53:f5:28:9e:94:a3:86:75:d3:85:
ff:7e:e1:f7:b6:6d:3e:00:8a:e9:92:3b:60:d0:1e:
f8:2f:7f:91:c0:b9:61:76:f3:9e:0c:50:ec:3a:47:
cf:44:1d:64:32:4f:84:4b:15:61:ee:a3:44:bc:fd:
2c:a4:45:1b:f7:7e:59:4f:9f:f2:76:e8:6e:53:53:
58:c2:50:a3:04:d3:17:c0:75:9f:70:d8:14:3c:43:
02:4a:41:01:72:37:d1:9d:69:0d:2d:42:8d:8f:7b:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0F:86:F0:69:EB:43:24:93:CD:6A:2F:FB:D8:D8:A5:AE:5B:0D:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3516518f-9bac-3211-b148-0a02d5d5f123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:f6:6d:dc:3e:2f:b3:ff:70:35:74:64:84:94:ae:32:fc:be:
d6:6a:cb:41:e9:35:c1:af:97:97:9b:0c:64:77:e4:8d:e9:8c:
71:2e:a0:8b:ec:fd:bd:8c:dc:c5:e8:0d:0a:d0:f7:ba:69:56:
7a:f1:22:7c:ac:a0:ab:de:3d:54:58:ed:09:18:fa:da:24:17:
06:59:27:ca:16:bd:6a:ea:1b:47:aa:b5:09:94:42:ca:8b:53:
bc:31:48:37:9d:0d:ef:e1:c2:fe:99:f1:62:35:33:d3:e7:4e:
c5:10:05:53:68:7a:57:53:f3:1c:fc:92:5b:e9:99:fe:49:65:
7c:51:1e:c4:03:4a:43:fb:12:ab:05:3f:87:87:70:b5:3b:af:
8a:71:05:ff:f2:24:4e:0e:41:48:d5:f4:a7:82:d3:d8:d6:93:
4a:34:3d:92:22:19:b0:ea:bf:bc:d1:14:89:0c:e8:92:41:ae:
6f:10:54:55:71:c1:54:61:84:17:da:48:3c:41:19:fe:67:93:
02:50:7d:ca:4c:25:fa:24:bc:75:a6:84:24:82:59:a3:03:e9:
fe:77:a8:b2:0b:37:ff:90:2b:21:50:9a:4d:63:54:48:a6:6f:
a6:d5:4f:a9:37:dc:25:c1:0e:31:ef:14:a0:00:03:0e:a3:1e:
c2:d8:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:32 2025 by rpki-client