Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37168d2a-5795-3b05-9a13-ee31f714b4b7.roa
File: 37168d2a-5795-3b05-9a13-ee31f714b4b7.roa (raw, json)
Hash identifier: dVGkK5633l2BqN2ilzkN2PXSi2uLNc7hkn0lc0cQ6qg=
Subject key identifier: B1:CB:93:D9:94:98:21:1B:33:0D:18:7D:82:44:F7:8E:15:57:C8:0B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B74913A689728D0011C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37168d2a-5795-3b05-9a13-ee31f714b4b7.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 48347
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:74:91:3a:68:97:28:d0:01:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=ace8f3e3-fbf4-4865-b03b-551a97976d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:e9:4b:7c:1b:88:bd:b6:98:de:c8:4e:95:
15:c9:36:ca:aa:b0:16:4a:3b:33:48:42:71:38:34:
83:ec:78:70:da:36:5b:a1:c4:e3:44:36:59:aa:b1:
96:ae:53:d7:40:0a:a5:cf:6a:d0:b7:0f:3a:44:8c:
75:7a:47:18:a2:5e:cd:07:28:16:b2:8c:55:7a:55:
3e:ed:b4:59:c4:6a:86:24:23:6e:e6:0e:78:20:da:
78:bb:a4:22:82:b9:95:76:96:b7:64:4b:15:f9:57:
da:91:eb:19:cc:1e:ae:63:98:48:ee:c9:b0:7f:66:
8e:1a:35:41:9e:1b:ce:05:b3:1f:31:71:42:ad:8a:
e2:cc:04:22:13:0e:c7:ec:2c:33:0f:14:77:55:3e:
31:23:ed:88:f0:99:33:a6:b2:2c:5e:36:40:55:21:
d8:23:b8:7c:0f:e5:42:58:0e:e1:b3:63:b7:ea:ae:
da:74:e8:b7:33:34:fd:9e:4c:64:13:55:ae:63:d0:
f2:bd:24:b6:44:2d:a9:d5:cb:d6:b3:7c:98:7d:57:
09:21:ce:66:aa:57:6a:53:05:be:64:fe:67:38:73:
45:80:5a:16:1a:a9:21:02:fd:bd:63:52:17:01:56:
0d:55:11:69:b1:0a:0f:78:ff:d3:b3:30:6f:af:55:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CB:93:D9:94:98:21:1B:33:0D:18:7D:82:44:F7:8E:15:57:C8:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37168d2a-5795-3b05-9a13-ee31f714b4b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:b1:86:71:08:ce:5b:f6:f3:b1:82:ed:b5:d0:3c:2c:05:05:
11:f9:8b:49:07:83:39:7d:cf:57:68:90:be:0c:cb:c0:b7:b8:
48:06:83:97:19:54:c5:81:21:b9:59:ca:39:a6:c3:ad:57:1a:
f9:55:69:97:c0:81:9e:b2:5a:ff:21:01:d9:2d:5c:b0:99:a1:
cc:f7:0e:f3:04:ad:2b:0a:1a:06:45:29:bb:6c:7b:35:2b:c9:
fa:81:13:18:4b:72:06:e8:7b:b6:d1:62:db:da:f2:4c:89:0f:
f3:8c:50:25:9c:f3:d2:a2:98:30:fe:ca:3d:f3:aa:4b:60:e8:
0c:68:96:a1:92:10:cf:ae:ce:1f:ec:26:db:03:db:c0:5a:49:
74:63:18:15:5f:53:46:2f:3d:7e:10:7b:69:cd:be:97:bc:43:
a0:f0:fb:b8:ac:f2:a4:5c:a5:eb:72:5a:64:e5:00:6a:33:f3:
44:f9:59:e3:29:ea:72:42:43:1d:55:84:00:f2:2a:84:e3:d0:
5d:d4:1c:66:30:ab:f5:ec:27:3e:25:58:85:38:35:fe:89:8f:
a8:bd:d8:22:57:bd:54:24:0a:fa:fb:28:95:02:a1:03:af:5a:
88:d5:f9:59:10:69:12:82:dc:b1:c4:bd:d4:61:1a:b4:4a:9a:
69:18:c1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:02 2025 by rpki-client