Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/388684d9-f38d-38d6-99d1-5a340e2a5d7e.roa
File: 388684d9-f38d-38d6-99d1-5a340e2a5d7e.roa (raw, json)
Hash identifier: ljpaDjfBFEuZBMquiBcgcK0DqNcLRXKjjmd8NK9XG+k=
Subject key identifier: FC:DB:06:76:57:81:CB:6A:66:50:43:85:D1:2D:96:C9:BA:AA:8C:C8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584550772C65D7B9C83C03592C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/388684d9-f38d-38d6-99d1-5a340e2a5d7e.roa
Signing time: Sun 24 Mar 2024 13:30:52 +0000
ROA not before: Sun 24 Mar 2024 13:30:52 +0000
ROA not after: Sat 22 Jun 2024 13:30:52 +0000
asID: 142125
IP address blocks: 2001:470:2c7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:50:77:2c:65:d7:b9:c8:3c:03:59:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 24 13:30:52 2024 GMT
Not After : Jun 22 13:30:52 2024 GMT
Subject: CN=d09d3fb9-a159-4b8a-87a5-658bd1a1757c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:9e:a2:a7:12:24:86:7c:2e:f4:25:17:89:
93:a1:a3:4f:e7:6d:47:eb:f6:b7:f1:01:88:3b:28:
25:02:03:13:54:fa:5f:39:93:3a:a5:3b:28:c0:fe:
f1:7f:b4:eb:42:b0:af:2e:ed:69:ca:1d:22:2e:28:
00:d1:58:9a:cc:b4:5a:05:cd:e2:c7:e2:19:79:e9:
b5:a4:f2:c2:57:c7:bd:a6:9a:4a:b2:58:32:f2:f3:
71:aa:5d:e2:ef:1d:9c:58:da:97:4d:49:15:46:b7:
30:ff:a1:54:c2:99:7b:36:fb:65:32:29:5c:61:32:
4a:f1:88:aa:60:37:f3:7d:b8:a9:dc:a2:29:4b:f8:
9b:cd:fa:2e:70:a4:6a:60:e9:df:be:78:0a:f3:e0:
fc:1c:92:e9:f7:2c:bc:bc:fc:b5:4e:ed:f9:49:94:
cc:f9:33:01:65:e0:87:cd:5d:74:f0:38:14:1b:55:
da:d1:ca:6e:80:30:92:4b:f9:f0:0c:ce:0b:20:70:
db:2d:f0:36:88:ad:95:9b:a9:9b:eb:32:ce:ec:fb:
d8:b9:11:3a:a8:2b:3b:09:fc:13:f3:1a:1a:41:ed:
19:11:5d:62:48:61:1a:0d:cb:c5:d5:7a:c1:79:14:
7e:10:28:0f:f8:89:58:35:c2:15:80:f5:7e:e8:6f:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:06:76:57:81:CB:6A:66:50:43:85:D1:2D:96:C9:BA:AA:8C:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/388684d9-f38d-38d6-99d1-5a340e2a5d7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2c7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:41:5f:53:4d:14:99:19:7a:d3:72:17:a3:10:d4:a3:94:e9:
c7:0f:53:a1:59:6c:d5:d5:f4:96:2b:1b:79:8c:c5:78:62:a1:
53:b3:f3:de:18:7d:b9:93:45:5c:95:3b:b4:1a:16:83:31:6a:
4c:fd:92:14:dc:f1:15:76:11:f7:99:76:82:70:68:1e:3d:9b:
7f:b8:f0:f8:0d:74:d3:b3:6d:3e:97:2c:73:37:d9:b2:24:0e:
83:1b:75:a4:b4:83:9d:9f:23:5a:1e:36:c9:8a:e5:5e:48:97:
21:dc:6a:a4:98:f3:ad:bc:2d:d8:1f:63:b9:4a:f9:65:19:90:
b0:d4:26:b0:f1:ec:e7:06:17:40:1d:bc:21:00:a1:bd:90:3c:
2f:03:ee:fb:04:4f:9e:8c:a0:e2:58:5e:4d:f3:6d:01:19:03:
e1:2d:52:cc:56:d7:dc:45:ef:d6:0b:d6:a0:0a:84:83:2b:d7:
55:e9:fe:28:30:ca:8a:50:b0:a3:e8:df:8b:23:df:0f:34:ba:
d4:5e:1e:13:d5:52:8c:4e:32:a2:a1:ee:63:ab:3f:68:80:a9:
63:c2:8c:1b:57:9a:01:57:d5:df:4e:cc:90:94:63:6c:34:a3:
67:46:79:7c:be:ff:64:8b:38:1d:03:c8:e2:90:e1:bb:11:e0:
c8:1a:e8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:18 2025 by rpki-client