Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3abcdb63-40c1-3010-95d2-5ff102703a0b.roa
File: 3abcdb63-40c1-3010-95d2-5ff102703a0b.roa (raw, json)
Hash identifier: NMZ2soS5OfmCADRGncjBEO0Ci5Fd8CZZkRhCSlfVzQU=
Subject key identifier: 79:8A:D1:69:DE:DB:31:87:5B:0B:40:36:B3:55:3F:E4:6F:1B:FC:BF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847B80AA5A04B5090772944BE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3abcdb63-40c1-3010-95d2-5ff102703a0b.roa
Signing time: Thu 31 Oct 2024 01:30:08 +0000
ROA not before: Thu 31 Oct 2024 01:30:08 +0000
ROA not after: Wed 29 Jan 2025 02:30:08 +0000
asID: 51259
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:b8:0a:a5:a0:4b:50:90:77:29:44:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 31 01:30:08 2024 GMT
Not After : Jan 29 02:30:08 2025 GMT
Subject: CN=d2a9aa6b-99eb-4790-8155-2975e1204869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:bf:d3:d0:a4:49:f1:55:e6:de:f6:56:f7:
6e:fd:b9:7e:bd:37:30:e9:6c:18:e2:47:93:da:bf:
21:15:f1:a1:87:e9:09:89:40:8b:b9:c9:fa:c7:97:
a5:53:60:99:60:67:c3:f5:89:0e:dc:42:1c:7e:92:
17:d1:f7:b0:26:a8:09:e1:56:5e:17:f4:13:94:60:
f8:65:ce:83:1c:e6:a7:10:47:1c:4c:f8:04:b5:c6:
72:36:40:2a:b3:f5:28:eb:33:fc:56:d0:78:72:5d:
83:c1:fe:42:66:84:e3:17:a3:0b:91:0c:8d:62:ce:
7f:32:b5:e6:f1:ce:20:e8:2f:37:98:96:f4:32:62:
c4:a5:65:b7:e4:63:4f:f4:43:91:15:5a:2a:3b:0c:
d8:28:a5:42:96:ca:eb:35:8e:ff:df:bc:fa:10:be:
7a:3a:8a:80:6c:59:7f:4a:e4:c6:0e:d2:80:27:94:
a1:49:3b:c7:42:9a:55:c0:8d:fa:b5:60:aa:ea:ae:
54:f5:7f:66:b5:8d:87:aa:68:7d:a6:78:93:20:44:
58:62:86:bf:34:67:69:1a:c6:70:0d:03:3f:3d:2f:
1e:16:bd:4d:6d:13:77:c1:21:22:53:28:58:27:f5:
eb:a9:6e:7f:b8:e3:73:a4:69:43:30:8c:9a:95:02:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8A:D1:69:DE:DB:31:87:5B:0B:40:36:B3:55:3F:E4:6F:1B:FC:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3abcdb63-40c1-3010-95d2-5ff102703a0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:3c:b6:96:87:b7:8a:30:73:25:8b:a2:b8:ed:c5:94:73:c9:
75:8e:b8:9d:22:ae:0e:8b:4e:8e:f9:18:1f:42:87:95:f6:9e:
26:2b:70:51:ab:58:30:6f:37:eb:06:80:20:1f:f8:89:a3:67:
b3:ab:62:82:4d:97:cc:3e:38:cd:e4:19:7b:6c:d9:8e:f7:7c:
47:d2:2e:39:a1:94:b9:c5:4b:9e:91:79:5b:4c:03:d3:59:03:
23:dd:d4:79:44:aa:bb:dd:c1:4f:db:8f:2c:b9:97:45:cf:91:
39:1f:25:3f:d7:ff:2e:b1:e1:b1:03:ea:9f:40:4b:55:d0:bd:
46:6c:b7:ac:52:cf:dd:82:24:fc:0f:ee:e8:97:16:4f:1b:6c:
90:82:6a:a5:8d:eb:0c:e3:5a:3e:35:32:41:fb:04:bc:8e:62:
8c:cf:32:cb:89:40:a5:1a:9a:4f:0a:14:e4:b8:33:2b:31:58:
f6:0f:ff:e6:7e:c1:e4:d5:71:1b:76:94:97:67:11:47:45:14:
97:cd:c7:85:24:33:1b:bf:bf:1e:6d:97:77:d6:86:dc:51:df:
79:b2:b2:3e:37:09:b9:91:b0:09:8d:08:1f:fc:0f:f5:a1:8a:
64:04:a0:23:37:78:94:71:98:a9:12:33:7a:8e:ba:51:cc:91:
7b:d2:cb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:55:03 2025 by rpki-client