Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b2af871-bf75-3520-96f9-907ce9cdc0d6.roa
File: 3b2af871-bf75-3520-96f9-907ce9cdc0d6.roa (raw, json)
Hash identifier: Oce1q5IIIfPBEUy3N3WK9fPNer80Iq/6CajyGUZkRL0=
Subject key identifier: 49:1A:0E:E1:0B:76:F1:7F:F0:04:C5:AF:76:0E:77:BC:90:DD:14:0E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845F253ECC00486028A91B5E95E
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b2af871-bf75-3520-96f9-907ce9cdc0d6.roa
Signing time: Tue 21 May 2024 13:00:34 +0000
ROA not before: Tue 21 May 2024 13:00:34 +0000
ROA not after: Mon 19 Aug 2024 13:00:34 +0000
asID: 396003
IP address blocks: 2001:470:289::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f2:53:ec:c0:04:86:02:8a:91:b5:e9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 21 13:00:34 2024 GMT
Not After : Aug 19 13:00:34 2024 GMT
Subject: CN=f2062b90-7794-4dbe-b303-3b4e108977af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:09:a3:91:18:2a:7f:83:14:64:6a:ac:5b:
8b:38:27:ef:62:f2:de:f3:d9:cf:db:56:58:d3:d5:
00:c0:61:d2:74:b8:8d:0f:27:db:af:1b:2f:da:ed:
0e:38:25:ea:69:c7:94:e5:d4:a0:c2:43:94:f5:68:
c9:d3:8c:17:f0:b4:e5:64:b4:ab:d5:55:6a:f1:38:
87:c3:c6:c1:af:12:10:8d:c6:81:66:a9:c4:a0:e0:
fa:db:d4:15:26:6a:04:d0:5f:c2:e5:2b:4c:49:16:
22:2f:32:04:2a:1a:a3:70:10:03:6d:cd:10:a4:bb:
ad:02:58:90:6d:05:ce:15:0b:c1:95:b9:c7:35:c6:
0e:d5:50:19:89:fb:5c:7e:e2:67:ea:38:b9:35:36:
94:e8:c8:ee:a6:08:02:0d:71:83:9c:66:03:9b:c3:
5b:9d:f9:f7:48:d3:06:5d:0c:00:b4:b1:b5:d1:e4:
b0:20:d0:9f:37:8b:6a:05:43:bd:0b:a9:d3:82:5f:
b2:47:49:5e:e5:8c:cc:3e:fa:4a:83:94:6c:8d:a3:
86:ff:e9:e2:87:55:b1:82:a3:1e:df:50:53:ca:24:
1b:b5:23:e4:1f:b1:5c:ed:61:e5:ae:66:6c:2a:50:
19:1a:ac:c7:b3:24:16:c3:b8:6a:50:97:b7:8c:58:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1A:0E:E1:0B:76:F1:7F:F0:04:C5:AF:76:0E:77:BC:90:DD:14:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b2af871-bf75-3520-96f9-907ce9cdc0d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:289::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:11:a5:b8:75:cf:c7:57:f8:93:d1:ad:69:7e:27:cb:51:f9:
c8:39:59:49:03:c9:ef:f9:04:26:07:1c:bc:9a:c6:a7:05:4d:
66:f0:82:ae:d8:60:26:bb:1a:59:b3:ae:67:a6:3b:72:2d:b6:
5a:fa:75:fd:55:22:72:4a:ad:b5:4a:d5:9f:e2:22:d5:51:3f:
f1:55:7b:24:46:c8:1b:54:0c:25:1f:a3:7c:19:0e:3c:ea:9a:
fd:e3:50:0d:6b:05:37:e6:77:01:e6:cf:c2:09:20:53:5d:ff:
a4:15:f5:db:21:99:d6:2a:b2:95:8c:e1:9b:47:99:df:23:69:
4c:36:00:dc:d5:dc:a3:96:c8:c3:84:08:ca:b2:34:6d:da:16:
b8:51:58:d1:e5:b2:90:66:cb:17:5b:ef:ee:42:6b:13:14:96:
49:2c:78:1d:07:a3:8b:54:c5:53:b5:a0:13:14:8f:15:58:ed:
a1:f4:a9:15:1b:70:be:e3:e2:76:1d:8a:d0:bd:57:a6:f3:56:
a4:26:a0:06:ac:b3:ad:20:0a:f0:ae:f6:83:bf:bf:b8:97:24:
64:08:49:d8:fc:80:c4:dc:36:1f:43:98:c9:bd:3e:98:37:de:
85:c6:4f:48:01:d8:8a:6d:c3:ca:aa:61:06:58:36:9b:6c:07:
32:85:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:26:25 2025 by rpki-client