Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d16a6ee-38b3-3fd3-9bcb-1fd168253e52.roa
File: 3d16a6ee-38b3-3fd3-9bcb-1fd168253e52.roa (raw, json)
Hash identifier: LILoZxzt9SpLi4xzPiZV92F+ZTf8OOMLwFupb0R2mtc=
Subject key identifier: B0:F7:DE:B8:60:B8:06:39:43:20:1D:0B:5B:77:E8:F1:AE:20:78:EF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858476F74E37D392F37E764E1D940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d16a6ee-38b3-3fd3-9bcb-1fd168253e52.roa
Signing time: Sat 05 Oct 2024 01:30:12 +0000
ROA not before: Sat 05 Oct 2024 01:30:12 +0000
ROA not after: Fri 03 Jan 2025 02:30:12 +0000
asID: 395945
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6f:74:e3:7d:39:2f:37:e7:64:e1:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 5 01:30:12 2024 GMT
Not After : Jan 3 02:30:12 2025 GMT
Subject: CN=5e6509f8-5f1b-4503-98ca-84a82cb1f451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:ce:26:28:7e:fb:a2:82:20:97:9f:d6:89:
48:0a:88:75:a3:42:88:3f:8b:a7:32:7f:2a:2b:15:
63:3c:9a:69:25:60:3e:08:1d:a9:39:1f:e9:a9:6e:
59:aa:6e:62:52:0e:e5:c7:cb:a4:cd:83:8c:db:c5:
56:a9:af:e6:38:16:b7:c4:81:98:7f:d1:31:97:a3:
3c:7d:28:75:4a:7e:a7:dc:2c:37:6e:ff:7f:3f:5a:
05:af:87:5f:e8:1b:1f:61:6a:34:8e:ef:69:cd:6c:
19:34:d1:1f:6d:e2:90:af:17:59:7b:92:f6:6f:97:
8a:f4:66:4c:c0:86:f0:82:ad:6e:35:e5:73:d5:2e:
d0:a6:f8:c3:53:0e:48:6d:04:9d:7b:df:86:d8:8d:
56:d3:da:7f:bb:76:24:74:2d:05:91:92:d5:f4:78:
6e:38:c0:be:d0:40:7a:1d:20:ac:f2:b2:e5:87:c0:
f5:04:dc:69:8e:d9:02:64:ed:24:05:f2:ab:a5:97:
5f:48:90:aa:ea:27:08:65:3a:fd:22:51:2e:4b:b1:
a8:21:95:fa:8e:da:ed:b3:fc:33:24:b1:58:db:12:
53:0a:0a:dc:24:44:e2:34:77:52:e0:5f:a6:e5:90:
38:17:e3:19:be:d1:4f:15:5c:60:75:f8:1a:25:fe:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F7:DE:B8:60:B8:06:39:43:20:1D:0B:5B:77:E8:F1:AE:20:78:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d16a6ee-38b3-3fd3-9bcb-1fd168253e52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:3a:f4:4a:ad:b4:c6:b0:4f:24:0d:c7:ba:1b:7c:c1:a1:0b:
6f:ad:32:18:0c:90:e6:c3:60:7b:04:7e:f5:e1:5c:74:2f:24:
30:5a:e1:05:28:64:64:bf:cf:95:0a:4b:3f:ef:d1:38:ae:b7:
0e:dd:a9:32:30:d2:33:64:07:13:4f:2f:42:d9:e9:fe:ff:fe:
b8:8f:f1:ee:31:cc:80:cf:a5:c8:b0:5a:8f:fa:6c:fe:3c:6f:
83:31:d5:6f:5e:27:49:ec:f1:ce:8e:41:10:60:61:7e:97:78:
13:57:a7:f1:fb:42:0e:ce:96:b5:a7:68:6e:c9:c1:bf:50:81:
17:ab:2c:88:3b:7c:87:44:b3:60:29:cf:85:5a:69:0c:d2:83:
b6:75:e8:25:f3:cf:43:ab:7b:0d:29:e6:e7:ae:66:93:e7:6b:
eb:c0:4c:97:11:bc:48:ee:29:d8:0e:2e:aa:3d:d7:9f:05:52:
b5:34:fd:e9:0a:a9:92:9e:53:5d:6c:da:91:e1:8f:14:a2:a3:
3e:58:dd:1a:ac:b4:f2:0c:62:0f:a1:e6:ce:b2:bc:e9:47:f2:
e3:c1:f2:48:fe:3e:12:f6:cf:fc:70:b7:c8:4e:77:af:c0:d6:
d9:05:c1:28:a0:f9:74:96:f8:2e:d5:36:d2:b7:54:e4:94:c2:
a4:bc:74:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:43 2025 by rpki-client