Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4307ff00-9aa6-3c79-9239-ff5a3480f3c0.roa
File: 4307ff00-9aa6-3c79-9239-ff5a3480f3c0.roa (raw, json)
Hash identifier: VRBhYuD682PN00Xz5UkDNW3mjLhBV7BCvpUTqkKKr3Y=
Subject key identifier: 05:D7:1F:B7:05:07:FB:52:3E:4A:40:2D:2D:6A:F3:B0:21:7C:41:BF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584635634CA187FC6382A2F562A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4307ff00-9aa6-3c79-9239-ff5a3480f3c0.roa
Signing time: Fri 14 Jun 2024 13:30:56 +0000
ROA not before: Fri 14 Jun 2024 13:30:56 +0000
ROA not after: Thu 12 Sep 2024 13:30:56 +0000
asID: 202673
IP address blocks: 2001:470:31a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:35:63:4c:a1:87:fc:63:82:a2:f5:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 14 13:30:56 2024 GMT
Not After : Sep 12 13:30:56 2024 GMT
Subject: CN=b4a91447-15a5-4d82-b07e-d8f786e8f857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:9b:f0:d1:06:69:98:1a:f4:16:90:fb:c6:
91:aa:10:28:fb:81:f4:83:00:92:75:31:d1:1d:9e:
99:94:32:9d:d3:fd:a2:c0:63:38:26:1a:e7:fb:71:
38:28:72:31:6a:a0:ee:cd:f6:27:64:11:35:e6:a1:
a9:90:31:d6:11:f6:8f:f9:e3:1f:b3:33:58:88:1a:
1b:7b:42:ec:c7:d8:b2:0a:68:06:3c:8e:e8:bf:54:
4c:00:1b:a3:dd:46:00:da:28:99:13:fc:73:b3:c5:
74:e9:c3:84:f1:34:13:b6:37:6a:1f:00:4d:c9:87:
de:fe:6d:8e:f1:82:12:0c:f4:70:bc:bc:ef:a1:f6:
c9:8c:d7:f1:e4:cd:6c:0f:b4:31:0b:8f:f0:24:8a:
a4:fe:d4:bb:e4:3c:0a:ad:62:f6:6e:31:9d:98:7a:
0f:18:87:b0:79:df:34:1d:c2:8a:c8:fd:a5:05:4a:
c1:53:da:e8:a9:10:ad:91:f7:68:4f:fe:ea:e4:59:
4f:c5:47:37:a8:af:b6:e3:18:cc:68:af:86:5e:46:
ce:31:1e:08:47:55:b8:52:ca:9b:65:c6:62:b7:18:
90:34:fb:af:e8:1d:29:1a:70:4a:1a:c7:79:0f:87:
84:57:69:2f:4e:b9:2d:19:3c:c9:59:27:d9:86:fe:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D7:1F:B7:05:07:FB:52:3E:4A:40:2D:2D:6A:F3:B0:21:7C:41:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4307ff00-9aa6-3c79-9239-ff5a3480f3c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:31a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:5f:59:ec:bb:0c:b5:ab:9d:ca:b6:19:02:a3:83:64:75:59:
07:0d:73:94:a5:0e:8a:88:d9:3d:32:4f:43:b3:2a:92:86:84:
73:a6:e3:ed:73:d0:56:7b:08:2c:50:be:04:0b:37:27:23:5d:
37:d1:58:f6:01:f9:2e:96:c3:22:9e:cf:25:c7:c5:6f:ff:31:
ea:8a:d6:c0:47:59:97:fe:29:d0:e8:42:93:9f:01:df:4e:ce:
75:b1:a4:46:21:60:03:4c:cf:4d:16:7b:74:e1:eb:23:1d:d0:
ea:a2:ad:b6:3d:a4:b9:f4:1b:c4:68:53:be:1d:00:14:1f:b0:
49:6f:28:3d:89:94:68:b9:3f:31:29:09:3d:e5:e2:43:85:d1:
81:f6:af:77:77:ec:a1:6b:31:ee:7d:02:ba:e0:3a:15:2b:f4:
71:e2:fc:fd:7c:0f:ad:3f:f8:df:49:25:11:b9:2e:ca:07:fb:
80:bd:e1:67:f6:8c:87:12:82:d4:37:08:71:ed:d7:7c:1d:a3:
67:60:3b:bb:88:27:64:c8:0d:88:7a:b4:ad:12:d5:41:96:f0:
06:25:60:a2:32:8c:3c:a6:36:64:2a:cd:ee:db:e2:ba:b1:20:
52:1d:57:0d:ad:3a:9f:5e:ab:e6:44:2a:fa:1c:70:ab:08:23:
95:51:58:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:59:13 2025 by rpki-client