Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43ff18a7-254f-368e-91cc-d3a6d8c8b8ba.roa
File: 43ff18a7-254f-368e-91cc-d3a6d8c8b8ba.roa (raw, json)
Hash identifier: FP1+EZO6diAmRCU8VUEU3PUOKQJQ9x1EQzkUSjrEcfY=
Subject key identifier: ED:A5:5A:DF:AF:B7:92:EE:DB:D5:3C:58:E7:3E:23:A6:9E:F4:3F:96
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846C7F3D9BA29F4FC9A4217DC40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43ff18a7-254f-368e-91cc-d3a6d8c8b8ba.roa
Signing time: Tue 06 Aug 2024 01:30:12 +0000
ROA not before: Tue 06 Aug 2024 01:30:12 +0000
ROA not after: Mon 04 Nov 2024 02:30:12 +0000
asID: 17473
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:f3:d9:ba:29:f4:fc:9a:42:17:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 01:30:12 2024 GMT
Not After : Nov 4 02:30:12 2024 GMT
Subject: CN=a9b9855e-355e-435d-bd21-b0b6ee5b99ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:5b:ad:a8:da:00:8d:be:77:6f:48:4d:b9:
82:4e:07:6b:fb:3a:54:bb:cf:54:32:11:b2:c5:6d:
af:c8:9a:2d:c5:f5:f6:11:a1:39:f0:b5:88:4d:ed:
24:4c:84:98:03:de:00:95:be:e0:7d:1f:8b:3d:d1:
3f:c8:6a:03:12:a5:d5:82:0d:f4:c2:65:da:2b:27:
0b:73:bb:8d:44:c0:74:08:ad:38:71:30:aa:0a:40:
27:16:8b:55:fc:25:c5:17:3a:d5:b3:d9:2a:5a:14:
98:50:cd:39:cb:bb:ae:00:9b:46:3b:51:ec:4e:a4:
ab:70:00:24:a3:93:3a:96:5f:91:2d:67:bc:1f:68:
81:fe:5f:67:fa:e1:b4:f4:f7:95:e5:6f:7f:02:4b:
9a:19:54:99:eb:13:e2:fb:3e:3b:e6:dd:c4:4c:28:
df:91:79:42:f5:2b:02:e8:0e:c7:dc:69:83:02:58:
da:35:a3:b5:a1:62:35:07:b5:9e:ff:8a:46:ba:cd:
01:e4:2d:6c:29:c0:7c:27:04:ff:0d:f2:f1:b9:49:
91:8f:03:24:dc:37:32:80:d8:7a:cf:89:11:3e:d5:
7e:62:76:1b:63:c7:bd:66:a4:0b:f2:0f:e0:69:9c:
fc:d9:7f:1c:32:f0:6b:56:60:55:aa:2f:17:5f:6d:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A5:5A:DF:AF:B7:92:EE:DB:D5:3C:58:E7:3E:23:A6:9E:F4:3F:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43ff18a7-254f-368e-91cc-d3a6d8c8b8ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:8b:bd:7f:9b:dc:fe:6d:5c:1d:1b:c7:85:36:40:ad:61:29:
a0:29:2e:7d:a6:55:fd:f6:9a:bf:41:0f:4c:6f:82:75:83:34:
0d:62:b3:de:9f:ab:a5:e8:10:f7:99:9d:0d:d9:5c:db:81:12:
a5:51:99:c3:5a:1b:ee:2b:4e:a4:bb:25:c4:12:7a:91:5a:a3:
df:11:f0:fc:06:60:3a:51:0c:24:41:74:3c:31:07:16:f1:d5:
d4:b0:2c:43:fe:a8:f4:7f:42:d5:13:8a:8f:1d:48:e3:6b:4f:
c0:a9:95:99:6c:b1:b0:35:b9:d2:ac:8c:8b:5d:17:53:e7:2c:
1d:c6:8a:35:b9:c5:db:62:71:20:2a:6e:26:b3:86:68:8a:d3:
47:2c:d2:54:5f:7e:c7:65:d6:75:03:17:de:b3:40:36:ea:85:
64:6d:9b:df:e3:70:42:25:ef:f8:a4:1a:1a:82:4d:a2:b6:5f:
c4:ea:02:c6:f1:07:d3:84:10:11:15:2e:f2:cb:c5:d7:fd:2e:
f1:21:3e:28:aa:15:22:c2:e6:76:d5:4b:ba:7b:4f:96:1f:a3:
ae:3b:f0:30:1a:85:31:d8:e1:a9:9f:b5:ea:42:b7:76:9d:1c:
fa:37:da:3f:b9:d2:4e:a7:36:7c:b5:57:06:f5:fd:8f:e1:89:
78:09:50:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:54:18 2025 by rpki-client