Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44f4385f-c6de-3739-9741-6b6d2d22c00b.roa
File: 44f4385f-c6de-3739-9741-6b6d2d22c00b.roa (raw, json)
Hash identifier: 6AevEChtEyBnlNgXY8/wjcWZeYHb0pUyzub/zfYQZA4=
Subject key identifier: 6A:D7:24:BA:4D:BC:B8:C5:22:08:C9:94:5D:A8:DB:63:9C:80:80:3B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845AB3261C783F88020F34298A8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44f4385f-c6de-3739-9741-6b6d2d22c00b.roa
Signing time: Fri 26 Apr 2024 01:30:49 +0000
ROA not before: Fri 26 Apr 2024 01:30:49 +0000
ROA not after: Thu 25 Jul 2024 01:30:49 +0000
asID: 22299
IP address blocks: 2001:470:2eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:ab:32:61:c7:83:f8:80:20:f3:42:98:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 26 01:30:49 2024 GMT
Not After : Jul 25 01:30:49 2024 GMT
Subject: CN=9528ca2d-fe9a-4310-8e68-8235c4b3bf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:b4:ec:77:bd:9a:2e:34:97:f5:1d:d3:e6:
58:14:7d:68:fc:70:58:0f:2e:25:47:df:de:8f:28:
cc:d6:d6:20:3f:87:2d:be:ed:a2:43:df:86:25:c0:
5e:69:06:b9:2c:7d:90:57:cf:73:62:f7:5c:f2:0d:
95:83:44:e3:89:d9:e0:17:f6:52:94:87:e2:39:ff:
4e:9f:af:dc:0f:3e:d5:b4:32:cc:f6:58:b8:cb:05:
b8:67:07:b2:de:55:bb:de:9d:c3:21:1f:36:25:14:
7d:4e:84:ca:ba:bc:67:37:f1:46:49:1b:e1:ea:88:
05:30:ff:8a:18:a8:6b:ff:94:0e:ff:31:e6:dd:1c:
f8:81:25:ce:41:ed:f4:8c:6a:74:70:ad:e2:9b:50:
9f:25:cf:7b:f6:53:6d:e8:ee:6e:93:06:9b:6f:af:
de:3a:f6:48:ef:eb:5e:22:9c:bb:3a:cc:75:92:e6:
0d:bd:5b:67:79:08:9c:bc:f0:59:8f:d8:03:e7:01:
57:ba:8c:c1:79:81:fc:3b:62:e7:3b:be:21:4a:92:
74:6a:1d:42:13:39:7f:b4:a9:ff:93:13:00:81:bf:
57:d9:8e:dd:52:99:4a:11:5d:2b:4a:57:ef:ac:d7:
20:fc:ae:33:8b:da:7e:27:2d:ba:57:f2:50:c6:ba:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D7:24:BA:4D:BC:B8:C5:22:08:C9:94:5D:A8:DB:63:9C:80:80:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44f4385f-c6de-3739-9741-6b6d2d22c00b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:7a:0c:df:fa:b1:65:c3:aa:7d:10:26:33:6f:94:fa:66:de:
a4:a1:77:f0:98:c9:dc:d9:5f:df:11:83:a9:df:c5:5c:b4:1c:
40:4f:20:ce:79:41:db:f8:f1:02:80:a4:7a:a5:53:c5:dd:e3:
01:e0:82:57:67:48:ed:b1:bb:69:69:28:97:8d:17:56:41:aa:
d9:b1:34:10:26:48:ea:80:89:f9:43:aa:5d:c6:70:ce:a4:de:
07:bc:80:f0:0c:5a:01:10:29:de:59:d3:22:02:7e:7f:71:16:
72:f5:ee:89:5d:25:16:e3:fb:61:cb:b3:e9:88:e6:07:8e:d4:
51:08:9f:2b:a0:26:17:d9:30:34:fb:8b:49:4e:24:92:6c:a2:
6e:15:4b:f3:9d:61:85:5a:48:c0:57:5a:50:ad:2c:55:d6:47:
4f:ff:b3:fb:48:c5:da:d6:82:55:fd:38:13:25:e3:35:5f:49:
82:74:96:d7:a4:b8:e1:a2:25:50:d2:09:39:78:bf:bb:c2:12:
6c:02:61:cf:ef:05:da:e1:b7:6d:8e:7e:66:f4:4e:68:41:cc:
61:45:17:a8:17:a0:99:95:9a:d8:21:7d:87:31:7c:1d:9e:f1:
f0:0d:c2:2a:a7:39:93:91:8a:62:dd:8d:90:b2:f2:53:96:70:
f4:01:5a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:23 2025 by rpki-client