Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44f7f501-f9dd-3575-bb4b-3e5cfd7c0668.roa
File: 44f7f501-f9dd-3575-bb4b-3e5cfd7c0668.roa (raw, json)
Hash identifier: TujLwa/gAd2M42v9YkjVJtmBEgsBPyxX8QrN3ERsVss=
Subject key identifier: 9B:CE:47:12:8C:D4:42:27:BD:5C:D6:83:89:A0:2B:21:0A:52:26:F5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858464358C08E2B7CE651C1C59580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44f7f501-f9dd-3575-bb4b-3e5cfd7c0668.roa
Signing time: Wed 19 Jun 2024 13:31:00 +0000
ROA not before: Wed 19 Jun 2024 13:31:00 +0000
ROA not after: Tue 17 Sep 2024 13:31:00 +0000
asID: 62833
IP address blocks: 2001:470:320::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:43:58:c0:8e:2b:7c:e6:51:c1:c5:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 19 13:31:00 2024 GMT
Not After : Sep 17 13:31:00 2024 GMT
Subject: CN=f0ffc211-c9dd-44ab-9721-00c904d24931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:2d:c0:3b:b3:2a:71:75:dd:41:f6:13:7e:
90:0b:71:ce:f0:81:11:5b:6e:5f:2b:73:b7:10:84:
17:15:c5:4e:21:b6:31:88:db:46:9a:aa:34:4f:10:
b3:97:91:af:b1:3b:95:69:58:9b:b0:60:d5:2c:c8:
a7:fe:2f:94:ec:14:0b:1c:16:0e:fd:09:a9:b6:bf:
9e:f9:bc:04:64:3c:58:03:dc:c2:ae:af:ba:51:fa:
41:90:b9:ff:00:bd:60:b8:24:8c:df:4e:77:dc:19:
3f:d8:30:c7:b4:34:c1:6f:57:70:9a:d1:d6:4f:25:
21:a4:66:f9:88:6b:cb:7f:d7:6a:35:c3:42:4b:8b:
f2:a7:05:59:65:b0:20:d6:76:51:55:fb:5a:1e:b7:
66:18:ab:b0:d7:3b:37:9a:ce:e7:4a:54:76:4a:b4:
d0:22:d4:ca:e3:43:92:b8:49:c2:65:bc:84:75:ef:
c5:2c:bf:36:89:6d:25:cb:f3:f1:9e:c4:5d:12:26:
7f:e5:71:dc:c8:e8:bd:c8:0f:01:6e:ba:7e:fc:12:
61:0c:dc:9a:e0:ab:1a:0e:54:be:c8:20:3b:d1:53:
39:68:01:19:8e:43:3d:81:fc:25:b7:3c:ff:2c:f6:
83:fb:b4:ce:3c:3e:56:dd:8a:02:75:78:7b:15:dd:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:47:12:8C:D4:42:27:BD:5C:D6:83:89:A0:2B:21:0A:52:26:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44f7f501-f9dd-3575-bb4b-3e5cfd7c0668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:320::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:77:69:40:4f:0b:08:8c:1b:3d:d3:7a:bb:e9:f0:30:c8:fd:
1c:fb:64:8e:69:bf:78:ff:dd:50:bd:2b:23:e0:98:d9:41:ff:
44:45:e4:5a:c7:71:9f:ac:e3:47:5e:20:c4:5f:f8:1a:9c:6a:
4c:36:6d:ff:01:cf:c1:44:3d:68:78:8f:7e:18:04:86:da:a7:
4c:e3:69:75:f2:b4:1b:fa:55:c0:f7:ac:ae:96:93:a2:13:36:
ef:16:be:1d:4f:dc:f1:c8:bb:9c:8e:88:b7:fd:62:eb:59:3d:
d5:f1:44:fd:6f:83:89:71:a0:80:ae:a7:07:f3:e0:1d:18:d3:
69:12:4c:90:f1:f2:b3:5e:61:31:0c:0c:43:9a:bf:14:de:78:
b3:77:cb:da:f8:9d:4e:c2:64:3e:cf:e6:47:a3:27:88:d2:5f:
ba:65:6f:9a:e2:fe:f7:65:6d:0a:61:3c:9f:10:13:15:4c:c0:
89:da:cb:ce:e5:17:8a:03:6e:cc:e6:46:8b:5e:a7:05:ca:1a:
2b:66:29:4e:54:dc:49:b0:93:65:06:91:4a:0a:90:5c:79:28:
db:54:70:d8:81:85:8f:13:74:d1:7f:b8:80:20:42:35:5d:7a:
e2:80:b8:a4:96:b4:28:33:e6:d4:05:6f:2c:08:e4:b3:40:81:
c0:ff:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:14 2025 by rpki-client