Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b130121-fdb7-36d0-b0ae-ea953f7f6dae.roa
File: 4b130121-fdb7-36d0-b0ae-ea953f7f6dae.roa (raw, json)
Hash identifier: 98ScDxc0L75P97GVwAnJWi/EkPJsnssHVo78Yvk4Lho=
Subject key identifier: E0:CA:90:38:29:28:EF:E1:DC:57:E3:C0:0C:58:91:D1:11:90:6E:AE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845F51E8BDA8BA18EC1C8C95680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b130121-fdb7-36d0-b0ae-ea953f7f6dae.roa
Signing time: Wed 22 May 2024 13:00:33 +0000
ROA not before: Wed 22 May 2024 13:00:33 +0000
ROA not after: Tue 20 Aug 2024 13:00:33 +0000
asID: 133199
IP address blocks: 2001:470:249::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f5:1e:8b:da:8b:a1:8e:c1:c8:c9:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 22 13:00:33 2024 GMT
Not After : Aug 20 13:00:33 2024 GMT
Subject: CN=67db7e45-b6cd-4977-9bca-886ef3de66f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d8:76:09:65:70:55:04:e9:7f:d6:e4:8c:4a:
4f:77:de:59:06:5f:39:8d:bc:3f:02:b2:3c:cb:73:
26:62:8f:4b:ea:37:b2:e2:f7:b6:c8:1f:b1:b3:f1:
0d:15:94:05:43:a3:34:fc:5d:a2:60:de:c5:67:84:
fe:c5:db:f2:2e:d6:bd:bf:54:8e:ce:25:35:1e:1a:
2c:50:78:e8:f6:1d:f3:4b:cf:55:a4:9c:91:ca:38:
f3:e8:ad:7f:14:a9:c4:e0:51:f4:c8:7e:43:87:2c:
8e:e0:0d:9c:8b:e9:96:5c:59:fa:dc:d7:d1:eb:14:
19:e5:b3:13:16:85:64:57:5f:b6:30:16:42:28:3d:
0e:4d:0a:54:f3:24:63:1c:ac:85:cf:62:ea:c5:52:
d5:b0:81:15:51:b4:4d:f8:2c:9c:78:cb:b0:d0:f9:
94:47:d3:66:be:94:73:a7:a3:f5:d8:73:7c:c6:d5:
da:b2:03:e6:62:3f:85:c6:5e:ea:c4:07:74:67:a6:
c9:9d:5d:6b:29:74:1c:53:c5:b7:f0:40:ef:ce:3d:
e1:33:44:14:d2:69:96:0a:09:ac:d8:70:17:91:6c:
b0:13:0e:22:b6:e9:06:90:75:cc:0d:b8:30:26:df:
ac:81:68:83:96:5b:29:c9:14:c2:83:b5:c0:99:f7:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CA:90:38:29:28:EF:E1:DC:57:E3:C0:0C:58:91:D1:11:90:6E:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b130121-fdb7-36d0-b0ae-ea953f7f6dae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:249::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:2b:9c:03:94:51:20:3f:75:2d:cd:21:b2:98:ac:4e:47:02:
f8:b2:79:8e:45:6e:42:a9:bb:e9:d9:d0:e4:48:ec:f4:f5:57:
e8:a3:80:c2:17:c6:ce:f6:23:f1:5d:37:c8:dc:5a:38:15:07:
cc:58:7f:21:eb:52:49:f7:0c:17:44:68:22:fe:2f:09:3c:54:
23:e0:b7:0f:5f:32:23:9c:65:5e:f3:d8:98:e9:36:93:56:1a:
69:33:ec:ff:9b:81:5a:b2:4e:9a:99:bd:e4:a3:08:ef:5b:c1:
47:23:45:b0:e5:81:4e:14:5c:54:15:58:4e:4a:ed:17:bb:cc:
06:0f:89:39:67:76:5f:e0:a7:cc:fd:5a:bd:a4:00:fd:3c:ac:
12:bd:b6:19:3c:a8:c2:c4:e1:e9:f2:63:1e:eb:28:e5:6c:84:
c8:c9:bc:40:83:8a:f4:28:5a:fa:84:de:99:8d:7e:4c:08:cc:
63:27:92:da:fc:da:38:ad:3a:2b:f4:61:53:d4:09:01:50:69:
7e:e8:8c:fc:3d:9a:66:b3:9a:ad:13:39:76:a4:50:02:84:01:
61:18:67:87:e3:ec:f0:36:c6:82:2b:d4:39:b6:46:ef:07:d4:
fb:47:45:7d:48:b6:94:5f:0e:02:ad:af:88:39:b4:5b:0e:92:
6e:59:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:44:42 2025 by rpki-client