Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b309de2-ce18-3238-9662-77b7f9258ed1.roa
File: 4b309de2-ce18-3238-9662-77b7f9258ed1.roa (raw, json)
Hash identifier: MfBmnB70fEh0+9FygxIyh7eyDNdcbqlX/kRma10KN98=
Subject key identifier: B3:04:47:E8:22:A3:D2:D5:6D:43:9A:C2:BF:B8:8D:78:39:EE:B2:34
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A7727D572D426C3CCF94A50
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b309de2-ce18-3238-9662-77b7f9258ed1.roa
Signing time: Thu 27 Jun 2024 20:15:51 +0000
ROA not before: Thu 27 Jun 2024 20:15:51 +0000
ROA not after: Wed 25 Sep 2024 20:15:51 +0000
asID: 149723
IP address blocks: 2001:470:1c6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:27:d5:72:d4:26:c3:cc:f9:4a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:15:51 2024 GMT
Not After : Sep 25 20:15:51 2024 GMT
Subject: CN=68900152-5005-4d2a-ba23-34cef597e85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:fd:48:0c:a6:16:6f:61:87:68:b3:34:bc:
e9:db:0b:57:fe:fe:4f:58:25:99:33:13:4d:34:82:
c8:01:d5:c5:fc:99:fb:2b:9e:7b:42:88:17:b2:0e:
75:c6:ae:01:f8:44:ee:8b:f8:8d:16:d2:72:5b:c2:
79:e0:d0:78:ef:0c:29:c3:34:f2:d7:5e:d7:48:2d:
f8:08:23:2b:bf:33:89:df:23:fb:a0:84:8e:0f:13:
3b:fc:cb:7f:4f:83:a4:82:bf:98:23:4b:e6:6b:ca:
67:83:35:39:6f:0d:fa:ea:c3:69:1f:d3:2f:ec:67:
3c:cf:86:78:52:ea:01:0c:c9:9b:2f:d0:6a:07:ec:
4b:94:43:33:ae:9b:8e:63:f6:46:f8:7d:d9:c3:d1:
cc:35:64:64:88:ca:80:53:bd:49:40:a8:81:69:cd:
c2:11:98:50:d1:c5:8d:d0:13:8f:7b:b3:4b:c0:88:
48:30:ff:e0:2d:2d:90:54:88:a9:68:93:83:e2:d8:
64:97:4d:3b:ca:94:38:21:50:da:1e:5b:9c:98:3a:
d7:06:9a:15:7c:c8:ab:89:09:46:d3:38:81:76:83:
e9:60:72:a4:e6:26:2f:aa:ad:bf:17:b6:3b:14:cd:
a5:55:3e:f3:9d:ef:b7:e7:ad:e5:61:da:bf:47:f8:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:04:47:E8:22:A3:D2:D5:6D:43:9A:C2:BF:B8:8D:78:39:EE:B2:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b309de2-ce18-3238-9662-77b7f9258ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:11:a0:2f:e4:ed:30:80:1f:5c:a6:88:79:4a:a0:b2:c2:db:
5b:f0:14:b8:6f:ac:62:7e:a7:15:2b:5b:bc:c9:4c:b6:dc:6e:
50:49:6b:0f:74:8c:ee:ca:a4:bf:57:89:2a:b7:9f:0c:62:8b:
6a:c1:6f:f7:9f:0e:23:d0:ee:04:22:ea:8a:dd:ae:70:86:cf:
c1:8f:ad:80:a4:1b:2a:8a:c5:8b:9f:29:96:6d:ee:f6:17:91:
53:17:95:38:60:87:b2:a8:1e:c6:c0:4c:2e:66:ee:b9:1f:24:
d3:81:ec:7c:e4:66:cd:68:17:3a:0a:a2:7f:5a:da:00:ee:75:
96:5e:e4:b6:50:1e:cb:67:91:a4:ed:25:7e:54:b2:33:31:a0:
2e:1a:03:5c:af:eb:be:8d:29:6d:d0:b0:17:fd:ec:9d:84:c7:
cf:8b:92:a4:23:ee:0e:09:15:df:9d:a8:66:94:12:7b:9e:7b:
66:cc:55:53:7e:53:29:30:f8:73:26:4f:99:c3:29:d5:39:4b:
25:c6:92:09:b0:e9:20:ec:06:7f:4b:e8:a9:be:cf:1c:9c:b1:
28:07:d2:65:ec:ea:36:df:31:7e:01:00:ab:f4:bd:c8:dc:a7:
f4:90:8e:0e:66:e6:bc:d2:67:7c:b8:1b:d8:27:f5:4c:ae:03:
91:83:58:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:20:39 2025 by rpki-client