Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/584a37d2-6c4e-3103-9d49-68c28d9e33cb.roa
File: 584a37d2-6c4e-3103-9d49-68c28d9e33cb.roa (raw, json)
Hash identifier: KyNT8evv4fCiti/lu4XYEPb7+w8LP6YTypFRiLghTGY=
Subject key identifier: CD:E8:37:D8:45:C7:AE:A1:DB:22:F7:BF:BD:76:D3:E0:4E:29:EE:A5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846C7F3DF948B9601D0FF673C40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/584a37d2-6c4e-3103-9d49-68c28d9e33cb.roa
Signing time: Tue 06 Aug 2024 01:30:15 +0000
ROA not before: Tue 06 Aug 2024 01:30:15 +0000
ROA not after: Mon 04 Nov 2024 02:30:15 +0000
asID: 204992
IP address blocks: 2001:470:353::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:f3:df:94:8b:96:01:d0:ff:67:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 01:30:15 2024 GMT
Not After : Nov 4 02:30:15 2024 GMT
Subject: CN=c5ef4fea-d27b-4d38-9112-09825ad5343d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:77:10:b8:53:74:3e:09:ad:59:bb:fe:f8:e5:
c0:b1:57:d8:d5:3b:1f:90:1d:47:08:cd:21:67:24:
e0:3f:6c:fb:95:dd:15:3c:c4:3d:1d:44:45:0d:da:
36:e4:1b:fa:48:46:26:6a:3a:32:b3:22:42:15:84:
96:a2:a8:57:40:04:44:5f:81:84:82:aa:e7:f0:ea:
05:9d:c5:b8:ea:51:de:22:57:ef:c7:84:a6:bc:ea:
e9:b5:44:46:b7:4f:d1:3b:7b:0c:1b:0a:8a:40:10:
d2:8b:97:d8:0d:03:a2:d1:86:55:c3:40:eb:06:65:
91:e9:98:d1:fe:b0:d5:dd:59:b5:35:a0:00:08:48:
a9:0e:56:75:21:49:bd:fb:b4:cb:03:a7:ce:d3:ea:
e5:aa:17:d9:dc:df:89:e7:5d:a9:15:bb:d9:7b:3d:
bd:1a:35:e6:39:83:97:8c:27:ba:a3:9b:b1:a9:a5:
50:eb:5b:32:17:17:d1:5f:39:5c:b3:6c:f8:dc:ca:
f8:55:72:26:d2:a1:25:3a:32:f9:d7:56:25:00:ec:
45:60:5e:ff:c2:b1:ce:f1:5c:8b:28:e9:17:be:5e:
5e:3e:72:70:94:2b:51:59:23:ee:fd:7a:b7:9b:35:
d7:ea:f1:fd:c5:50:40:6c:9b:78:75:0c:f8:91:d6:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E8:37:D8:45:C7:AE:A1:DB:22:F7:BF:BD:76:D3:E0:4E:29:EE:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/584a37d2-6c4e-3103-9d49-68c28d9e33cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:353::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:46:09:74:9b:55:0c:77:a8:90:8e:4e:b2:1f:3f:d9:45:cb:
4a:f9:90:85:06:0f:57:7b:93:db:dc:e4:f9:47:ee:c0:93:f9:
85:a4:79:95:cf:47:5a:fe:99:af:dd:57:ed:be:38:14:ef:65:
ed:d3:63:52:8f:fc:b1:72:bf:4a:14:3c:14:38:4d:72:4f:1a:
12:0c:bc:11:0a:cf:cd:a9:d5:aa:ca:ef:f6:11:c0:4c:b3:b9:
5b:3d:3f:64:50:c4:74:31:28:a4:3a:51:d0:be:5c:c1:4e:d3:
5f:85:cf:36:0e:cb:4f:1b:b4:7c:a7:d7:01:2c:c7:59:75:c4:
ab:7b:7a:b6:70:60:f1:51:a1:5f:4f:7e:27:3b:d4:69:d3:a6:
af:e4:00:2d:bd:a0:f9:a9:1b:c6:ef:22:41:5f:93:30:32:c1:
55:25:a8:87:af:b8:ac:a7:5e:e5:88:65:d3:f8:3d:1e:04:54:
ce:bc:f1:e9:0b:b6:90:e3:4e:83:03:e1:3c:ad:00:52:9e:34:
a8:56:aa:74:3f:84:52:6c:de:26:80:c4:5c:5d:be:c6:93:68:
c9:32:6d:ae:7f:6d:98:61:5a:39:d1:f2:c1:fa:6c:98:43:44:
5b:29:5c:d2:b5:d6:e0:70:01:a2:9d:39:a0:22:da:f7:4f:a6:
d6:72:1d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 15:22:15 2025 by rpki-client