Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/585306c0-da28-368f-ba06-e31b2e0d2843.roa
File: 585306c0-da28-368f-ba06-e31b2e0d2843.roa (raw, json)
Hash identifier: YPoHapcb9Mia+SHxorziqx1Z7qeQjZh5tsJInwyLRdg=
Subject key identifier: 33:7D:D3:2E:FE:FE:6F:4F:5A:A6:FD:6B:4B:4D:80:BE:08:81:55:44
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847644A1BC37A14EBEEE84C4900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/585306c0-da28-368f-ba06-e31b2e0d2843.roa
Signing time: Tue 01 Oct 2024 01:30:06 +0000
ROA not before: Tue 01 Oct 2024 01:30:06 +0000
ROA not after: Mon 30 Dec 2024 02:30:06 +0000
asID: 204020
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:64:4a:1b:c3:7a:14:eb:ee:e8:4c:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 1 01:30:06 2024 GMT
Not After : Dec 30 02:30:06 2024 GMT
Subject: CN=40c2ae82-fb00-4b14-b85a-809c1e921541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:bc:d0:04:26:04:a1:6f:91:98:52:f6:6a:
ff:a3:cb:45:5a:54:18:01:0b:d5:42:b2:eb:5f:b1:
01:ef:36:6f:2e:5e:56:85:77:d2:1f:8e:48:04:9c:
8d:40:84:56:a0:c0:df:9c:47:fd:84:12:60:95:fb:
b3:f8:17:7e:b7:d9:aa:ac:91:29:b4:4d:c1:dc:31:
11:ac:2a:81:eb:28:98:72:1f:26:25:87:81:97:cc:
d7:96:fa:88:a7:6d:9c:ee:fb:ab:64:3d:5e:44:28:
9a:b1:ec:da:18:b2:24:a4:d9:de:c0:d0:65:7f:e4:
87:1c:47:4c:e6:c8:b3:00:95:50:7c:91:b6:f8:42:
ec:a5:54:55:7b:d8:78:87:59:b5:46:c3:fa:84:4b:
b0:20:e3:f0:08:3c:61:89:19:91:b0:39:27:37:6e:
d2:fa:ce:a1:06:fa:6c:b6:94:a1:05:2b:db:e6:6b:
b2:17:1d:93:ed:d9:15:5f:be:18:00:e0:ca:9e:6d:
b1:ec:f9:14:4e:a8:82:0a:a0:05:c1:0f:ce:3c:37:
4f:53:7c:79:de:bb:b5:24:04:df:42:9b:9a:87:ad:
4f:f5:d4:27:d9:58:c1:1e:0a:72:d6:cb:95:da:d7:
fe:ac:9d:43:c1:2c:b4:71:1b:0e:ca:15:a7:fe:62:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:D3:2E:FE:FE:6F:4F:5A:A6:FD:6B:4B:4D:80:BE:08:81:55:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/585306c0-da28-368f-ba06-e31b2e0d2843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:ae:a5:30:51:df:77:89:31:f0:b2:74:6e:d2:c2:89:af:df:
3f:f8:44:e4:53:14:04:67:05:5b:9b:0c:a6:b2:52:e8:f3:28:
b4:f1:f0:74:b2:d1:d8:89:00:64:b9:68:a1:f9:f8:f4:d5:af:
37:3b:07:9b:91:3e:26:02:aa:9d:ad:bb:67:e2:b1:02:89:1b:
c5:51:a6:34:55:7e:81:89:3d:05:7c:81:22:28:78:f0:45:7e:
41:22:e6:35:40:8d:38:09:9c:93:e9:6f:ff:b2:ef:3a:f7:e8:
58:fe:20:03:61:8f:4e:ed:de:eb:f4:16:ac:4f:a0:ef:a6:74:
c6:37:b7:2f:f9:14:eb:a7:bf:ce:79:59:66:9b:95:3a:b7:6f:
1f:b7:0e:77:dc:e5:04:07:4a:ae:53:89:59:e5:80:dc:5e:26:
c3:06:f7:77:4f:cf:55:29:91:bd:1b:ad:85:9b:68:11:a7:2c:
d6:19:59:23:f2:c0:54:20:2a:80:06:e9:83:eb:5d:41:3a:01:
b7:28:84:5b:0c:04:33:07:f7:90:c7:55:be:83:0a:ea:f5:c5:
a0:37:9a:7c:a3:91:ae:9e:95:ec:46:ff:b7:08:9c:95:e9:0a:
d4:af:92:13:ba:5d:51:e8:13:52:bf:9d:99:dd:34:30:30:3a:
4c:3c:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:02 2025 by rpki-client