Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59d6d287-239b-3c64-a3ac-14714b3ca14a.roa
File: 59d6d287-239b-3c64-a3ac-14714b3ca14a.roa (raw, json)
Hash identifier: cGUVWkZFrZ1BSxAKp+ldprJMeabTU9Td5HVL7Uil8d8=
Subject key identifier: F1:C3:F7:BC:47:5A:AB:9A:EA:FB:5A:98:91:DB:3E:97:24:5E:40:E9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858460FB310D7BE2209A949835400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59d6d287-239b-3c64-a3ac-14714b3ca14a.roa
Signing time: Sat 01 Jun 2024 01:30:56 +0000
ROA not before: Sat 01 Jun 2024 01:30:56 +0000
ROA not after: Fri 30 Aug 2024 01:30:56 +0000
asID: 23028
IP address blocks: 2001:470:2c1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:0f:b3:10:d7:be:22:09:a9:49:83:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 1 01:30:56 2024 GMT
Not After : Aug 30 01:30:56 2024 GMT
Subject: CN=d16ecdc5-e710-4219-96f4-ed15930cdd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:2e:9f:e1:91:25:cd:58:82:f7:fe:05:13:
a8:67:3f:f6:bb:0d:e3:46:dc:8e:1e:05:20:eb:c8:
c2:65:c6:08:bc:97:eb:76:5b:83:2b:6d:6b:96:09:
fa:aa:49:01:80:5e:9c:a9:c6:99:72:c4:9f:38:b0:
1d:3f:e7:21:7e:1d:5f:ec:5a:9b:91:4d:4b:ad:02:
e9:e5:d5:70:08:cc:49:1b:b7:49:f7:99:12:16:2a:
2d:d1:e0:84:43:86:10:52:9c:57:6a:b0:07:46:7d:
99:80:31:25:fc:31:64:93:fe:45:5a:d6:5b:60:76:
77:e7:ed:07:49:cc:8e:f4:44:84:04:94:70:4c:84:
a9:7e:b5:9c:c0:40:e0:10:1b:7f:8b:e5:15:2d:3c:
f0:16:72:f9:de:fe:39:61:66:b1:47:dc:e0:f3:20:
be:cf:0c:c1:3e:4b:0a:dd:3f:a1:3a:f3:ec:6b:86:
d5:9d:bd:5f:67:f2:af:70:89:92:64:54:08:aa:a4:
bd:75:bf:c5:7d:6e:9f:52:56:80:66:09:6a:8e:33:
41:e5:be:f3:4f:4f:23:fc:81:4b:23:74:87:50:9c:
78:20:05:3d:32:4c:e3:f7:3f:a2:89:24:ff:79:d5:
f4:97:e6:80:4d:e8:1e:da:04:2c:ee:90:70:be:5f:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C3:F7:BC:47:5A:AB:9A:EA:FB:5A:98:91:DB:3E:97:24:5E:40:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59d6d287-239b-3c64-a3ac-14714b3ca14a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2c1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:a7:d9:48:86:c8:60:34:23:1d:8e:fa:28:a1:99:02:cb:ec:
0d:06:35:59:80:a9:6e:f8:cd:4c:30:16:ed:d2:39:a5:f0:eb:
9a:77:f7:28:d1:0e:04:d4:c6:f6:1d:22:5e:06:30:67:46:54:
2b:d8:a9:55:89:2f:dc:89:e2:fd:d9:6d:e6:a5:2c:50:c0:b2:
02:56:62:d9:ab:cf:d0:13:3b:16:0f:79:d6:35:36:14:cf:b2:
c7:d9:c3:63:4b:26:b9:12:11:e4:6a:94:f7:c8:a9:f9:a1:8e:
28:16:44:0c:86:64:db:2f:1b:62:a8:fa:3e:ad:41:24:a3:48:
49:f9:e4:76:af:b4:0a:b8:2b:17:6c:87:73:3f:6f:6b:33:0e:
6e:4d:d9:65:8e:63:49:a8:9b:0a:8f:db:1a:2a:78:45:0e:6d:
f2:d9:dc:af:e3:87:a4:f0:45:1e:69:60:03:78:18:ec:3b:08:
7b:06:26:8e:e4:91:c9:d3:ab:1d:19:4d:d4:b8:bb:5c:b7:6a:
24:29:4d:18:3f:52:8a:db:06:bd:20:82:01:56:51:df:f7:0d:
40:07:bc:fc:14:af:b7:c1:c2:68:fb:4b:50:df:32:cd:d9:54:
43:31:79:4e:94:ea:0c:1f:4e:5c:3c:b2:18:da:5b:50:c4:d6:
ce:52:8a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:32:58 2025 by rpki-client