Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5dfb1427-4759-31e3-9590-f823a32dbe7a.roa
File: 5dfb1427-4759-31e3-9590-f823a32dbe7a.roa (raw, json)
Hash identifier: py3l4aOi409kzxReIy3gQmVgnRgfHY/SWjmnQW5p+MI=
Subject key identifier: 9A:29:25:6F:2D:69:E2:3B:8B:1B:2B:B1:30:36:47:C2:C8:DC:95:45
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858483033D5FF15FF335B26752CC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5dfb1427-4759-31e3-9590-f823a32dbe7a.roa
Signing time: Fri 13 Dec 2024 02:30:08 +0000
ROA not before: Fri 13 Dec 2024 02:30:08 +0000
ROA not after: Thu 13 Mar 2025 01:30:08 +0000
asID: 397493
IP address blocks: 2001:470:87::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:33:d5:ff:15:ff:33:5b:26:75:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 13 02:30:08 2024 GMT
Not After : Mar 13 01:30:08 2025 GMT
Subject: CN=f2457218-7de4-4334-a0e2-badfc19813fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:9a:57:60:a4:ea:78:e5:73:4a:82:ff:a8:
30:56:89:c2:c0:ca:f3:22:35:34:08:aa:8f:b2:fd:
04:5d:05:28:a5:7a:04:23:7a:46:b6:63:05:ad:e3:
20:4d:a6:ab:9f:88:3c:b9:dd:57:07:48:05:95:e4:
65:0f:f7:1e:29:e2:60:18:12:e2:19:4b:41:79:df:
42:f7:63:03:42:dd:ab:24:8e:bd:8f:f0:e2:de:03:
89:92:2d:13:63:80:8e:aa:6e:26:ae:77:21:a8:71:
58:dc:fb:72:d0:6e:c7:32:32:8e:28:d1:04:fd:9c:
8f:7f:e1:e7:df:f9:0f:25:a3:60:8d:42:6f:02:5b:
ee:0c:81:18:c0:a0:49:90:60:a7:33:17:49:35:c4:
b6:49:f3:c7:b3:f1:0d:f5:71:49:07:58:2c:b1:9a:
f8:6c:bb:5b:5d:ce:85:bc:35:ce:a9:92:49:86:e9:
e4:3a:cc:23:dd:ac:cd:1c:09:ff:df:b7:d1:bf:06:
a0:ef:27:e7:57:63:98:ad:bf:6a:96:f6:99:d7:dc:
d4:43:f9:44:56:0f:65:47:3e:ad:e2:a8:0b:87:c6:
23:ae:1d:0e:ba:9f:0f:1a:6f:09:a8:e4:c7:46:73:
58:c5:74:51:3a:31:07:2c:c8:54:f0:12:c6:f3:fb:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:29:25:6F:2D:69:E2:3B:8B:1B:2B:B1:30:36:47:C2:C8:DC:95:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5dfb1427-4759-31e3-9590-f823a32dbe7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:87::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:4c:73:d8:d1:db:7e:7f:fd:9d:69:bf:07:37:17:0a:51:db:
6f:52:8d:8d:02:d3:52:25:40:99:cd:7d:af:be:b3:bb:ea:55:
14:f9:11:ef:f6:b3:7c:19:56:cc:48:2e:13:b7:c3:b4:36:13:
40:43:e4:4a:94:68:c5:3d:c5:cc:a2:f5:1f:54:ed:f9:8e:3b:
01:96:21:3e:48:43:15:98:bc:dc:38:2f:90:1b:aa:d6:4f:2f:
08:4a:8c:4d:f0:a5:70:2b:30:6a:56:3d:ef:ac:02:86:a4:0c:
49:f4:31:d5:49:6c:16:58:5f:6f:f2:67:5b:cb:05:f7:fb:52:
60:41:a0:9e:93:f4:55:4f:d8:12:c7:c8:0f:d1:a2:b3:56:5a:
1a:63:ba:49:f8:9a:f5:cb:d8:ca:1a:21:57:ab:42:b5:7e:d8:
55:94:53:28:9e:79:d9:f0:73:78:52:2e:7c:78:ef:39:29:6d:
16:9d:26:79:13:09:b8:27:b1:ec:e8:3a:f6:f6:c9:3d:44:9a:
b7:be:1d:ec:11:0c:28:b5:74:df:26:6d:92:4f:c8:b8:0d:d5:
7b:2f:6b:ba:14:39:a4:a2:67:40:f6:a8:39:e2:d8:41:c4:dc:
dc:2d:c5:97:5e:06:b1:90:12:ab:28:d7:65:dd:5d:62:12:5e:
8a:8f:3d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:06:52 2025 by rpki-client