Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/60abf934-2706-3d57-a512-ced19e1e86bf.roa
File: 60abf934-2706-3d57-a512-ced19e1e86bf.roa (raw, json)
Hash identifier: 3ci8TSI7a2v0AJUR5rwHK98dvAxTbIMQj0f/aU/T8cA=
Subject key identifier: 23:74:5C:75:66:A8:A0:2D:04:A1:4A:6B:A0:C5:3A:3B:84:8E:CE:11
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846C7F3FA8E65DCC622342F0200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/60abf934-2706-3d57-a512-ced19e1e86bf.roa
Signing time: Tue 06 Aug 2024 01:30:28 +0000
ROA not before: Tue 06 Aug 2024 01:30:28 +0000
ROA not after: Mon 04 Nov 2024 02:30:28 +0000
asID: 60602
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:f3:fa:8e:65:dc:c6:22:34:2f:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 01:30:28 2024 GMT
Not After : Nov 4 02:30:28 2024 GMT
Subject: CN=1ce4a899-9f8e-4eaf-9817-11777ab3d48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:06:30:d9:24:92:7f:39:f7:4a:f1:bc:46:
2d:fb:4d:52:f7:c5:c1:16:ec:21:ea:8d:48:3a:71:
60:9d:b2:b2:d4:d7:cd:4e:91:79:3c:c0:bc:b0:85:
37:6f:d6:55:a6:e2:26:5d:3e:da:cc:6f:15:e4:75:
a9:33:32:5c:12:22:81:d8:6d:cc:36:88:f1:6d:06:
af:a7:11:8a:22:35:36:d0:41:32:b5:c4:b7:31:06:
a1:48:7e:cb:61:9b:11:8a:86:d6:bc:cc:d1:80:31:
38:ef:2b:13:44:fd:fc:bc:eb:dd:bd:26:af:c5:75:
c0:94:dc:5a:a7:d2:40:1f:6f:94:4e:9e:a6:c9:62:
d4:a1:c1:4c:f2:3f:30:fa:f7:7d:d4:6d:f5:ac:30:
cc:a3:bd:2b:32:69:27:6f:22:56:67:8a:e9:a1:e0:
5c:ef:21:d5:1e:48:1d:ee:e1:28:55:df:8d:27:dd:
fa:1a:f7:9b:58:fd:47:cf:fa:0d:fe:50:65:43:33:
2c:a3:b8:c3:94:5b:ac:35:b6:ab:dc:aa:bd:6b:e4:
1e:de:7e:80:78:af:ba:e5:3b:99:0c:05:77:20:eb:
05:e3:da:f7:09:d0:13:36:cf:0f:ba:f7:b6:bf:84:
1f:34:fd:0b:5d:14:fc:32:97:6b:86:15:98:51:a4:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:74:5C:75:66:A8:A0:2D:04:A1:4A:6B:A0:C5:3A:3B:84:8E:CE:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/60abf934-2706-3d57-a512-ced19e1e86bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:12:01:22:49:e3:fa:af:90:02:c9:83:f8:ed:cc:bf:e4:f3:
78:b2:f2:df:32:3d:72:48:0d:41:73:f4:25:c7:6d:5a:8d:63:
c1:52:a6:d6:6f:be:d2:d4:42:1e:ae:76:96:17:c9:a9:4f:36:
53:55:5a:4b:b7:fa:48:12:63:91:d1:71:42:43:3b:f3:14:a0:
1d:64:23:74:7d:fb:96:03:c7:a3:04:b1:df:c3:a2:88:7b:f7:
f7:b2:da:f0:30:6c:05:c4:47:00:1b:d8:f8:0d:51:52:44:f9:
5c:db:e0:fe:b9:a5:54:31:3c:c1:2b:80:02:91:07:c7:47:77:
8b:d4:2c:24:1e:06:d3:1f:59:f4:7d:15:40:63:bd:ad:7d:86:
37:8f:95:e6:89:67:ab:af:a7:7e:d8:74:52:35:ea:60:a1:2e:
20:e1:28:66:d4:74:80:2a:db:7a:e7:14:b7:cd:c9:ad:29:50:
72:1d:a1:ec:21:ee:47:19:52:97:8d:92:a1:69:29:b8:c8:42:
2a:dc:51:9b:39:3b:18:4c:7f:ef:fa:a3:67:83:f1:5d:3a:30:
34:74:c7:59:18:8a:26:ab:53:bc:45:91:f9:78:cc:8b:3d:74:
3d:21:1b:8b:60:89:0e:a6:1b:53:be:03:9d:23:da:c0:db:35:
ce:07:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:13 2025 by rpki-client