Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d6a8488-c629-3766-939b-a7d9ec68a6d3.roa
File: 6d6a8488-c629-3766-939b-a7d9ec68a6d3.roa (raw, json)
Hash identifier: /8g4HpNYvoPS+o9VQu+rCMYNg5kNCL2Fu7L1rz2iDKY=
Subject key identifier: B4:98:C0:A5:7C:C8:E3:A8:58:32:C8:A8:B7:00:2D:54:61:83:57:EA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846E3DEABDD351E60CDEB80F900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d6a8488-c629-3766-939b-a7d9ec68a6d3.roa
Signing time: Fri 16 Aug 2024 01:30:10 +0000
ROA not before: Fri 16 Aug 2024 01:30:10 +0000
ROA not after: Thu 14 Nov 2024 02:30:10 +0000
asID: 17473
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e3:de:ab:dd:35:1e:60:cd:eb:80:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 16 01:30:10 2024 GMT
Not After : Nov 14 02:30:10 2024 GMT
Subject: CN=a4ad50da-773e-4f65-b79c-4621e6f0bbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a7:14:df:33:79:d4:b2:7d:3c:f1:bb:5c:ef:
d6:5d:07:f8:8e:9d:cd:8c:af:f0:e2:c6:5f:a4:f5:
67:e3:24:26:cc:a3:cd:a6:93:7f:0c:3c:e5:03:64:
55:b1:b9:60:dc:3f:77:53:31:60:25:94:71:8f:0f:
bf:d9:30:0f:fe:73:3a:fe:93:90:75:ff:a3:30:cb:
99:2a:a9:77:22:ab:94:ca:1b:ec:a7:65:87:3b:78:
04:2c:91:da:4d:51:02:38:b0:5d:88:a7:7d:bb:de:
6b:2a:7f:97:77:51:21:64:16:6d:59:0d:37:20:76:
d4:7c:96:44:72:da:17:c8:ae:9e:c9:ce:4a:41:6f:
be:94:db:8a:9b:5f:6c:06:e0:6e:4c:57:44:8c:79:
e0:31:57:53:5c:b7:24:e6:95:09:17:ed:03:43:f9:
3c:81:7e:3a:aa:be:0a:33:0b:95:78:49:ba:af:6b:
8e:41:6d:ba:1e:88:a1:ba:7e:a2:39:b7:e2:45:e7:
f3:61:54:fa:d1:2b:c8:06:f1:36:59:6c:f8:f4:b1:
45:ff:2a:54:b5:09:f9:50:2a:2f:34:48:e2:51:4d:
c3:b0:93:6d:bb:96:22:e5:bc:0a:1f:dd:48:6c:cd:
b2:2d:e5:ac:39:3b:49:87:70:bd:4f:72:24:93:2d:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:98:C0:A5:7C:C8:E3:A8:58:32:C8:A8:B7:00:2D:54:61:83:57:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d6a8488-c629-3766-939b-a7d9ec68a6d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:04:7b:9c:f8:01:6a:d1:26:a0:92:40:ce:66:d4:d2:3e:9c:
43:44:f8:54:ef:21:61:42:98:d9:08:3f:90:31:13:af:00:5c:
2c:2c:0f:15:86:41:19:0b:ba:78:1b:c0:d7:71:91:37:b5:6b:
d2:d1:70:35:cb:9c:90:62:a2:8d:95:c0:20:c1:98:ff:1f:70:
36:b5:e9:88:f4:8c:6c:3b:6a:11:59:9e:4b:23:10:ba:bd:b3:
7d:98:50:97:13:e1:a8:03:b9:b7:72:01:09:0c:6a:40:d3:cf:
47:66:20:da:64:90:c0:99:08:27:f4:37:69:92:51:f5:3d:0a:
1b:3c:8c:48:a9:c8:53:4c:33:1e:80:d3:40:c3:dd:48:d4:25:
de:74:ae:8b:c5:8e:ff:e1:ea:48:09:cd:22:5f:0c:53:0c:5a:
8d:be:9d:02:42:79:98:66:03:e8:e3:cb:28:26:c3:1b:a1:bc:
58:79:5a:af:38:71:32:ea:d7:19:cf:81:c7:3e:25:70:18:d3:
6b:88:4a:03:11:d5:89:0e:b4:45:29:c4:fc:29:a1:23:8b:4c:
c2:5b:d3:e7:18:3a:36:02:52:bd:6b:26:b9:51:f7:2d:96:b3:
4b:e4:4c:91:aa:70:f8:69:49:b3:91:80:5d:12:de:28:ed:f4:
7d:5a:c1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:02 2025 by rpki-client