Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6f51aca8-1de2-3083-81a9-d9c5b616a7eb.roa
File: 6f51aca8-1de2-3083-81a9-d9c5b616a7eb.roa (raw, json)
Hash identifier: 9+CKIW5pbeAyEH7JGa0hmt07Uc4XS/a9sj7KRUzGZ2E=
Subject key identifier: 43:F9:1B:87:B7:16:1B:28:E8:75:DE:B7:6E:1C:94:08:96:E1:A8:0F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846C7F3E1D19222155430471300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6f51aca8-1de2-3083-81a9-d9c5b616a7eb.roa
Signing time: Tue 06 Aug 2024 01:30:16 +0000
ROA not before: Tue 06 Aug 2024 01:30:16 +0000
ROA not after: Mon 04 Nov 2024 02:30:16 +0000
asID: 216040
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:f3:e1:d1:92:22:15:54:30:47:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 01:30:16 2024 GMT
Not After : Nov 4 02:30:16 2024 GMT
Subject: CN=1d95b675-5afa-4c4d-bb4d-2c88ca635a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2c:fb:4c:a8:8a:53:a6:41:d9:c3:37:30:9c:
4a:c9:35:46:99:09:3f:09:70:b6:fb:0a:aa:56:6f:
24:c2:c5:da:2b:8b:ec:14:cd:1c:41:30:64:48:08:
70:0f:6a:56:ae:09:71:ec:bb:10:e9:35:3e:8e:53:
a0:e1:e6:d8:f1:a4:3e:a3:69:4d:1b:ac:5b:df:a7:
89:f4:aa:e6:de:77:60:bf:4a:b3:78:f6:5f:f9:f6:
f0:4d:2a:e4:ff:99:3b:58:dc:df:05:2a:25:06:1e:
93:67:6f:54:d9:3d:f8:d2:cc:f5:7a:24:46:0b:f7:
c4:2d:17:c0:68:8a:a0:be:95:0d:8e:cb:96:b6:07:
7d:38:a1:c3:55:28:43:46:bb:fa:e3:20:ab:ee:a1:
5e:c7:35:f2:a9:fb:0a:f6:b4:8f:36:7b:5c:be:3e:
61:13:cf:82:dd:e5:aa:44:22:62:e1:a4:2d:e4:54:
4a:d8:40:1c:31:0a:d6:f3:d5:62:1e:16:0d:20:d0:
e6:cc:42:4f:74:ef:00:9a:d9:ba:c2:8d:61:f1:26:
ef:63:a7:b2:7c:6f:2b:35:75:4b:50:da:59:ac:36:
a0:24:0d:c1:b8:8b:ef:a9:9c:56:45:c6:bc:17:c5:
d3:bf:f0:9f:d3:60:c4:c6:f3:39:12:0f:03:07:af:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F9:1B:87:B7:16:1B:28:E8:75:DE:B7:6E:1C:94:08:96:E1:A8:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6f51aca8-1de2-3083-81a9-d9c5b616a7eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:02:56:9c:c6:fd:1f:bf:ec:56:c6:35:02:34:d8:a3:6f:57:
98:13:d7:54:d5:d2:ac:12:f9:53:0d:52:78:39:da:eb:22:91:
11:17:f9:48:86:2a:b2:03:2e:c6:50:d6:7e:08:11:c7:4a:b2:
c7:44:dc:a9:f9:38:f0:d7:ec:5f:17:13:18:f7:76:77:b8:ea:
4f:b7:b2:aa:9a:ba:9c:ff:82:9e:d6:8c:d1:67:a5:a8:16:d8:
8a:82:3a:e1:bd:9b:25:ec:33:89:d1:83:8f:86:28:a4:8c:0c:
70:34:c7:09:3c:57:14:2c:79:cb:ac:91:58:5e:b8:d4:c8:67:
a4:38:7b:0d:3a:77:4a:c5:33:94:1b:a9:b1:24:a7:8a:69:a7:
55:8a:dc:c9:00:3e:fa:90:96:01:92:d7:00:8d:26:95:59:1a:
9a:25:3d:9c:b4:be:fc:95:9a:e8:cd:77:a9:68:40:9b:e0:7f:
23:c0:53:2a:6f:6d:d6:13:fc:6c:ad:0b:67:ea:16:a9:81:22:
ec:d0:c9:4c:bf:33:08:1e:43:a8:02:38:5b:4b:6f:a4:b0:6a:
be:a5:62:7b:ad:92:31:51:45:1c:62:66:97:be:c5:f1:09:0c:
2e:3d:ac:56:b7:ca:5b:cf:93:7b:79:09:0a:32:93:93:7c:09:
cc:3f:0b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:57:44 2025 by rpki-client