Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c1ca36-b859-3bd7-bf81-3a9d08cd81cc.roa
File: 70c1ca36-b859-3bd7-bf81-3a9d08cd81cc.roa (raw, json)
Hash identifier: POvHa0Oj7fDpdbMgTVCcXRnQ2tvUpLgz3aH7E9Hdryo=
Subject key identifier: 75:72:9F:17:BA:45:4C:50:D0:59:58:7C:1B:0E:89:AD:70:16:29:12
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845F51E9749D8A000E27C3D98B4
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c1ca36-b859-3bd7-bf81-3a9d08cd81cc.roa
Signing time: Wed 22 May 2024 13:00:33 +0000
ROA not before: Wed 22 May 2024 13:00:33 +0000
ROA not after: Tue 20 Aug 2024 13:00:33 +0000
asID: 141634
IP address blocks: 2001:470:1c6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f5:1e:97:49:d8:a0:00:e2:7c:3d:98:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 22 13:00:33 2024 GMT
Not After : Aug 20 13:00:33 2024 GMT
Subject: CN=bf59dd3b-515c-495c-9dc4-7805c66359e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ce:d2:ad:ed:89:14:72:1a:0a:e1:09:a2:2d:
b3:26:37:ad:87:d3:99:6b:38:6a:5c:23:57:7f:1c:
7e:84:34:3e:86:e5:f9:7a:92:8e:3f:f9:35:09:39:
79:46:ef:10:92:b4:95:90:7e:ec:e8:40:5f:4b:36:
ea:37:a2:24:86:23:7f:1a:1a:e5:34:3a:da:dc:50:
8a:80:e3:fc:be:73:65:98:bc:99:e8:75:3a:50:4a:
50:74:e9:b9:72:21:e7:a6:74:f8:cc:90:dc:f4:eb:
0c:35:85:c4:7a:77:f8:8f:29:6d:d8:71:8d:c6:4f:
6c:32:7f:f7:6f:05:11:f1:82:9c:ce:2d:90:0b:fc:
5a:0c:b3:3f:e2:c0:f0:9c:f3:4c:1d:c2:80:c7:7c:
b2:a8:ab:59:44:05:1c:8c:e1:ff:92:64:76:35:a8:
18:9f:f7:93:0b:c9:ef:4d:fe:0c:51:bd:b6:65:e9:
70:54:00:1b:fd:f5:05:f3:f6:58:f1:f2:79:39:74:
18:eb:3b:4c:e7:29:5d:84:ce:97:92:48:14:eb:39:
c0:3f:fa:da:d5:b9:f6:d8:ed:77:7f:7a:ba:79:19:
ec:8e:64:b4:f8:ad:0f:53:2d:05:3c:c9:fb:7d:fa:
f3:05:55:eb:4c:f6:77:89:6d:29:e2:0b:27:68:41:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:72:9F:17:BA:45:4C:50:D0:59:58:7C:1B:0E:89:AD:70:16:29:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c1ca36-b859-3bd7-bf81-3a9d08cd81cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:4b:7b:a4:b1:53:09:74:21:49:ec:86:32:c6:0e:f2:05:a9:
2e:22:90:4e:fb:47:29:14:15:4c:b0:eb:d8:1d:a9:12:e8:45:
b4:31:fa:80:1d:b7:69:59:ed:88:a2:18:b3:86:e4:72:2e:c6:
8a:f9:6a:78:3a:43:6a:c6:c9:fc:69:d8:48:b9:1b:1f:b0:f5:
5b:84:61:31:13:62:cf:54:5a:45:6a:46:db:56:7f:ac:29:4b:
9e:18:b1:1c:79:eb:de:15:ad:f3:9a:78:26:33:c2:dc:c4:0b:
f9:f8:17:ba:fb:38:c0:a7:ab:c3:c5:1a:d6:6b:e5:8d:ad:c3:
65:ce:e0:54:39:14:20:d7:cf:7d:6c:f1:19:a4:22:c6:19:45:
73:01:b9:9e:be:da:74:b2:c8:ff:b6:1a:80:2c:cb:d8:3c:9b:
fd:b7:6b:59:63:0c:57:2a:5d:fb:50:d8:9b:d6:3d:35:36:c5:
b3:28:e6:53:7f:ed:ae:78:f8:bc:1f:4c:10:ca:92:94:02:a4:
87:35:73:fb:51:c6:7c:d2:ca:a4:66:90:d2:e6:03:6a:52:56:
fa:59:64:e5:5e:11:e9:fd:2d:76:79:64:6a:2d:a6:6a:4f:6d:
46:f8:1d:65:a3:c8:49:40:a3:95:f3:3d:c5:31:4f:ab:b2:98:
07:d3:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:18:13 2025 by rpki-client