Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/712df04b-fd70-33d0-a287-d98e2bf67465.roa
File: 712df04b-fd70-33d0-a287-d98e2bf67465.roa (raw, json)
Hash identifier: cIf+b8OmgslSh+r81WLJ7EhK7vmnCEaj1JBxgQX5o4k=
Subject key identifier: B3:EB:97:ED:D1:81:44:7E:2C:2C:FD:4E:F4:57:C1:1F:8D:D9:5B:B8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D009B74889FBF3EEF60B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/712df04b-fd70-33d0-a287-d98e2bf67465.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 15011
IP address blocks: 2001:470:e7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:09:b7:48:89:fb:f3:ee:f6:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=f0776232-fcaa-4e3a-a156-6e99c3959848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:2a:01:84:c5:e5:ee:22:a6:0f:6f:b5:a3:
fd:68:39:cf:1f:13:9b:d0:3c:7b:18:52:df:10:c8:
ae:27:84:6b:e2:e0:9a:82:40:bd:42:ef:8d:5b:7c:
12:be:79:54:c8:d3:a8:ff:df:ec:08:c2:0a:f5:96:
26:00:8f:e7:38:d7:08:56:15:e9:ce:bd:c9:35:3e:
8d:e9:6f:3b:24:b4:81:30:80:31:e9:61:71:7a:4d:
17:5d:81:d4:b2:06:f4:b7:c3:0d:5e:29:8c:ed:5e:
17:24:c1:5e:e2:99:fa:61:b4:d1:40:01:ed:63:e5:
b2:56:4a:34:8a:cd:1f:45:6f:df:7a:e0:80:3c:d9:
61:45:25:9d:f4:c6:0a:09:0a:ec:2b:42:c9:e9:0e:
31:ab:04:d7:ea:d1:e1:ed:04:30:9e:83:8d:65:de:
4c:ec:3d:61:ff:be:8a:b3:cb:4c:d5:3c:0a:e9:45:
56:c4:cf:69:5e:72:44:b0:17:0e:9f:d1:ec:9e:c8:
43:41:0d:87:e2:bc:6e:5f:76:9a:e1:c8:da:0f:f1:
5a:43:b6:4c:c2:4a:f6:f1:21:56:58:55:95:7b:8f:
b0:0c:5f:9d:b7:30:64:77:7f:17:62:fe:18:f9:25:
e1:df:c3:e2:95:20:de:7a:f1:e4:7e:73:70:0a:d3:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EB:97:ED:D1:81:44:7E:2C:2C:FD:4E:F4:57:C1:1F:8D:D9:5B:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/712df04b-fd70-33d0-a287-d98e2bf67465.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:e7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:b3:03:36:32:79:db:dd:44:92:f9:90:09:0f:1d:46:f6:bc:
a5:4f:d9:ce:a1:0a:ec:22:d2:1d:d1:a8:ca:af:7b:05:d0:a0:
01:50:c8:af:e3:5a:93:14:18:1d:68:20:45:74:1a:b2:ff:14:
1a:fd:99:04:de:4c:63:52:51:30:86:3b:54:4a:29:5f:7d:f5:
6a:fd:fa:8b:20:2c:9a:a2:25:da:eb:fb:0e:e0:5a:b2:0a:63:
0c:3d:f5:26:5c:be:1b:c1:cb:4b:27:12:f7:3d:a4:7b:c2:86:
14:3d:cf:e0:46:a8:51:c9:d3:68:41:f5:f8:05:f7:e1:71:b4:
46:e7:f5:2a:c2:ee:af:34:45:f7:9f:22:ce:a9:03:0b:fa:18:
23:12:54:04:b4:34:8e:59:9f:d6:2c:94:75:28:f4:f4:9e:9e:
f5:39:44:22:31:87:4f:59:5e:a4:c5:6f:0e:bf:71:8b:d8:21:
61:98:62:0d:ad:eb:9b:06:1d:44:01:17:cc:0a:97:35:bd:23:
29:72:29:b1:05:78:6f:f8:23:96:96:3e:8c:d2:38:1e:4f:61:
73:0e:8c:98:a9:62:60:91:96:82:22:58:10:0d:a5:b4:f4:79:
c6:42:60:0e:e7:1c:93:5d:a4:39:02:28:6a:0b:fc:bb:91:f8:
af:20:88:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:23:02 2025 by rpki-client