Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7db482d3-8002-3beb-b4c4-d7c5c2803cc4.roa
File: 7db482d3-8002-3beb-b4c4-d7c5c2803cc4.roa (raw, json)
Hash identifier: 5Y0/IKw56qZROdRR4kS8co/nwaI7I3Wk2/eT7F2legg=
Subject key identifier: 5E:CA:D6:F3:81:37:BB:ED:B3:2E:51:AD:B4:F6:DF:87:64:F4:B6:F7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847644A2061CE77AA4E6417A700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7db482d3-8002-3beb-b4c4-d7c5c2803cc4.roa
Signing time: Tue 01 Oct 2024 01:30:08 +0000
ROA not before: Tue 01 Oct 2024 01:30:08 +0000
ROA not after: Mon 30 Dec 2024 02:30:08 +0000
asID: 204020
IP address blocks: 2001:470:398::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:64:4a:20:61:ce:77:aa:4e:64:17:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 1 01:30:08 2024 GMT
Not After : Dec 30 02:30:08 2024 GMT
Subject: CN=3a23a692-41fa-4f05-b6ca-696dba4ef121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:4b:44:19:f6:bf:28:92:25:31:80:d0:6a:
36:81:25:c6:b4:82:c8:60:15:07:23:75:ad:c1:57:
63:81:b3:89:e0:72:1c:ed:cb:0b:bf:b0:48:7d:21:
d9:5d:b5:f6:29:7e:d8:4a:04:6a:8e:60:63:5e:a3:
59:8a:da:1d:9b:f8:e6:61:53:3f:60:36:e7:f8:1f:
91:a7:49:bd:60:18:6c:a3:15:16:64:d6:06:95:57:
56:94:21:a4:33:2c:a0:59:5b:da:c7:c7:72:f2:46:
d2:77:dc:7f:57:96:76:11:b1:3f:39:f5:6c:5b:35:
59:eb:e7:70:76:28:44:2d:12:1f:55:93:ce:d9:5e:
8f:8d:b7:4c:06:5a:9b:5c:8f:2c:02:ad:f9:4b:09:
a3:d7:9c:50:1b:10:01:05:c9:51:b0:31:65:db:06:
ee:51:bc:9a:14:48:b6:fe:e9:4c:a0:17:0b:9d:22:
e0:eb:e9:84:d9:e1:d1:7b:a8:fe:f6:67:17:98:42:
b8:c8:c5:c4:b9:7f:e1:e9:85:94:5e:06:97:ee:1e:
03:65:d5:5d:1b:27:7b:3d:b9:6f:b4:d9:5f:5e:cc:
ea:42:49:9f:f3:69:f4:3f:7b:04:23:ce:0c:9d:9d:
1e:7d:46:08:49:8b:49:c3:73:b2:eb:ab:01:56:3b:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CA:D6:F3:81:37:BB:ED:B3:2E:51:AD:B4:F6:DF:87:64:F4:B6:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7db482d3-8002-3beb-b4c4-d7c5c2803cc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:398::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:d3:75:6f:66:f1:0b:d1:db:eb:c6:20:f4:78:69:0e:66:2f:
00:0e:16:f6:27:48:7a:21:12:96:bd:d3:e6:13:43:17:56:8e:
50:30:70:b1:e9:cc:66:18:a6:ca:79:72:e7:b2:4c:f8:da:12:
99:be:53:e7:ea:75:25:60:52:b4:23:bc:bf:d8:83:b9:b4:83:
38:29:b4:19:18:ae:ed:0d:ff:22:c1:de:39:94:dc:b6:54:99:
5c:5f:24:d6:44:71:16:4b:dd:80:84:22:7e:c6:27:49:08:24:
30:87:11:5d:72:e2:ad:e7:3e:9e:34:9d:3e:ab:5a:20:ed:6e:
c7:f7:00:6f:27:a9:d2:76:90:d8:cb:7e:6c:5f:c2:bc:a9:49:
9f:a6:5a:f6:f1:35:33:b5:ae:5d:31:5f:3e:3a:96:fe:4d:28:
fb:66:2d:f7:46:0b:81:ee:f4:7a:c5:84:b5:12:9f:35:50:50:
dd:18:45:46:b1:02:93:52:c4:76:dd:4e:22:d8:de:59:71:d2:
cd:9e:9c:19:ee:85:67:fa:58:ab:bc:1d:af:90:ed:fa:10:7a:
05:d4:10:21:92:32:56:4b:3d:9b:52:3d:23:d7:77:ae:0f:04:
87:c8:2e:c0:00:2e:cf:cc:94:5a:f8:13:b3:86:a4:e9:de:71:
19:47:ef:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:28:18 2025 by rpki-client