Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88852551-09fc-3afd-be31-a45e3dd310f3.roa
File: 88852551-09fc-3afd-be31-a45e3dd310f3.roa (raw, json)
Hash identifier: rCql673sgBHZxir9cc7rONQmxuTpiJX4oaAWu6+PZ/s=
Subject key identifier: A3:DA:98:55:A7:A6:87:97:29:C1:1A:60:79:92:1A:52:EA:06:50:17
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584631334F4FC0733CE61FA26A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88852551-09fc-3afd-be31-a45e3dd310f3.roa
Signing time: Thu 13 Jun 2024 01:31:00 +0000
ROA not before: Thu 13 Jun 2024 01:31:00 +0000
ROA not after: Wed 11 Sep 2024 01:31:00 +0000
asID: 329386
IP address blocks: 2001:470:2ef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:31:33:4f:4f:c0:73:3c:e6:1f:a2:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 13 01:31:00 2024 GMT
Not After : Sep 11 01:31:00 2024 GMT
Subject: CN=e8a010d3-4788-48c7-8842-abbb600d621b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:ac:f1:6c:51:b7:64:a9:94:84:00:52:e2:
09:ef:3c:16:ca:af:fd:73:af:e0:ad:62:ef:4e:2b:
53:84:e0:13:ee:c8:64:1a:67:7d:67:fc:e8:bd:ff:
2d:8b:7e:51:88:b1:78:66:10:2a:1e:1d:b3:26:a5:
e8:c1:ac:d8:80:14:1e:ec:71:e5:24:4c:09:37:9f:
74:6b:04:e6:3a:f0:00:cf:c4:92:2a:5c:47:91:27:
a9:a7:dc:c5:42:c9:02:0d:a5:9f:32:ec:62:c6:5b:
46:46:6f:67:45:07:a5:cf:67:92:0a:0b:92:18:b4:
14:03:91:40:09:3f:8e:7d:0a:a4:5c:a1:bb:10:60:
2d:b8:c6:d1:e9:ac:a0:d4:bc:5e:62:6d:2e:b6:cb:
f9:b8:ad:1c:28:d6:c0:d7:22:c2:f4:7c:b3:ec:5f:
c9:ab:d9:80:5a:e1:72:69:b8:8a:6e:b7:d9:7c:ff:
ff:b0:4f:d5:41:41:60:54:4b:89:fe:15:60:a2:a7:
ef:61:aa:b7:3a:76:3b:26:98:aa:6c:75:c5:f4:83:
52:f3:23:33:ca:21:ac:74:2d:9c:af:07:2c:a5:d8:
1a:4c:67:06:e8:27:8c:5d:5d:94:f3:69:a8:fa:83:
b3:46:19:12:1b:0f:fe:fa:1e:c8:3c:8d:33:55:7a:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DA:98:55:A7:A6:87:97:29:C1:1A:60:79:92:1A:52:EA:06:50:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88852551-09fc-3afd-be31-a45e3dd310f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:97:25:e7:6c:ae:1e:03:09:e0:f0:65:c0:5a:0c:52:46:fb:
f5:b9:49:78:ad:68:52:3e:72:e5:d5:fd:e0:95:2f:01:5a:5a:
35:56:f8:d6:a8:d6:e2:cc:06:dc:87:f4:bb:b2:5e:96:1e:95:
41:03:7b:52:f8:5d:2a:25:77:1b:ee:77:eb:99:41:1e:e5:24:
fe:08:4d:9a:ed:bb:c3:8b:d8:bc:e2:5e:a6:78:7b:40:3c:cd:
89:44:08:69:af:78:e6:a1:d2:0c:12:9b:67:50:62:30:e7:5d:
64:77:cd:bd:fd:07:2d:ae:ea:39:34:ff:bb:d6:a9:77:13:c5:
69:e6:09:98:6a:d9:a4:e1:31:2c:0f:02:3e:55:48:c2:0d:7a:
2c:1e:fb:bd:65:09:2b:6a:3d:54:54:0d:30:aa:b9:4d:dd:82:
3a:5f:38:0e:ee:c7:8e:80:cd:e1:2b:57:5e:e9:92:6d:65:06:
34:19:0c:02:f4:1a:9f:9b:cd:01:b5:84:71:48:0c:ee:9b:45:
c8:5f:05:78:f7:a6:41:10:df:d2:82:5d:2f:2c:4b:e9:37:94:
72:b2:79:cf:b7:01:55:23:c5:e9:d8:77:9f:52:1f:c3:ee:f6:
d9:12:18:b3:35:db:f3:94:b4:d3:5e:8c:57:17:ff:a7:81:e6:
af:0f:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:40:13 2025 by rpki-client