Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8999dfb2-49d7-365a-92d7-2c2cd8eda31d.roa
File: 8999dfb2-49d7-365a-92d7-2c2cd8eda31d.roa (raw, json)
Hash identifier: DyZDoPkIViN/LYMorBhVlX0G+z4Ixs5Mcvc1JeI4ZWM=
Subject key identifier: B7:C9:C6:C6:48:7B:B7:7E:CD:27:DE:54:EF:4E:2D:1C:E0:CD:E1:C0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846B733B5A595123291C6A7E300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8999dfb2-49d7-365a-92d7-2c2cd8eda31d.roa
Signing time: Wed 31 Jul 2024 01:30:08 +0000
ROA not before: Wed 31 Jul 2024 01:30:08 +0000
ROA not after: Tue 29 Oct 2024 01:30:08 +0000
asID: 204992
IP address blocks: 2001:470:31a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b7:33:b5:a5:95:12:32:91:c6:a7:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 31 01:30:08 2024 GMT
Not After : Oct 29 01:30:08 2024 GMT
Subject: CN=4fc26ab7-e5ec-4fa4-a35b-dab7eeeb2e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:dd:f3:01:37:3d:e2:13:84:82:0d:a3:e8:
70:64:f8:22:9d:78:6b:71:ce:7c:e0:72:95:4a:e9:
79:d5:73:34:48:80:55:80:2f:51:7e:43:d8:00:8f:
62:be:2d:ca:e6:98:24:a7:c8:b3:6e:be:e1:55:93:
52:f5:9d:95:26:a5:09:ba:c5:b7:e8:76:19:73:94:
1c:5f:4e:b2:3f:3e:f9:3c:a1:94:26:e1:f9:5c:ab:
82:31:4f:69:7a:b0:bf:de:c8:da:5a:63:7a:b5:f5:
a1:8e:13:b9:b0:d0:6d:f5:97:7a:a4:66:18:93:75:
d2:60:d0:3a:7e:19:8f:ed:d6:31:83:7e:fa:e1:32:
16:c0:5c:45:d9:a5:1f:68:16:2f:c8:cc:e7:d9:a0:
2e:9c:08:b7:89:38:b9:7e:58:f6:e4:a3:4e:39:6f:
b1:0d:0f:5b:c4:00:d3:ad:c8:97:ff:e2:cc:88:b0:
35:69:4e:d3:59:56:ae:4e:e2:be:c5:3a:fa:35:4b:
2e:0b:c5:d4:90:d1:23:2c:67:b5:7a:cc:c9:73:90:
e7:30:b8:fd:31:8b:3e:fc:3b:16:03:dc:ef:20:31:
84:46:aa:70:93:32:5d:c6:b4:81:4b:33:af:11:dd:
04:a5:de:08:91:7f:9a:89:04:0e:3d:c8:63:92:8f:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C9:C6:C6:48:7B:B7:7E:CD:27:DE:54:EF:4E:2D:1C:E0:CD:E1:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8999dfb2-49d7-365a-92d7-2c2cd8eda31d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:31a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:a9:85:dd:49:86:1b:36:0e:fe:04:27:44:8c:0f:94:4f:3f:
8c:f9:a3:40:06:3e:c3:01:38:e4:2e:d0:24:0a:22:25:2e:52:
d2:2f:69:34:8b:bb:3a:ff:ed:87:c0:c4:5a:29:53:6d:81:3e:
8d:e6:78:9a:93:62:90:e3:54:fe:c7:79:b1:7d:63:7f:f4:ae:
9f:1a:5a:0a:46:91:bc:7f:2c:ba:cd:68:48:dd:0a:cb:0e:22:
a1:90:20:52:ee:7f:65:32:d0:21:d6:84:64:6a:fe:f2:9f:49:
0a:6b:9c:5b:03:1e:63:54:dc:a0:cb:a3:55:aa:12:2d:28:45:
16:d5:68:d5:53:74:87:8f:0a:b9:22:e5:53:07:a4:26:8d:17:
37:e4:e5:6e:20:78:dd:d7:a0:a6:73:4e:29:b4:3b:65:a8:be:
7b:df:82:7b:a8:fd:3d:94:00:5c:ed:95:6c:a5:78:15:c8:5f:
a1:87:a8:1e:83:21:7f:ea:18:f3:8e:d7:fb:c1:5e:b3:e9:a4:
b0:cd:d4:54:93:99:b1:b3:19:50:a1:e5:a3:03:a6:48:41:64:
a2:51:a7:40:49:78:36:4b:1d:82:0d:72:c5:34:b1:d7:ea:cb:
6a:ea:e0:3e:a3:98:33:13:c8:ca:21:15:cd:87:96:3b:95:2a:
94:b0:4d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:24:46 2025 by rpki-client