Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c6fb7a8-7fdf-3842-99fd-4bfba97c7e42.roa
File: 8c6fb7a8-7fdf-3842-99fd-4bfba97c7e42.roa (raw, json)
Hash identifier: ARpDwYEnhAcwi8KsyZH7JNv7s3+82OHXSnxGlSm+Wy8=
Subject key identifier: BB:1C:DC:49:B6:03:E5:1E:F3:7C:9A:DB:5D:AF:24:87:67:78:65:6E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285844B42F974DD9CD6C11986F3CE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c6fb7a8-7fdf-3842-99fd-4bfba97c7e42.roa
Signing time: Sun 28 Jan 2024 14:00:31 +0000
ROA not before: Sun 28 Jan 2024 14:00:31 +0000
ROA not after: Sat 27 Apr 2024 13:00:31 +0000
asID: 60842
IP address blocks: 2001:470:208::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:b4:2f:97:4d:d9:cd:6c:11:98:6f:3c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 28 14:00:31 2024 GMT
Not After : Apr 27 13:00:31 2024 GMT
Subject: CN=ab449a53-5d04-47e3-be44-7b3bd48c3c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:57:7f:23:17:11:01:2b:37:44:ff:03:81:c4:
e7:29:6f:d0:ee:96:3b:01:d6:4a:40:8b:61:29:bf:
1b:f9:cd:38:82:2e:c6:d9:83:89:b5:93:50:e0:d1:
38:45:48:9b:4b:7c:5e:ac:6a:21:10:11:d5:02:d4:
bb:0d:7c:29:ef:2f:81:c6:cf:cd:c7:a2:ba:c2:01:
69:7c:26:56:22:58:83:01:3e:9f:94:f0:42:a5:3e:
fd:63:56:ee:9e:2e:8b:52:ec:df:e9:77:93:07:f2:
68:c3:21:ae:d7:c5:36:4a:c3:c3:6c:5f:f7:4f:06:
f6:c1:19:d8:4e:2a:1a:4c:f0:6d:5a:63:1b:ae:c9:
f2:56:ea:c8:5f:0e:a9:47:8f:17:81:ae:75:fa:53:
36:83:13:7e:b5:37:9f:d7:34:a5:b5:48:84:18:0f:
85:01:cf:55:9d:e4:e5:d0:ba:81:77:e8:7f:26:60:
cc:60:69:bd:b8:b3:9b:00:10:4d:9a:d7:80:ae:bd:
a9:e0:49:cb:ce:e5:ae:a5:f4:37:b9:28:cc:62:8c:
bb:b1:af:4b:a7:16:f6:bb:70:06:53:6b:8f:cf:6d:
8b:29:e9:da:af:6d:f1:14:30:74:10:20:eb:16:89:
a9:46:90:0a:c0:69:f6:f1:56:66:89:af:71:9d:a5:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1C:DC:49:B6:03:E5:1E:F3:7C:9A:DB:5D:AF:24:87:67:78:65:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c6fb7a8-7fdf-3842-99fd-4bfba97c7e42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:208::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:e2:46:5d:9b:0e:43:9e:19:fa:ce:5d:d8:e4:bd:92:f9:69:
6e:b2:ee:9d:af:e9:b2:eb:84:71:2b:42:00:6c:e0:3f:7f:97:
bf:a1:3a:70:8d:91:99:cb:f5:b1:87:84:e5:a2:dd:06:9d:9a:
51:fe:8e:a0:6c:9b:04:f2:1b:26:6a:8c:bb:29:5b:9e:3f:47:
a7:b0:68:63:81:3b:9e:95:3e:fb:bc:40:f4:48:79:07:49:07:
94:f9:3f:27:fb:f5:c1:f2:41:aa:cf:86:2e:aa:4a:30:96:3e:
29:24:60:f9:dc:f7:e1:d4:ea:b5:ee:70:bf:90:46:9e:3c:36:
ef:5f:76:60:01:18:9d:06:30:67:22:1d:dd:3a:cc:9f:bf:2d:
fe:29:16:84:b3:11:77:0a:3f:85:83:aa:15:23:dd:9b:61:ff:
7a:71:14:94:63:a8:d8:c9:81:75:3d:6b:ab:9a:ca:b1:8a:ba:
41:3d:90:df:d6:87:cf:0b:5c:99:9c:86:72:7f:c6:14:7c:e1:
50:38:fd:56:01:60:f7:95:bd:0f:ca:8b:fb:95:48:96:37:02:
fe:a6:0d:64:ae:5e:e7:bc:49:0c:00:08:d9:12:55:b8:af:78:
f3:e8:cc:3f:57:cc:2e:31:f3:fa:ad:07:12:44:76:db:ec:eb:
c2:01:3c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:50 2025 by rpki-client