Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f5047d6-2770-3003-983e-5d78b8501d93.roa
File: 8f5047d6-2770-3003-983e-5d78b8501d93.roa (raw, json)
Hash identifier: ewwSJHKV4lTfFPrOQNaGhZO9JzOLWvwf4ZfFZkz05WM=
Subject key identifier: 85:A0:0E:E0:49:73:2C:9E:FB:1A:67:55:9A:14:A4:21:00:A3:F2:5E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858463AE9A5BD346401C118945A20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f5047d6-2770-3003-983e-5d78b8501d93.roa
Signing time: Sun 16 Jun 2024 13:00:33 +0000
ROA not before: Sun 16 Jun 2024 13:00:33 +0000
ROA not after: Sat 14 Sep 2024 13:00:33 +0000
asID: 22168
IP address blocks: 2001:470:2cc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:3a:e9:a5:bd:34:64:01:c1:18:94:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 16 13:00:33 2024 GMT
Not After : Sep 14 13:00:33 2024 GMT
Subject: CN=395a34a5-aefe-4d82-8aa4-ee68ef3e4eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:1b:e3:57:a5:49:2c:17:89:76:25:0b:f4:
7f:16:79:71:74:c6:f2:e1:9f:3e:ef:bd:92:4f:bf:
71:5c:ff:29:7d:5b:5c:10:13:58:49:67:9c:fa:22:
65:b1:2e:0c:aa:3a:d9:63:fd:91:b5:1e:0a:bd:fd:
06:58:0b:9a:44:f0:7f:f0:fd:03:96:6c:ce:b2:83:
15:86:25:36:92:0d:ed:8d:63:af:c8:a4:b7:88:ca:
46:3e:a1:47:7f:7f:72:ca:15:0b:c8:1a:71:1c:81:
73:23:d6:a9:d8:d0:1a:1c:68:43:5c:bc:db:31:6f:
e0:c1:6a:bf:1d:03:d6:07:17:db:c4:55:bf:5b:9e:
57:f1:da:cc:49:6b:c8:10:8c:34:7d:58:d7:85:e3:
e7:c8:36:70:25:db:8a:44:b7:21:de:7a:5d:e3:1d:
dc:d4:27:d5:46:99:34:6a:70:e5:d2:fa:4b:fc:3c:
d3:96:eb:fe:88:29:d3:8a:fb:55:81:98:db:e3:c2:
50:32:5b:2b:13:30:ef:14:88:3d:f7:66:6c:26:94:
03:e4:51:bd:c0:0f:24:c6:53:c6:0a:5d:e0:e8:f5:
8c:21:ec:7c:e6:75:91:f7:bd:bb:3d:6a:0f:95:a9:
86:a4:52:4d:3a:3c:9e:2b:63:de:85:c8:fc:58:07:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A0:0E:E0:49:73:2C:9E:FB:1A:67:55:9A:14:A4:21:00:A3:F2:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f5047d6-2770-3003-983e-5d78b8501d93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2cc::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:f7:4e:b7:bc:ff:46:b6:07:6a:fa:75:8d:af:8e:7c:ec:a0:
91:e7:ec:15:3d:36:ab:c4:b5:f0:25:10:ac:71:d6:df:a5:79:
b6:c4:d7:6d:46:2d:7e:fd:35:92:61:bb:0d:b3:02:96:5f:86:
9c:80:f0:17:c2:96:f5:f8:6a:34:5f:f8:8b:78:37:9e:f9:b5:
76:4b:36:75:c7:69:53:7c:32:fa:71:88:e4:00:78:76:70:2a:
e9:67:ec:1b:4e:b2:c1:0d:a4:e7:85:4d:2a:52:59:b2:95:1e:
18:13:72:2b:88:4b:6d:d6:5c:2b:6e:48:4b:40:7c:3b:97:3a:
dc:c3:9f:76:3f:24:cd:45:b0:40:18:cf:22:0a:e1:91:3b:a7:
a5:87:3a:93:61:86:aa:13:98:3a:47:09:6c:a8:98:ea:b2:53:
06:fb:5b:23:67:a4:16:2b:4d:2e:85:e0:35:b9:18:bd:31:66:
46:64:e8:ea:7d:ff:55:9c:c4:46:67:9f:d7:f3:1f:0f:19:46:
a5:e7:89:86:57:c5:20:8c:0f:35:10:10:b4:05:88:fd:d4:53:
bf:8e:ea:9e:19:16:97:42:de:b9:55:10:2e:1a:e1:3c:45:65:
2c:6d:29:51:f8:4c:ea:33:a3:17:3c:98:8f:97:66:22:79:aa:
78:b3:35:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:12 2025 by rpki-client