Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/951019d7-f498-3b65-b1b3-13e2af4466a7.roa
File: 951019d7-f498-3b65-b1b3-13e2af4466a7.roa (raw, json)
Hash identifier: qi2FmrJZbmAyZxAU0Ay8NpWXa5SsQ24e+9ME1DrTyT0=
Subject key identifier: 65:9B:04:B6:F1:24:F2:31:79:84:94:9D:F4:0B:DD:2B:98:35:7E:F9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A77093FEAED04E6E24BDD80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/951019d7-f498-3b65-b1b3-13e2af4466a7.roa
Signing time: Thu 27 Jun 2024 20:15:36 +0000
ROA not before: Thu 27 Jun 2024 20:15:36 +0000
ROA not after: Wed 25 Sep 2024 20:15:36 +0000
asID: 35075
IP address blocks: 2001:470:2ef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:09:3f:ea:ed:04:e6:e2:4b:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:15:36 2024 GMT
Not After : Sep 25 20:15:36 2024 GMT
Subject: CN=2d5870af-1826-402a-b759-b09eeab8c478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:08:2b:d2:f4:74:ef:df:3c:78:78:68:d1:2e:
d2:5c:a0:4c:61:27:8e:00:34:1b:58:19:01:d5:5f:
cb:67:e9:d4:3c:8a:5b:72:26:0e:7c:7a:8b:d1:c3:
78:35:99:ce:fa:35:14:23:79:1a:14:3e:4c:66:8b:
b0:c0:30:ad:15:e0:3f:b3:04:00:ac:69:8f:42:2d:
22:39:0d:fe:57:c9:3b:71:6f:a3:42:df:cf:57:8d:
df:96:bb:18:eb:88:fa:95:2c:20:a4:81:9b:78:2e:
44:78:6f:f4:17:30:2e:d9:7b:ab:e7:bd:57:a6:0f:
66:eb:33:8d:e3:7a:27:7b:c6:8a:d8:f1:45:a5:13:
76:a7:b3:17:c8:78:8c:e6:fe:cb:e0:50:8c:0f:b7:
a9:ef:b9:98:a2:85:72:fd:29:40:31:db:50:73:b2:
64:80:c9:9e:83:1b:04:78:81:3b:09:f5:b5:bc:71:
88:53:af:31:74:02:7d:2b:16:9c:24:a2:c1:a6:1c:
aa:ee:71:d1:9d:e6:cd:4b:ff:cc:ac:6c:36:1a:4b:
bb:00:00:06:0f:14:57:be:93:34:37:f8:63:2f:ae:
75:53:1a:3f:0a:d3:a3:2f:d1:4b:ab:74:3b:d8:7a:
4f:70:db:54:e0:d2:45:da:cd:d6:7a:be:91:c2:dd:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9B:04:B6:F1:24:F2:31:79:84:94:9D:F4:0B:DD:2B:98:35:7E:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/951019d7-f498-3b65-b1b3-13e2af4466a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:c2:6c:71:9f:26:55:e4:c4:eb:46:37:0f:f5:1c:0b:8f:cc:
9a:10:62:1e:be:59:61:73:23:cf:86:dc:a9:db:6d:06:e7:8f:
11:d2:14:26:23:1c:c1:e0:bd:11:7c:09:bc:f0:20:e8:7c:98:
d0:f6:af:6b:b4:b2:9f:4d:16:a0:eb:bc:da:95:83:cb:76:19:
e2:45:be:15:bc:d7:29:06:4c:39:d9:d8:cb:6d:a5:ca:a6:12:
aa:7f:a6:c3:76:40:65:83:39:d6:a9:c6:53:f8:fc:a5:5a:db:
d8:5b:38:96:d9:45:b1:17:e5:3f:74:75:d3:65:57:8f:c5:01:
24:b7:45:a5:fa:eb:16:33:6a:ab:ee:a0:35:2e:cc:0d:10:91:
97:a1:bf:56:bc:f1:0a:f5:52:08:0a:24:f9:1b:a4:ce:07:8d:
21:a9:27:a1:4a:4a:31:44:f3:b9:80:4a:56:0b:c2:23:c1:e2:
f1:3e:b4:16:de:65:f2:6e:88:2e:bf:4f:64:7c:9c:7b:35:1b:
57:44:20:56:cb:6e:7c:9e:83:ab:5d:63:b8:2c:8a:82:01:ce:
83:df:34:55:5c:3e:cc:50:01:bf:20:a3:59:95:8c:a8:53:2d:
7d:0c:5e:42:53:42:3d:17:0b:b5:55:0d:7a:d1:35:b6:1f:5a:
68:90:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:06 2025 by rpki-client