Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/965b1f17-1438-37af-a79b-9f94308c434e.roa
File: 965b1f17-1438-37af-a79b-9f94308c434e.roa (raw, json)
Hash identifier: Ws3hd1KpGENE8qgLM0JqZSbk0edjGIPs2XVtKRThVBY=
Subject key identifier: 1C:1C:FF:10:AA:CB:3E:43:18:98:4B:C0:35:57:CD:AA:E2:AB:96:80
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846313346C1A94DB03709D367C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/965b1f17-1438-37af-a79b-9f94308c434e.roa
Signing time: Thu 13 Jun 2024 01:30:56 +0000
ROA not before: Thu 13 Jun 2024 01:30:56 +0000
ROA not after: Wed 11 Sep 2024 01:30:56 +0000
asID: 270928
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:31:33:46:c1:a9:4d:b0:37:09:d3:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 13 01:30:56 2024 GMT
Not After : Sep 11 01:30:56 2024 GMT
Subject: CN=c2d93657-02b3-46dd-8298-a039ef47bbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:66:f1:3e:62:b9:14:ef:d2:75:90:1a:25:
1a:da:0b:d6:dc:a8:55:89:6b:cc:a1:e6:57:60:ed:
6c:c9:07:d9:d5:25:83:ba:59:ce:d5:3a:56:85:ee:
36:5e:a7:0c:c3:bf:10:f1:d3:05:4b:e2:8a:40:4b:
da:21:ba:9d:7d:3b:41:b0:66:6d:e5:8c:e5:49:78:
6f:61:54:9d:92:2f:40:5b:36:75:f3:18:ba:8e:84:
79:8a:71:81:95:44:db:52:00:5d:04:c2:cb:e5:af:
9a:cf:da:7f:b9:b5:18:81:86:13:42:95:9c:ed:e2:
03:cb:d1:31:6f:d1:bf:45:83:f5:e4:f5:e3:93:1e:
61:69:8b:46:34:80:1c:5c:e1:90:94:06:2b:11:b0:
ed:1f:6e:de:31:20:fd:8c:50:a1:b0:b3:f8:aa:9c:
f3:4c:87:6b:ec:78:15:2e:3d:fb:50:25:d7:d2:42:
56:32:92:80:f4:27:55:01:f4:09:98:2d:f2:ad:a6:
98:5a:85:39:0a:51:66:93:c0:a7:72:8b:a7:95:f6:
ce:b1:5e:0d:44:ed:42:c8:52:4c:82:db:dc:18:ca:
65:cc:1c:62:f0:46:dc:fe:15:cb:de:42:ad:64:0e:
d2:36:56:96:86:93:ab:15:b9:22:5f:14:4b:af:89:
b3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1C:FF:10:AA:CB:3E:43:18:98:4B:C0:35:57:CD:AA:E2:AB:96:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/965b1f17-1438-37af-a79b-9f94308c434e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:1e:61:c6:b2:03:f4:a8:0c:8a:f8:09:9b:e3:85:d1:08:16:
12:ee:1d:bd:12:8f:43:a2:b9:5e:5e:79:32:1b:f7:70:57:68:
0a:1e:05:9b:e4:89:40:40:18:bf:a2:76:0d:e3:d5:d2:52:cc:
89:e8:f5:40:7f:f3:a6:6c:78:c0:0e:3e:c3:96:66:60:28:93:
ec:5c:76:c6:3f:c6:0d:93:d0:11:4b:03:73:db:19:84:ab:01:
a1:d7:13:0a:23:1a:af:33:be:09:0e:8d:71:2c:b9:d7:d0:bf:
da:57:24:77:5d:c2:91:2c:89:3d:e8:ff:a5:cb:f9:eb:74:0a:
51:d3:da:f8:df:28:1a:44:0d:a0:74:30:03:62:fe:63:c3:9e:
74:c5:35:62:c4:76:28:8e:8a:26:54:00:a5:b1:e3:48:c8:54:
37:0d:49:da:cf:2e:93:5f:b2:d9:2e:4d:7e:53:07:26:60:fc:
81:fd:59:38:eb:71:6c:70:7b:22:f8:d2:c7:67:87:0b:be:27:
ee:a1:a4:e2:99:30:a3:54:7f:1c:e2:5d:fb:ff:cc:fa:32:3f:
a2:d4:4f:5c:7c:35:c8:9d:09:86:17:67:8a:aa:0b:ce:9a:49:
dc:6d:10:50:2f:36:57:10:33:d0:bd:f7:0b:e4:cb:a6:69:0c:
37:67:e6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:41:43 2025 by rpki-client