Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/995db78f-29b8-3372-b44d-be5e5a4a85d2.roa
File: 995db78f-29b8-3372-b44d-be5e5a4a85d2.roa (raw, json)
Hash identifier: yj+bgQv6vzFA0bOFDtRGt+2dS0+jLSPHxurFFejHwXE=
Subject key identifier: A1:08:B8:2E:D0:3C:17:46:79:04:78:C6:68:6C:1C:AC:95:27:F5:CE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858484D757F3866D22F28AE4BE0C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/995db78f-29b8-3372-b44d-be5e5a4a85d2.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 150218
IP address blocks: 2001:470:39f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:7f:38:66:d2:2f:28:ae:4b:e0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=f0570dfd-a4d9-4d5b-9de2-3cbc9d1e0196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:fa:f0:db:4e:f9:c7:f4:64:c8:db:fb:64:
9d:b0:5f:df:dc:b9:d3:90:85:45:2f:71:92:4f:dc:
d8:9f:12:8e:69:da:3e:ba:3b:fc:80:07:54:df:42:
cd:8d:6e:48:a3:d2:00:b5:87:65:ae:66:99:9e:bb:
23:a9:81:e9:e5:51:b5:42:a8:ba:53:9b:91:24:d2:
be:f1:48:bc:8c:b2:eb:be:05:c7:9f:34:44:a7:2d:
c3:59:52:79:4c:8d:5f:b2:ce:1f:48:70:28:a8:a5:
b2:64:a6:da:52:43:34:36:1b:e8:ac:7c:89:07:c3:
97:92:2c:15:8e:94:6e:b0:ec:9f:41:82:3d:6a:e1:
6b:82:05:c2:e1:28:cc:1b:b1:cb:18:8c:fa:d8:d7:
c8:34:7f:3d:40:be:d1:cf:59:ce:2b:d2:7a:df:c0:
a2:c6:2b:38:d2:08:9f:41:29:35:6b:73:b5:ce:5b:
85:6b:e4:1d:61:8d:c1:b5:c1:3f:65:83:a8:45:c4:
8e:56:40:0b:95:ef:af:c3:ae:9a:35:7d:2d:14:0f:
59:39:7d:e4:e3:59:67:61:8d:89:90:96:b9:3d:89:
fa:7c:e2:72:cd:04:b8:99:ef:25:c6:3b:bf:3d:a9:
7c:65:df:b3:d5:5f:7c:37:a0:d1:7b:9f:b9:70:20:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:B8:2E:D0:3C:17:46:79:04:78:C6:68:6C:1C:AC:95:27:F5:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/995db78f-29b8-3372-b44d-be5e5a4a85d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:39f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:c0:bd:0d:47:e6:a0:d2:e2:e0:1e:d6:59:cd:1d:75:f8:cb:
c0:c4:e3:ba:94:41:a5:fd:f2:41:bc:e9:bf:e2:ce:a2:cb:eb:
65:17:34:fd:47:31:5e:a9:fa:b0:c7:2a:66:e7:bc:52:a4:ef:
94:bb:1d:9f:1d:87:27:a3:15:90:fd:50:d5:f2:29:b1:89:d1:
43:a1:d3:5a:53:48:76:68:54:cc:95:f1:9d:24:9c:4b:3a:02:
7d:a2:d7:56:33:12:39:a5:3f:4c:e9:fa:17:54:85:6a:78:93:
ee:e0:2e:9e:55:fc:0e:81:ad:98:90:e0:3a:1b:bc:e6:3a:00:
b8:25:7f:44:4d:5e:2b:cb:6b:b5:0b:63:4d:f8:d8:02:e5:80:
94:18:3e:1e:3b:8d:a9:a5:32:dc:1e:55:ea:c7:35:b7:77:b5:
c7:83:48:98:6d:d1:dc:69:73:2c:97:50:e2:76:48:77:f2:1a:
31:fb:37:af:e3:5d:17:97:6d:83:24:6e:96:10:0f:e9:23:6a:
78:89:c5:b1:96:5c:f3:0b:51:04:74:b7:b9:99:84:84:bd:f3:
f8:64:ea:4b:dc:49:24:54:6c:33:15:04:c8:8a:28:d7:e4:ff:
5e:ed:09:a6:c6:ff:68:60:3b:1b:93:64:1c:ae:cd:73:77:06:
d1:6c:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:23:15 2025 by rpki-client