Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9d77f8d5-abaa-3147-b6fc-c9e6a2666507.roa
File: 9d77f8d5-abaa-3147-b6fc-c9e6a2666507.roa (raw, json)
Hash identifier: L7nzJqIJR/HAjlBix98ImS8a6Qo6lKDdZnXQ5aM7pts=
Subject key identifier: 4B:3C:FC:72:EB:AA:37:9C:E5:E0:52:3A:1D:A7:82:64:FC:5D:E7:7D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845F7E944218051709959F212C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9d77f8d5-abaa-3147-b6fc-c9e6a2666507.roa
Signing time: Thu 23 May 2024 13:00:34 +0000
ROA not before: Thu 23 May 2024 13:00:34 +0000
ROA not after: Wed 21 Aug 2024 13:00:34 +0000
asID: 140577
IP address blocks: 2001:470:24a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f7:e9:44:21:80:51:70:99:59:f2:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 23 13:00:34 2024 GMT
Not After : Aug 21 13:00:34 2024 GMT
Subject: CN=d67673f0-616f-4cc8-8e4c-ae2e1f0aa334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9b:07:67:ea:f3:ad:0a:a9:0d:20:cb:c5:f3:
d8:84:47:95:d7:c7:79:09:38:f7:79:71:63:c4:90:
02:7b:85:66:ab:57:2e:11:cf:6a:1f:47:c7:a5:0d:
dd:17:51:37:0b:8a:2a:e2:f8:00:49:0b:23:c3:82:
dd:f9:1c:fd:fe:21:61:31:fd:dc:34:b8:04:3f:5e:
e2:86:8f:5e:f6:33:57:c6:c5:1a:d1:81:04:58:43:
7b:a4:26:85:f5:33:a4:cb:dd:bb:b3:14:e2:ac:c8:
b1:3b:a3:4c:75:85:50:8d:c2:76:d2:8a:84:4a:69:
87:ac:b7:f6:5b:b9:fa:7d:5e:d7:b6:7d:b0:b2:1a:
e4:fb:6f:37:29:79:c5:40:7a:34:69:2c:d5:a8:13:
7b:8b:53:dd:8f:3b:2a:0c:45:ef:fa:a8:8c:94:73:
c9:dc:6f:56:e5:cd:a1:f5:b0:1f:bb:1e:90:54:7d:
73:2f:75:e0:4a:5a:af:bd:42:64:82:a5:de:70:ad:
83:b9:16:ee:55:68:30:7d:73:69:a7:39:eb:16:6d:
66:4b:f9:78:99:e9:26:38:eb:51:01:12:fb:41:24:
51:92:00:22:f5:0e:b3:60:22:47:98:f0:59:77:15:
3a:cd:c2:6f:06:f3:54:69:a5:d3:dd:38:98:9f:f6:
ec:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:FC:72:EB:AA:37:9C:E5:E0:52:3A:1D:A7:82:64:FC:5D:E7:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9d77f8d5-abaa-3147-b6fc-c9e6a2666507.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:24a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:0c:24:68:7c:ce:1d:68:94:a7:36:f7:c0:34:7b:9c:3a:80:
ea:88:67:26:3f:d4:df:07:ab:9b:68:aa:92:0b:c0:bb:fa:c0:
7e:a6:16:b8:a7:5a:51:6f:23:38:55:d4:b0:92:5f:91:f8:1c:
f6:4b:40:28:b6:e2:77:4e:10:33:4b:dc:49:25:03:b3:7a:d1:
27:2a:68:8b:86:93:29:e3:0d:ec:87:9d:16:64:5a:d6:19:a7:
c3:e2:95:75:a7:90:01:08:cf:a5:0e:79:2a:cf:e6:5f:31:fe:
19:70:a0:40:23:25:04:15:e2:33:d0:ae:9a:0e:4a:2e:22:58:
62:01:d0:c0:8d:6c:18:88:5f:bb:73:34:b7:be:9e:b1:7b:da:
dc:1a:bc:0c:06:94:da:88:8f:95:df:21:31:c5:38:8a:5f:b8:
46:01:ea:3e:c5:61:ff:5d:df:7a:f2:60:d0:55:5e:49:5e:fe:
be:50:75:6b:6c:46:40:94:82:be:64:cd:84:0b:f3:1d:b1:42:
73:0b:4b:03:bf:f2:ef:09:48:8f:c1:69:9f:2a:1b:9d:3d:4c:
9f:3f:3c:31:f0:40:ae:69:fd:d2:84:99:0a:67:18:90:fd:cb:
69:cd:71:46:1e:55:f5:96:0b:78:5c:0a:63:bb:8e:38:a3:17:
17:dc:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:34:09 2025 by rpki-client