Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e802e7e-7b99-3d87-b7f0-223b83103386.roa
File: 9e802e7e-7b99-3d87-b7f0-223b83103386.roa (raw, json)
Hash identifier: ecS3YG0isGnCEwLtQct6VnMeZWAOKGhylKw67mY4+eM=
Subject key identifier: 48:02:92:99:6C:3D:DE:F5:86:3A:BD:E0:5F:3E:E8:A9:3D:88:68:6B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584589A316DE7E2D33DABB46E1F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e802e7e-7b99-3d87-b7f0-223b83103386.roa
Signing time: Sun 14 Apr 2024 01:00:24 +0000
ROA not before: Sun 14 Apr 2024 01:00:24 +0000
ROA not after: Sat 13 Jul 2024 01:00:24 +0000
asID: 31769
IP address blocks: 2001:470:172::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:89:a3:16:de:7e:2d:33:da:bb:46:e1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 14 01:00:24 2024 GMT
Not After : Jul 13 01:00:24 2024 GMT
Subject: CN=da801e8f-4286-4e6b-aaf2-67084ee776ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:54:e2:32:ca:63:2f:88:0b:36:24:e7:38:
ed:12:a2:5a:c7:34:50:55:34:e8:bb:24:8e:db:fe:
66:68:d0:21:f5:fe:d0:15:14:29:df:99:cb:3b:5f:
3a:b2:1a:d2:4a:b6:61:90:fc:0b:cb:98:1d:bb:7f:
78:15:37:24:6e:b1:ff:91:34:79:39:a0:22:ba:d0:
de:41:89:01:c2:20:94:82:9d:c0:9d:9a:55:d1:2f:
2e:f7:6e:2f:3e:91:70:5a:08:dc:c3:42:f6:17:28:
92:b5:bf:f2:75:8c:07:63:2e:26:07:70:f3:00:f4:
55:e1:91:4e:b5:aa:d0:80:a5:00:b0:e2:d2:d8:ff:
02:53:42:ce:1e:46:1d:c4:9b:a3:3e:1c:08:90:43:
ab:e3:7c:d6:df:e6:50:9a:c3:8b:57:72:8f:ba:f2:
12:fb:6a:7e:d7:fe:27:ad:46:0e:c9:4b:c3:6b:ae:
ec:aa:4e:c3:54:af:2e:12:c6:9d:eb:ac:e6:01:27:
73:71:b1:97:45:8b:84:b8:db:7e:49:91:14:3c:b3:
86:41:20:9c:5d:48:e2:6b:8d:73:a1:bc:c1:a7:fb:
88:0f:5f:d2:99:97:d0:2d:fc:50:e8:3e:ef:ef:7c:
dc:6d:ac:0c:e6:84:d8:60:81:b8:e9:87:f4:ee:3d:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:02:92:99:6C:3D:DE:F5:86:3A:BD:E0:5F:3E:E8:A9:3D:88:68:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e802e7e-7b99-3d87-b7f0-223b83103386.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:172::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:53:22:1b:1d:1f:9d:a6:a7:e3:a3:cf:98:c1:87:69:59:e6:
fa:22:40:4d:51:ba:f6:e9:b1:4d:c5:11:6c:25:33:57:b0:06:
a3:6f:89:86:08:4b:53:8a:05:76:89:b8:60:36:39:aa:1e:f7:
23:e3:18:5e:11:79:97:0d:9b:b2:dd:c5:e1:f9:ae:38:d8:8b:
cf:fe:66:b5:14:24:57:58:e2:93:3b:6a:86:61:4a:03:c0:88:
c4:95:7d:fb:e0:ae:c9:20:bd:a1:69:c3:57:46:39:60:c3:83:
67:d1:4a:95:4e:89:7c:3c:8b:9a:f2:d3:cb:96:76:c4:44:81:
bc:e8:8d:16:3b:68:fb:98:4d:b0:bd:fa:54:d3:fb:cd:31:dd:
56:4f:03:a2:c6:67:43:49:5d:ee:39:cb:1b:d9:5a:6a:01:30:
92:fe:07:98:34:e6:98:9b:72:1a:32:c6:85:e2:18:8d:95:8a:
fb:98:b0:36:6f:ad:c5:ec:df:4a:86:92:26:db:dc:35:d2:5f:
99:8b:6a:4a:b8:68:94:74:2a:d9:72:2f:ca:af:df:bf:90:55:
38:b1:0f:0f:b5:65:1b:17:00:5d:13:74:0d:2b:3e:fb:c5:15:
fc:78:ce:b7:43:05:64:bd:c8:4b:e7:e3:49:b1:ff:85:fd:5d:
43:23:c7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:31:08 2025 by rpki-client