Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9ecee411-1d5c-3bf7-aa54-503d5f41fba1.roa
File: 9ecee411-1d5c-3bf7-aa54-503d5f41fba1.roa (raw, json)
Hash identifier: MadTRebA1gDLAcJBsqDQctTmmXUDUV7ZG7SThx+ZXDo=
Subject key identifier: BC:74:0A:44:D8:AF:A8:2F:BB:23:19:BA:4B:F6:CD:95:26:7A:16:89
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A7744148CCBF301CDDA4500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9ecee411-1d5c-3bf7-aa54-503d5f41fba1.roa
Signing time: Thu 27 Jun 2024 20:16:04 +0000
ROA not before: Thu 27 Jun 2024 20:16:04 +0000
ROA not after: Wed 25 Sep 2024 20:16:04 +0000
asID: 36902
IP address blocks: 2001:470:30d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:44:14:8c:cb:f3:01:cd:da:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:16:04 2024 GMT
Not After : Sep 25 20:16:04 2024 GMT
Subject: CN=d3771a1b-403d-46a6-8da2-74f875d1441b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:cb:26:76:26:09:fe:42:67:36:7a:18:2d:
eb:3c:73:30:22:ff:05:1d:d6:54:f6:ab:9d:e7:ff:
c7:c2:37:5a:74:70:42:7f:68:f8:b8:6c:38:2d:3d:
3d:e9:4d:1c:64:af:58:c8:0d:70:13:1d:04:47:9e:
8f:8e:4f:29:0c:39:0e:6e:8b:44:4b:33:6d:38:62:
01:b1:db:c6:70:5c:cf:37:ca:c3:e3:e5:9b:7a:39:
10:13:87:82:6d:70:cf:d5:d3:2a:7b:2d:f8:6d:19:
dc:d5:b0:89:7b:aa:01:77:dd:87:d9:22:d4:b3:3b:
06:f5:08:10:a0:7b:56:4b:db:3c:d5:bd:ba:95:d1:
eb:d1:c2:72:3f:d0:0c:a0:b6:73:61:2e:f2:3b:26:
46:49:a2:b5:09:9d:f4:15:77:e2:f7:46:f9:8a:57:
27:ec:c6:0f:5c:4d:eb:6c:dd:5a:b8:1f:c7:56:ce:
b8:74:8c:80:0a:f9:6a:f7:ad:12:00:13:a2:a4:f6:
0e:74:6e:88:a2:26:81:29:da:30:d7:d4:d9:0f:17:
c6:0e:69:2c:b3:44:67:7f:80:7b:45:d6:5f:b6:2f:
52:92:5a:2e:e4:f4:43:ab:08:da:9a:a5:a4:6b:3d:
21:6e:ed:e8:b1:a1:83:8c:02:7c:9c:36:5f:ff:4c:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:74:0A:44:D8:AF:A8:2F:BB:23:19:BA:4B:F6:CD:95:26:7A:16:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9ecee411-1d5c-3bf7-aa54-503d5f41fba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:30d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:c2:b2:6c:7b:fd:81:b0:b4:5a:ec:6a:c6:1a:a6:9f:8c:53:
02:0f:01:23:4d:b2:3d:e2:d1:a5:cc:da:a8:70:21:34:86:46:
8b:de:00:4a:1b:6f:a4:ba:f4:9a:91:ea:10:d3:cb:9b:21:b8:
08:af:35:62:5f:c0:9b:e2:00:69:0e:12:84:10:a4:e7:95:fb:
0c:a3:d7:c2:19:99:17:ef:1e:1c:6b:ce:aa:5c:0c:49:15:a7:
a1:8d:56:66:c8:d1:0a:fb:08:22:14:23:26:a1:08:5b:ae:87:
51:2f:ac:a7:8f:d3:4e:b1:1f:e7:a1:84:2d:32:db:42:8a:62:
5e:e2:49:70:77:76:c0:d8:f6:3f:b8:61:10:42:76:ca:c2:2e:
d9:b7:f2:2e:ad:2a:d0:52:82:63:1a:06:8f:eb:04:9b:47:ad:
0e:fb:b2:8b:67:54:21:78:41:71:22:bf:05:b8:17:b2:d0:92:
bb:f5:15:28:cc:38:b4:b7:f7:04:38:07:8d:b1:19:c4:e2:7d:
84:ac:88:10:83:2d:c7:07:39:20:8d:63:15:d9:ea:e5:a0:d2:
f1:da:2f:00:bf:c9:f6:7a:7c:e0:bb:fe:4b:b2:ac:f5:2b:4b:
ff:45:29:71:c5:b2:ad:9b:10:4a:91:e3:9c:18:95:48:58:e4:
ce:8b:3e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:35:27 2025 by rpki-client