Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1824566-8c44-3023-af1b-6ebd63711d12.roa
File: a1824566-8c44-3023-af1b-6ebd63711d12.roa (raw, json)
Hash identifier: 9K7/gq/Q00VKbNAsTRxV/Bt3V0SGsDFrNu9X1rxfWhc=
Subject key identifier: E1:13:DA:5F:A9:DE:40:47:2D:2C:7A:8B:BC:F0:2E:D9:0F:D1:77:B0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858460B74212637294BBEB63DE6C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1824566-8c44-3023-af1b-6ebd63711d12.roa
Signing time: Thu 30 May 2024 13:00:34 +0000
ROA not before: Thu 30 May 2024 13:00:34 +0000
ROA not after: Wed 28 Aug 2024 13:00:34 +0000
asID: 3855
IP address blocks: 2001:470:1cb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:0b:74:21:26:37:29:4b:be:b6:3d:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 30 13:00:34 2024 GMT
Not After : Aug 28 13:00:34 2024 GMT
Subject: CN=b64d21a9-9d22-4c4f-89af-29168073a2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:65:99:63:1b:c9:4a:a7:aa:7e:97:b0:df:
a9:67:13:e3:bb:a5:c8:1a:36:c0:dc:24:d4:51:da:
aa:0c:02:74:91:47:2e:1c:60:17:45:7a:4d:a1:eb:
9a:3b:98:8b:f0:c8:1b:68:c8:dd:71:29:9d:77:fe:
5d:37:81:fb:ba:4d:97:83:38:4a:a3:e3:78:20:35:
cb:5c:d6:5f:20:be:9a:8f:20:15:7a:e3:24:47:42:
bb:55:64:05:cc:a6:00:a5:af:61:dd:13:70:ab:ea:
c3:0e:51:f7:32:d3:7e:ba:50:c2:d3:34:96:8d:cb:
3e:55:fe:d4:8d:81:03:26:03:5c:39:d0:7a:19:2c:
0f:e3:df:a7:fe:3d:94:77:fb:c6:f0:7b:4c:5b:ec:
24:28:ed:3c:19:53:06:b0:ee:44:22:3b:7c:df:25:
ea:3b:88:a9:89:fb:9a:af:20:a3:6e:5f:47:1d:f6:
b6:93:1f:ac:e9:1e:f9:e2:70:13:37:ab:36:5f:cc:
0f:0f:ff:e7:10:e9:62:10:ab:d1:34:29:cd:ba:84:
cc:c3:14:e5:44:05:a2:0a:c1:8a:3e:c0:4f:0f:16:
bb:f3:fa:a9:94:06:70:63:e1:1b:e8:ea:65:0b:a6:
68:0b:ac:7b:dd:92:24:dc:63:1f:66:76:fb:66:3d:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:13:DA:5F:A9:DE:40:47:2D:2C:7A:8B:BC:F0:2E:D9:0F:D1:77:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1824566-8c44-3023-af1b-6ebd63711d12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1cb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:ee:04:43:60:22:18:81:04:ff:e5:c7:41:3e:fb:8f:d2:21:
ed:fb:29:41:cf:a4:13:8a:cd:28:3f:92:88:fa:b6:44:ad:2b:
09:ec:cf:66:96:a4:4d:e1:50:7f:11:bb:04:6e:8e:aa:0a:dc:
b7:0d:94:8a:c9:2a:b3:8a:14:8d:0a:95:c3:2a:30:a9:e4:b7:
8d:56:0d:57:90:5c:67:72:2c:27:c4:e4:3e:27:33:c3:bc:df:
56:29:8c:a7:93:32:5a:79:e0:3d:9d:26:d6:bf:d8:00:c5:82:
2b:1e:df:b0:aa:04:f2:f7:79:28:50:a0:d2:2c:05:62:71:aa:
5a:ec:be:a6:fe:76:20:64:7e:ae:44:00:bb:56:95:34:59:40:
43:5f:f7:9f:a5:41:7e:50:95:42:c9:65:57:31:21:44:bd:c9:
84:00:c7:ac:6a:46:34:87:62:d7:0e:3a:a9:c5:0b:82:36:1e:
34:19:c6:10:70:e8:e7:49:6f:cb:5e:89:82:cd:12:27:59:d9:
86:43:df:67:b6:74:f3:c5:3a:62:d6:a3:8b:0e:20:73:98:22:
57:d4:5c:f1:a9:95:c3:83:33:45:e5:c7:ca:ec:f2:86:41:48:
c8:9b:df:15:aa:c8:8c:c6:88:e3:05:d0:16:04:b4:d7:e9:37:
b4:39:45:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:00 2025 by rpki-client