Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2b7f762-98f6-3db7-bcb4-13edf17ba3d3.roa
File: a2b7f762-98f6-3db7-bcb4-13edf17ba3d3.roa (raw, json)
Hash identifier: KGiQMViJXhzC2a60TLDIcYJdBABc7cvNcK97upxvHWU=
Subject key identifier: B0:82:48:7C:74:21:21:46:9E:0C:C0:63:04:9A:80:13:7A:30:C2:1F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D0203830E77C7D5CCC6B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2b7f762-98f6-3db7-bcb4-13edf17ba3d3.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 216360
IP address blocks: 2001:470:2d2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:20:38:30:e7:7c:7d:5c:cc:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=487f7865-d18e-4f41-96c8-e5cc7c0c0c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:a9:1e:c4:de:e7:94:5d:43:42:1c:f5:95:
f5:10:24:03:e5:9e:f1:bc:81:29:4f:a2:42:3d:4a:
96:d2:2d:93:da:44:00:55:a8:55:8b:72:93:0b:eb:
6c:63:c2:ac:92:13:07:09:ba:b4:95:49:26:c8:71:
ee:dc:4c:1e:35:30:45:30:cc:0e:88:1f:a1:2a:0a:
ec:47:98:c3:8a:33:37:bc:21:38:95:e9:91:56:5e:
1e:d5:e2:ee:df:6d:17:ea:f2:ee:6c:de:3f:1b:76:
56:13:b3:5d:3e:c1:7e:60:74:8f:31:e9:a8:2d:c5:
4d:5a:4b:34:35:29:12:81:1f:d6:d0:a5:20:96:9d:
e2:c3:27:f3:ca:ed:7e:67:f7:89:99:21:f6:16:ee:
73:9a:2a:72:97:5e:6a:06:7b:31:20:6f:ca:8a:02:
16:1f:89:be:6a:d3:49:d6:8d:e4:e9:14:5c:05:f0:
ca:d0:01:64:c9:5d:ca:8e:74:17:d3:80:a3:dd:bf:
53:e0:ae:b0:e6:e2:4f:69:db:28:4c:b8:cd:27:1d:
da:b2:e6:52:3b:86:95:3b:e8:51:02:9b:80:52:aa:
8c:d8:f4:68:53:6a:21:50:ec:ef:97:03:75:42:8c:
c5:2c:02:b8:36:a0:7a:a3:ca:de:5b:46:52:97:6c:
ce:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:82:48:7C:74:21:21:46:9E:0C:C0:63:04:9A:80:13:7A:30:C2:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2b7f762-98f6-3db7-bcb4-13edf17ba3d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2d2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:94:07:2c:eb:b9:1a:99:3f:06:9a:aa:64:28:48:f6:af:b3:
86:13:44:c5:23:7b:87:98:36:6d:fc:18:98:65:10:9e:fb:1e:
e0:3b:52:19:64:27:de:91:29:f8:51:5d:04:ae:c6:be:78:98:
16:01:4c:43:ad:0d:65:09:b4:eb:24:4a:86:6c:62:23:17:02:
bf:9c:c1:4e:36:70:7c:65:91:17:51:ff:81:f1:c3:01:2e:4d:
f2:02:e4:b0:f9:f1:ed:f8:5a:f3:19:62:36:27:6f:69:d6:25:
ad:50:d9:c3:ab:db:ca:a7:cc:89:ba:76:e7:41:5f:90:ce:3b:
c1:95:b5:d8:bd:30:54:5c:1f:b2:7e:a3:c7:8c:d9:da:61:8f:
40:04:66:70:06:ab:47:26:87:47:88:d6:c3:ad:98:81:0e:09:
6a:41:fe:d3:5d:06:f7:f9:81:3f:7e:21:65:ac:16:57:19:4c:
b0:81:65:c6:9a:b5:f1:c1:a6:d7:d4:8f:af:9a:88:35:0e:9f:
7e:1b:6a:9d:35:df:a0:74:5f:32:03:2a:15:6f:aa:0f:24:e9:
e7:94:04:53:87:07:5b:db:a2:91:0d:5b:9a:24:a1:80:68:8d:
5d:aa:d8:81:bd:73:4a:85:0f:d8:34:7f:59:a3:71:ba:56:77:
62:d3:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:19:21 2025 by rpki-client