Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2f248df-c0b9-3e9e-b091-836c8e6d73f6.roa
File: a2f248df-c0b9-3e9e-b091-836c8e6d73f6.roa (raw, json)
Hash identifier: IqbJPnYoeT/pgdKPqymo//Pkuq3/pZH2QmpxZIqj2W0=
Subject key identifier: 74:68:A0:30:75:2F:AD:CA:63:2C:1B:7F:45:B7:13:C6:A5:F4:8D:23
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847B80AA4BA670CB20661058E10
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2f248df-c0b9-3e9e-b091-836c8e6d73f6.roa
Signing time: Thu 31 Oct 2024 01:30:08 +0000
ROA not before: Thu 31 Oct 2024 01:30:08 +0000
ROA not after: Wed 29 Jan 2025 02:30:08 +0000
asID: 51259
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:b8:0a:a4:ba:67:0c:b2:06:61:05:8e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 31 01:30:08 2024 GMT
Not After : Jan 29 02:30:08 2025 GMT
Subject: CN=2420e690-9061-4aeb-888e-0e48f33ce4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:76:53:15:8e:1a:cb:60:fc:d1:97:a0:57:
8a:aa:bb:22:dc:1b:81:1e:49:73:58:80:86:72:42:
58:6b:9a:b9:c4:01:d3:c0:9b:48:98:aa:84:54:2a:
2c:be:0d:7c:f9:1c:01:5c:bb:bb:df:4c:a2:4c:46:
eb:0c:b1:8f:87:a0:b1:ea:26:bf:b2:ea:d6:60:cd:
49:a5:af:4a:c7:3c:86:bd:bc:71:ed:26:55:50:83:
e9:7c:67:48:63:ef:9e:a1:cb:e8:86:dc:b3:fd:87:
70:39:19:d4:de:f8:e4:81:39:0f:36:18:33:2d:e2:
e9:bc:a0:4c:94:c1:93:0f:56:49:d5:56:b3:fb:73:
10:40:c5:77:9a:44:c4:f2:98:d2:f3:7c:03:91:17:
03:1f:5b:54:e7:5f:98:8a:c2:86:a1:1b:7e:42:95:
62:b1:b4:34:e3:bc:27:d4:2a:e9:8a:68:bf:8c:db:
73:d3:1f:df:c7:7c:77:f0:88:5c:05:f1:40:91:e0:
4f:0b:3e:0a:eb:f7:a2:52:59:fb:b3:c5:a2:d0:d4:
3d:6c:29:c8:1e:5a:ca:ee:ec:c1:fb:f5:e8:dd:88:
38:40:ce:3e:0e:af:c7:d0:e5:a1:9d:e8:99:13:6e:
75:d4:91:be:df:58:f7:3d:02:35:09:e8:dd:f6:7c:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:A0:30:75:2F:AD:CA:63:2C:1B:7F:45:B7:13:C6:A5:F4:8D:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2f248df-c0b9-3e9e-b091-836c8e6d73f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:e1:a1:7c:85:64:34:64:83:2c:97:3c:bd:ee:6b:5a:6d:0b:
c9:b2:38:99:f5:9a:ff:fa:cf:55:2f:f7:4d:84:d8:81:27:5d:
2d:9e:c0:c5:44:a6:fa:a6:5c:ee:86:8b:6f:d1:4b:d2:eb:e5:
b8:e9:4b:3f:e7:1a:dd:fc:27:b9:e5:1e:78:50:70:5c:d2:03:
e3:1f:3c:88:2b:69:aa:3e:1f:75:73:93:3a:d4:74:ee:86:af:
de:b9:f8:c5:be:87:0f:c2:a4:06:b9:d2:6b:2d:af:96:fb:1d:
60:c8:29:11:d7:24:ce:a5:ec:69:21:85:58:6d:a2:69:01:19:
36:13:c2:f6:99:20:07:41:98:db:82:b6:80:72:e9:45:0d:35:
fd:02:d5:3d:b5:c1:6f:f3:00:e8:99:63:55:f9:2f:96:94:76:
a3:c2:20:c3:81:aa:24:4a:88:ae:7d:55:71:8f:e4:cf:84:3c:
7f:9b:a6:ca:bc:3b:77:57:34:3b:cd:99:af:a8:a6:56:5c:99:
6d:de:6d:b7:10:8d:a1:57:3b:39:3d:3f:d4:fd:6c:84:68:6e:
2f:2a:4b:3e:03:d9:29:5d:a0:47:21:e0:99:9c:21:0a:c3:d6:
14:66:59:5e:48:5e:b7:f2:e0:a4:02:85:36:79:be:8b:14:40:
da:d0:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:34:00 2025 by rpki-client