Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a31f4123-b99e-3de6-ab77-8ce75dae4ace.roa
File: a31f4123-b99e-3de6-ab77-8ce75dae4ace.roa (raw, json)
Hash identifier: aIILORqhleh5dzOXBNtGFHQJTvmt1ldH/Vh8mZUr99k=
Subject key identifier: DD:D6:8E:72:06:81:2B:24:14:37:4C:20:21:B5:94:1D:65:55:F3:8C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A77868AF14BCADE32C9B700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a31f4123-b99e-3de6-ab77-8ce75dae4ace.roa
Signing time: Thu 27 Jun 2024 20:16:36 +0000
ROA not before: Thu 27 Jun 2024 20:16:36 +0000
ROA not after: Wed 25 Sep 2024 20:16:36 +0000
asID: 142271
IP address blocks: 2001:470:2ef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:86:8a:f1:4b:ca:de:32:c9:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:16:36 2024 GMT
Not After : Sep 25 20:16:36 2024 GMT
Subject: CN=80d47526-c882-4d24-b183-c6f990c8f8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:59:28:26:bf:5f:f3:c2:86:3d:89:fe:74:
f9:0e:6d:23:f0:c5:82:30:64:70:f8:76:12:d3:3c:
ac:ac:5a:04:2b:48:cf:eb:c9:62:c0:d6:4f:ca:79:
93:03:7b:da:f8:ee:85:88:63:1a:f4:fd:bd:6e:62:
47:48:54:37:69:17:60:57:11:00:5d:a0:48:4c:77:
dc:2a:b8:8d:d9:c4:08:13:05:ff:ef:a9:d1:ed:ec:
44:f1:15:85:f7:f4:f7:3a:96:3d:7a:09:65:54:91:
e1:e5:98:7c:b9:fa:e5:e7:e1:15:17:bc:52:0e:1d:
0d:8c:74:10:97:31:9a:ae:8a:49:d4:10:92:9f:79:
46:d0:46:03:c4:f1:7e:8b:70:4c:7d:61:df:f9:60:
38:f8:c6:10:ec:f5:3c:42:c7:0d:d3:29:a1:8e:24:
89:93:ff:ec:81:34:bd:d9:3a:e9:08:47:2a:59:a1:
dc:48:10:2a:5d:81:63:91:f3:07:a6:99:ca:8b:b1:
3f:2f:03:8f:2e:e7:d0:78:46:cf:f9:c5:58:0d:c4:
73:91:0b:d2:4e:24:e8:45:e6:92:a7:a9:af:86:61:
2b:53:48:0c:5a:65:d5:e2:d5:d9:f4:c8:04:20:8f:
33:81:80:61:09:89:ef:5d:d4:5c:02:c4:14:c7:93:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D6:8E:72:06:81:2B:24:14:37:4C:20:21:B5:94:1D:65:55:F3:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a31f4123-b99e-3de6-ab77-8ce75dae4ace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a9:b0:8a:17:87:76:5f:15:7b:db:2b:e9:b5:e0:81:8b:7c:
9c:32:ea:64:dd:ba:38:8c:5b:e9:f1:4d:fb:77:b0:c6:90:69:
ed:cf:cb:e6:65:62:d1:fc:50:ab:2a:fd:87:00:8e:a2:dc:37:
94:91:ef:87:9b:42:f2:60:2a:22:6b:af:45:80:01:33:4f:d4:
49:ce:55:06:9a:87:94:a4:ce:99:8d:41:da:eb:14:29:20:08:
ec:47:f5:c1:02:79:f5:2c:3b:a2:43:85:26:0f:99:65:4d:33:
1d:c1:bc:d1:b6:8a:38:b1:26:b0:57:9a:78:12:a8:b8:ca:03:
9b:75:2d:e5:08:d5:36:1a:ed:5c:4c:da:28:65:f4:8a:7c:d4:
26:7e:48:08:f9:91:3e:93:30:1d:a8:11:95:f7:72:5e:cd:06:
d5:ef:74:cf:7e:e9:b7:9a:79:11:78:ff:8d:b0:2a:93:d0:e6:
02:3b:bb:bf:ac:7a:b3:45:d1:bd:0a:74:de:5a:95:b1:82:f3:
52:29:3a:de:62:2e:da:34:07:5f:c5:e7:56:ad:22:5a:ec:cf:
d9:c8:8c:31:e2:fc:04:b3:89:47:65:76:5d:cd:54:35:fe:3e:
c0:23:f0:7b:23:07:fd:9e:4c:8e:c1:5c:6b:27:8a:db:73:0d:
e8:e5:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:26:11 2025 by rpki-client