Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a412d68f-bfab-3183-a5b8-a0cd451c5134.roa
File: a412d68f-bfab-3183-a5b8-a0cd451c5134.roa (raw, json)
Hash identifier: yzRKO89oFrCzYaAfBDK4lbOCPmRVQn7hW4GC6nkmM1A=
Subject key identifier: 5B:08:5F:E8:FC:A9:CD:4D:E2:DF:81:34:8E:7F:91:7F:8F:17:15:6B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846196971CF351071A6F74EE480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a412d68f-bfab-3183-a5b8-a0cd451c5134.roa
Signing time: Tue 04 Jun 2024 13:00:34 +0000
ROA not before: Tue 04 Jun 2024 13:00:34 +0000
ROA not after: Mon 02 Sep 2024 13:00:34 +0000
asID: 9829
IP address blocks: 2001:470:2bc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:19:69:71:cf:35:10:71:a6:f7:4e:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 4 13:00:34 2024 GMT
Not After : Sep 2 13:00:34 2024 GMT
Subject: CN=1612047d-fe72-4c96-b3dc-79134d22e90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:0a:79:0f:79:af:35:3c:4b:1d:b9:91:39:
b0:de:11:2f:d8:00:bf:64:6c:c5:76:74:78:9f:59:
3f:4f:35:27:b8:b7:aa:18:4c:af:dd:b5:52:fd:32:
a7:db:19:a5:fa:f8:a3:40:40:39:e6:41:f6:d0:9e:
36:06:74:7d:28:f9:d2:aa:2b:2c:65:17:08:4b:3e:
91:fb:c1:2c:22:3c:28:f8:81:3f:df:80:2a:d6:b0:
dd:38:5a:aa:2e:21:0a:53:e6:7f:fe:ec:5b:7d:52:
84:74:3c:98:69:7f:d3:a0:89:9b:4a:c6:b8:14:fb:
29:89:96:bd:14:f5:eb:da:d8:65:4b:1a:7e:5c:24:
d2:40:e1:bd:dd:2f:94:e1:d9:28:e8:34:f2:f6:0a:
7d:73:51:56:aa:9a:52:de:03:36:f2:9a:3b:bd:4a:
fd:03:74:73:1c:9f:80:52:ef:59:56:4f:32:8a:5e:
4a:4a:0b:66:7d:43:0f:af:c8:27:17:5e:8b:52:36:
ee:36:d3:58:e8:ac:5b:09:75:83:59:27:2c:35:82:
fa:cf:23:1d:66:da:2d:78:c4:02:53:ee:1a:39:35:
e1:3b:cf:71:0e:52:88:72:2a:ba:0c:84:6f:05:14:
49:9f:b4:4f:a2:5a:11:f4:b4:2b:30:6f:3a:fa:b9:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:5F:E8:FC:A9:CD:4D:E2:DF:81:34:8E:7F:91:7F:8F:17:15:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a412d68f-bfab-3183-a5b8-a0cd451c5134.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2bc::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:f0:e9:36:46:ff:ad:0e:38:33:26:f7:3f:3d:4a:06:66:30:
71:9c:fd:79:fc:37:03:31:66:4f:24:e3:e7:1d:ab:4d:48:8c:
22:b5:a3:ef:cf:9a:c1:47:74:a8:11:dc:6c:f6:3f:db:8d:37:
02:ea:79:9c:91:36:e7:ca:7f:ce:af:47:e1:6d:02:6f:ac:6d:
a2:eb:bd:64:1e:2d:f6:3d:e6:76:7b:1c:fd:9f:4c:f4:ee:80:
8e:88:1d:4b:4b:ce:52:b3:7a:45:b5:f1:74:72:1e:c6:db:82:
bc:a5:52:a2:bb:d4:75:64:39:2a:ff:94:d8:96:42:88:2d:64:
3d:be:22:0e:53:fc:f9:e1:04:1e:7b:fb:6f:db:30:b0:3a:b3:
b2:74:2d:86:1d:d8:e0:20:cd:67:fa:0d:0f:76:c0:50:c8:7f:
1e:09:30:69:07:6c:8d:ee:d1:9e:af:de:96:1b:10:b0:2d:b2:
2a:40:ce:84:59:83:e2:0f:55:d6:e5:c6:55:f0:56:e7:9e:90:
83:92:6a:b8:8a:56:7f:ff:15:7f:c6:ff:98:4b:69:47:cc:79:
77:5a:96:f1:f4:c0:d4:c5:f2:6f:70:7d:25:1c:62:f1:1d:fc:
ba:a3:83:ca:fa:47:d0:a8:84:d2:4a:94:ec:b5:77:3c:cb:4e:
20:21:c6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:32 2025 by rpki-client