Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a56a4dc1-5ee9-3f97-8fe9-6a18298d2ab9.roa
File: a56a4dc1-5ee9-3f97-8fe9-6a18298d2ab9.roa (raw, json)
Hash identifier: 5E05le7aVzo4E112JDJB7/qSIXzbNOOiINsq79mRPY0=
Subject key identifier: 73:AE:61:B3:7B:FB:15:57:BB:37:1E:1E:05:EF:70:B8:FD:72:EF:8D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845EF894255A5CD8521F636E1C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a56a4dc1-5ee9-3f97-8fe9-6a18298d2ab9.roa
Signing time: Mon 20 May 2024 13:00:35 +0000
ROA not before: Mon 20 May 2024 13:00:35 +0000
ROA not after: Sun 18 Aug 2024 13:00:35 +0000
asID: 45960
IP address blocks: 2001:470:243::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:ef:89:42:55:a5:cd:85:21:f6:36:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 20 13:00:35 2024 GMT
Not After : Aug 18 13:00:35 2024 GMT
Subject: CN=8050a7d6-4ca1-44a8-9334-e94cdf97ff74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:09:65:7c:1e:ed:c3:77:34:b5:56:9c:fe:
e5:8b:c1:e1:3d:08:d8:ea:5e:f6:22:20:66:ea:3b:
62:94:b2:68:14:72:bb:32:b9:54:80:62:0c:44:bb:
3f:3c:5f:84:a3:e6:0c:75:c3:89:36:77:37:92:13:
52:68:d1:66:96:37:cb:d6:e7:53:f8:c8:23:44:aa:
ab:7d:00:01:8d:9e:10:76:d6:7c:3a:5d:e7:30:f4:
2e:d5:72:17:b1:10:40:10:fb:08:93:96:e4:47:c6:
5e:50:87:c2:72:b1:dd:fa:b7:37:f2:8c:72:fd:cc:
d1:b0:3b:c6:40:89:39:c8:15:94:63:c6:d7:aa:94:
d4:b1:8b:07:e7:84:94:76:a7:73:ce:5f:f1:4f:c9:
f7:ac:b6:3e:26:ad:0f:ea:34:28:2d:93:d4:0c:23:
58:23:38:60:f3:d8:90:bc:ac:b3:51:54:71:b0:e3:
7c:e9:a2:7e:a3:49:c4:2d:2f:10:7a:5c:2b:a6:d9:
95:9c:02:8a:69:11:80:84:74:b6:fd:66:89:68:11:
c0:bd:22:67:37:d6:2c:04:ca:a2:5c:25:e3:ac:6d:
42:e6:cb:40:59:35:8a:a5:3f:6c:7f:f3:4c:04:ae:
20:c5:ee:02:30:d1:eb:30:26:97:87:f9:d9:83:24:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AE:61:B3:7B:FB:15:57:BB:37:1E:1E:05:EF:70:B8:FD:72:EF:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a56a4dc1-5ee9-3f97-8fe9-6a18298d2ab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:243::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:b1:f9:43:9f:22:35:fe:0e:11:1e:7a:fc:23:72:32:12:77:
cd:c7:03:29:46:a1:b7:39:0f:c2:20:74:26:65:5d:2c:ea:74:
14:c2:65:1f:65:8e:1d:9d:81:7a:a1:67:c9:de:88:47:db:6f:
da:0d:92:02:fc:2b:34:95:dc:d6:24:8b:86:20:1a:e8:57:ba:
82:06:4c:23:9b:e8:32:d5:11:84:55:26:85:b1:f1:fa:ba:a0:
1c:a5:61:d6:a9:5a:57:ed:2d:24:58:db:9a:ad:14:ea:1e:76:
5a:ac:5a:8c:80:75:77:d9:06:55:58:d4:29:86:89:a0:34:de:
2d:52:c1:fd:f6:f6:56:40:f1:3f:1d:de:da:e7:20:55:67:7b:
87:0e:33:ee:82:72:01:fd:45:23:0c:23:81:3d:3a:fc:b7:40:
60:38:62:49:cc:c9:d5:aa:39:41:2c:b8:aa:1c:40:b0:c5:54:
70:ee:33:4e:ec:cb:a0:b5:42:18:d8:b9:8f:f8:f7:ff:f4:3f:
76:48:cf:73:03:d0:ad:31:0b:c4:e9:f3:eb:8f:c5:d0:4c:5d:
f9:92:f0:2e:c8:61:05:c5:6c:35:98:1e:af:b4:dc:97:57:36:
68:af:2d:6e:36:f1:af:e9:fc:5f:82:98:5e:30:92:aa:f0:cf:
96:07:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:24:50 2025 by rpki-client