Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa7049d9-1983-3170-b842-dba653806b08.roa
File: aa7049d9-1983-3170-b842-dba653806b08.roa (raw, json)
Hash identifier: EY24zM9QDiz7jiw0EA43xStxJGOgRV1w4oXvrmEH3GQ=
Subject key identifier: A4:F8:E9:11:00:F6:2B:05:56:2E:10:4C:4C:33:77:F8:4E:03:72:14
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584613D40B3DD5D41560B25C1480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa7049d9-1983-3170-b842-dba653806b08.roa
Signing time: Sun 02 Jun 2024 13:00:36 +0000
ROA not before: Sun 02 Jun 2024 13:00:36 +0000
ROA not after: Sat 31 Aug 2024 13:00:36 +0000
asID: 8851
IP address blocks: 2001:470:136::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:13:d4:0b:3d:d5:d4:15:60:b2:5c:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 2 13:00:36 2024 GMT
Not After : Aug 31 13:00:36 2024 GMT
Subject: CN=21b32a73-7bea-44d9-91a7-4e97f4643cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:67:bd:e4:9b:76:3b:e1:f9:75:46:c5:ee:
f7:2f:9b:98:0e:1b:8d:08:a2:ba:c2:b2:13:2e:8a:
ad:2a:58:29:9d:7b:0c:0b:f9:af:9b:23:7d:80:51:
e5:6f:3e:60:fb:4e:c0:23:90:ba:e6:79:87:30:08:
f0:f8:d2:5f:59:29:02:65:90:3d:fc:a6:08:62:74:
7e:3f:47:57:de:68:e5:a2:b5:49:82:1e:e5:a6:a3:
0c:81:71:2a:dc:44:83:0d:a3:08:3a:91:38:fe:af:
fe:21:ad:23:8d:a3:18:ff:e3:35:3a:91:f5:76:f0:
d9:a9:28:c0:4d:b8:96:71:a5:ae:8c:ef:f0:d4:75:
e2:02:4f:ac:27:93:8a:78:e6:86:d2:9b:e1:97:5b:
6e:e3:8c:8c:ac:26:04:e7:ce:32:16:29:60:69:e6:
97:ee:a2:04:fb:a6:19:e2:f8:90:93:58:4e:55:84:
f5:2a:e4:64:18:29:3a:fd:e1:51:8e:f0:51:13:de:
97:2e:31:f1:f5:89:36:3d:d8:06:04:18:b5:8f:7e:
bc:ea:9d:dc:7c:52:ae:a3:7c:36:d8:48:e0:da:00:
7c:34:4d:00:42:ee:6e:d1:3c:fa:ee:90:13:f1:d1:
5e:17:4a:83:ad:60:c4:13:b8:7d:5f:4c:50:73:d7:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F8:E9:11:00:F6:2B:05:56:2E:10:4C:4C:33:77:F8:4E:03:72:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa7049d9-1983-3170-b842-dba653806b08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:136::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:ac:4b:ed:4f:43:83:36:90:72:ad:ab:15:64:62:60:b4:23:
92:38:4d:58:aa:ee:46:8a:b3:57:71:8d:59:fc:e4:68:f2:ef:
a6:a0:20:91:f1:f5:5b:f8:eb:e3:14:f8:95:98:8b:0c:71:4f:
68:a0:2f:a2:9e:0c:11:d1:64:4f:25:3e:8f:90:81:7f:e3:b1:
4d:e2:56:1d:19:97:a4:17:5c:23:da:b9:44:4d:d6:2f:75:40:
fa:6f:5d:5b:b0:f8:c1:af:c6:97:be:9a:a1:16:67:3c:3a:35:
88:82:65:64:b6:3f:94:d8:0a:c7:88:e8:c3:bd:4f:24:2f:38:
00:e6:94:c0:f0:fc:39:e7:1f:b8:12:99:26:f7:34:58:51:20:
1a:a4:a5:0c:78:f2:6c:29:fe:8f:e2:bc:e6:13:ef:15:3b:9d:
14:75:36:77:cd:9b:bc:57:60:35:d9:29:5d:5d:e3:c0:e3:58:
8e:b7:0a:34:fb:b8:a3:50:6a:64:ab:b7:dc:a0:c2:33:ed:33:
fd:ba:f0:d1:10:60:86:a4:08:3a:06:47:84:d5:88:06:1d:9f:
77:f6:83:65:fb:4f:19:ee:d2:63:79:6c:40:6e:5b:76:c3:9f:
14:2d:b8:1e:97:46:25:98:71:17:5a:a5:97:3d:b3:27:e0:5e:
f4:0f:2f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:40:28 2025 by rpki-client