Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abec573e-742e-3a7a-97a8-20072a923883.roa
File: abec573e-742e-3a7a-97a8-20072a923883.roa (raw, json)
Hash identifier: ZlzvchkArGNU8INTsxibPp0TFaxpTxhKlqPR6ssrr08=
Subject key identifier: 29:73:1B:3F:4D:9D:7E:CC:CC:07:6A:5A:6C:10:E5:1F:25:5B:90:58
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842C762F5CD643EE14419B371E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abec573e-742e-3a7a-97a8-20072a923883.roa
Signing time: Thu 03 Aug 2023 12:00:00 +0000
ROA not before: Thu 03 Aug 2023 12:00:00 +0000
ROA not after: Sun 04 Feb 2024 05:00:00 +0000
asID: 149440
IP address blocks: 2001:470:177::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c7:62:f5:cd:64:3e:e1:44:19:b3:71:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 3 12:00:00 2023 GMT
Not After : Feb 4 05:00:00 2024 GMT
Subject: CN=dec4291d-91bf-4d6e-98c6-56ba7c235ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:03:88:02:8a:0c:69:81:19:b9:62:76:e0:
4d:80:28:a1:4b:97:7a:be:42:dd:3b:5a:e1:a2:28:
8e:a4:b8:32:6e:63:e5:a2:22:3c:a9:f0:e8:52:1a:
fc:ea:9b:66:c3:bb:38:27:e2:1b:40:8f:67:60:55:
d3:78:0f:48:f7:48:c6:34:18:3a:7c:b8:28:81:38:
04:77:53:7f:2b:ee:4c:90:6e:97:16:0d:37:61:bc:
b6:fa:3e:9b:44:17:2f:9a:03:dd:19:c7:bf:11:19:
70:46:e3:75:26:43:1b:20:aa:4e:ea:ed:0a:0a:b6:
b4:98:86:aa:54:a6:d1:d4:8c:21:5f:a4:58:9f:84:
21:57:3d:9b:c7:ef:96:33:a1:b5:87:01:72:d8:76:
25:e4:94:e7:99:7e:5f:8f:4d:2e:4b:4d:af:3c:bd:
90:dd:21:52:c4:59:12:9f:8a:fc:38:69:6c:7d:9c:
fc:b5:d0:a6:42:e3:c7:c2:9e:cf:5a:b6:ee:13:0a:
72:44:85:53:bb:c8:37:94:3c:d6:84:65:28:50:fc:
9e:be:eb:1f:03:4a:d7:61:01:41:08:bd:68:2c:9a:
65:9b:4e:7b:c4:d6:93:5b:b7:37:79:8c:17:c6:55:
2a:34:5b:ec:1f:b9:eb:0b:dd:2b:7a:54:7f:33:aa:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:73:1B:3F:4D:9D:7E:CC:CC:07:6A:5A:6C:10:E5:1F:25:5B:90:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abec573e-742e-3a7a-97a8-20072a923883.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:177::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:37:17:88:e8:11:7d:f3:e9:f3:0b:e5:7e:68:ca:b7:ec:54:
41:a0:28:85:da:95:e8:fa:68:b8:ad:9f:b3:49:5b:bf:bb:68:
37:4a:e1:d6:8c:77:e5:38:b7:aa:03:28:c4:b8:a8:84:17:64:
fb:2d:9b:87:6d:f5:79:92:d1:9f:da:0e:10:a9:31:8e:78:fd:
c2:97:12:d8:e1:92:a4:78:a5:f7:b0:c5:91:73:79:23:4e:aa:
ce:1b:1a:94:9c:4a:ae:0d:c4:60:1c:4e:25:74:55:40:71:c8:
bb:6b:50:f2:de:49:ec:65:17:d4:e2:82:a2:d5:1f:c6:10:c4:
95:9a:2b:e7:a7:70:53:b2:bc:bf:c0:ad:9e:d3:54:12:82:42:
ae:53:07:cd:43:da:e0:3e:1a:35:8b:00:73:cc:be:79:9a:a3:
2a:50:ea:27:88:e3:ed:21:ef:4f:46:0a:2a:bb:22:71:17:8b:
68:c0:96:1c:4c:ae:51:ea:9e:d5:76:ca:ae:8c:d8:3a:03:2f:
d4:76:c8:b5:de:9f:b6:95:8d:ab:9f:d2:04:7c:e8:32:c1:de:
8d:44:25:2e:82:b1:93:a9:47:50:97:8c:26:78:4d:fc:d4:b0:
a8:a5:fa:8c:73:ee:53:5b:6b:d0:8b:5f:74:ff:1f:a7:98:af:
cf:a3:e7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:44:38 2025 by rpki-client