Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1af1f14-cda2-32df-aa7f-cedd600d4217.roa
File: b1af1f14-cda2-32df-aa7f-cedd600d4217.roa (raw, json)
Hash identifier: TTGCgdIYIRuISOH1MY4R5zp93URC9NVbhQ70QNprFv8=
Subject key identifier: 34:DE:57:B4:89:FC:D0:22:D1:56:87:91:5C:9D:DB:C2:8C:D2:FF:EE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845FAB3EE98E17B61A6D01B6AB0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1af1f14-cda2-32df-aa7f-cedd600d4217.roa
Signing time: Fri 24 May 2024 13:00:34 +0000
ROA not before: Fri 24 May 2024 13:00:34 +0000
ROA not after: Thu 22 Aug 2024 13:00:34 +0000
asID: 41695
IP address blocks: 2001:470:2a5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:fa:b3:ee:98:e1:7b:61:a6:d0:1b:6a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 24 13:00:34 2024 GMT
Not After : Aug 22 13:00:34 2024 GMT
Subject: CN=efc3f229-1b88-41c7-91a2-43f0e553033e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bc:cd:1c:c3:8b:7b:9d:b8:80:99:6d:01:2e:
39:cb:51:a4:f2:c2:37:13:72:77:04:6b:62:66:22:
6c:e0:00:52:b4:9b:09:b7:da:ed:83:13:12:01:65:
d7:8a:b7:27:1e:93:3e:13:f4:02:77:35:8f:b0:a8:
54:a5:a0:76:91:98:45:c2:34:80:49:04:5c:87:4f:
b6:d0:d2:5b:84:a4:2c:eb:03:7d:77:3b:8b:a0:f0:
a6:fd:48:7f:39:a1:ca:1d:c4:4c:f6:41:44:6a:8e:
b9:86:49:50:0e:9a:3c:c7:41:36:1c:6b:b2:76:7d:
a7:7c:80:98:db:14:86:66:ac:af:b8:23:34:1c:83:
69:22:67:b1:94:52:04:20:8c:7c:f2:4d:3c:28:15:
2d:49:c4:6a:e2:90:2d:e2:4a:1f:79:ad:f3:21:84:
13:a1:89:c0:c2:51:b8:e9:2a:74:6a:6f:41:47:54:
d9:da:11:db:67:1e:0d:6e:7e:0f:ee:51:26:28:6e:
a0:38:47:df:28:13:72:50:35:9a:4d:82:bf:79:b9:
f5:ce:6a:84:c8:8e:f1:f7:2b:b3:f1:90:29:6b:32:
0c:05:23:07:2f:ab:2e:27:f2:fa:e2:ce:4d:a0:b7:
e7:a6:d4:09:47:af:6f:03:c8:47:62:e7:c1:cc:50:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DE:57:B4:89:FC:D0:22:D1:56:87:91:5C:9D:DB:C2:8C:D2:FF:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1af1f14-cda2-32df-aa7f-cedd600d4217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:39:a4:51:25:02:24:75:80:29:17:0c:6a:c1:fb:8e:bf:8c:
9e:70:c0:54:6b:24:09:7a:a3:dd:b5:d6:94:c9:c9:ef:7a:38:
37:81:9d:4b:20:5b:2e:0f:16:93:fa:d2:ce:f0:1e:b9:71:28:
9d:97:f6:b2:8e:46:a9:6b:89:63:19:4d:22:1c:e9:cf:bd:ab:
29:a1:97:8d:0a:0f:21:bf:ff:c1:01:91:6d:12:b9:31:6d:b9:
ba:23:84:05:01:47:88:08:47:45:a3:b9:bd:98:89:65:87:1c:
11:29:8f:3f:21:1d:af:10:26:4a:4a:fd:0f:0c:dc:81:ab:6b:
c8:a5:ac:65:8b:98:8b:14:8b:e9:58:02:72:c2:b3:4d:02:c4:
24:bd:a0:be:85:8d:94:a5:6b:ca:9a:8e:32:35:d4:bd:20:13:
b6:c7:cd:6f:cb:cb:7a:4a:33:34:e2:b0:c6:0d:92:19:d1:ae:
8e:24:0b:62:44:52:06:8d:de:7d:fb:9e:e8:58:10:3f:42:66:
27:4a:a9:ac:82:7d:7f:3a:0d:04:6b:c5:93:8d:90:2c:ce:ee:
9f:9d:34:9e:a0:d2:c6:23:0d:cf:4c:a2:4b:31:dd:27:34:e4:
7b:2d:4b:ed:b5:59:65:55:65:ce:35:36:05:2b:ca:47:3a:b1:
ac:66:af:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:24 2025 by rpki-client