Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2a68006-df84-3d53-807e-5bd8595f4d77.roa
File: b2a68006-df84-3d53-807e-5bd8595f4d77.roa (raw, json)
Hash identifier: Gbqf0h0diaAznUMMhxc9/H4ivvOt1sPeiTUlbhhlvM8=
Subject key identifier: E2:6C:F3:69:E2:44:FF:77:63:E6:69:2E:77:B0:D3:9D:52:63:98:0F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845FD7E8F792076F71352A5BA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2a68006-df84-3d53-807e-5bd8595f4d77.roa
Signing time: Sat 25 May 2024 13:00:35 +0000
ROA not before: Sat 25 May 2024 13:00:35 +0000
ROA not after: Fri 23 Aug 2024 13:00:35 +0000
asID: 61468
IP address blocks: 2001:470:2b0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:fd:7e:8f:79:20:76:f7:13:52:a5:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 25 13:00:35 2024 GMT
Not After : Aug 23 13:00:35 2024 GMT
Subject: CN=08962e45-06a0-40f0-9240-c5690c13f327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a6:ac:6f:ab:08:3d:d3:54:74:43:7c:b6:95:
db:4f:3a:34:12:c6:9f:0e:5c:8e:ac:33:7b:be:7d:
ee:61:b5:0b:21:3a:93:32:9a:6c:53:ca:6a:22:d3:
af:cd:88:7c:be:3e:44:92:61:74:5a:b4:b7:25:a6:
fe:8d:66:9c:ea:f2:5f:25:0e:ff:01:4d:ac:d7:94:
6b:a9:f8:2d:86:79:04:dc:a2:9a:7d:72:79:c3:00:
7e:a1:b2:0c:d8:27:5c:50:9f:99:ed:76:0d:b7:75:
ca:23:aa:0e:55:46:21:7b:ed:21:50:7b:11:4a:08:
2b:78:42:78:25:4c:89:b6:8b:7f:af:4a:87:39:93:
d0:0f:22:ea:de:43:fc:5e:14:65:3f:55:a3:84:b5:
31:e9:00:d9:3c:54:a5:cd:0b:8a:6a:f5:c7:73:10:
89:69:20:51:b4:94:b0:4f:3d:eb:04:46:26:c1:1d:
e1:4e:36:8b:ee:05:6c:d8:83:f6:2a:48:90:42:0c:
c1:cc:4b:75:ae:b3:14:6f:70:c3:cd:f4:c4:16:fa:
a2:a6:7a:f6:eb:30:40:22:76:ac:76:0a:eb:b8:c1:
80:22:f4:e8:a3:6a:10:63:3b:a8:15:f2:cc:12:4f:
25:51:aa:7a:9b:bf:33:7a:07:9c:55:04:c7:a3:3e:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6C:F3:69:E2:44:FF:77:63:E6:69:2E:77:B0:D3:9D:52:63:98:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2a68006-df84-3d53-807e-5bd8595f4d77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2b0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:63:4a:f8:0f:80:11:a5:79:82:84:03:1c:fc:9e:93:90:ce:
93:b9:d3:83:e4:f5:b2:3d:a7:06:ee:b9:16:e4:d7:0d:ae:ca:
ca:44:8d:28:75:ed:5c:9f:ac:e4:3e:27:0b:93:20:d9:ed:4a:
23:16:c8:79:a8:dc:69:43:da:fa:40:49:c0:2a:8b:96:4a:e9:
26:41:20:7c:f0:13:8a:8a:f3:1c:2c:ea:4f:29:1c:bf:fa:6f:
f4:52:c9:d5:65:49:7d:6f:93:04:8e:2b:50:59:8b:1a:5c:55:
91:61:71:cc:81:50:33:93:a1:87:01:61:37:17:96:c5:c4:fa:
42:91:98:7c:18:21:2a:a9:c6:5a:a2:df:25:33:50:1f:06:f4:
4e:e3:b4:5b:0a:31:5d:a4:c2:43:34:f2:b4:09:e7:f9:1d:07:
76:50:92:b5:44:6d:67:27:3c:32:2e:3e:1c:97:b8:1d:4d:89:
3a:33:05:2e:7b:3b:f6:77:42:40:e4:0a:0d:cf:2e:21:97:71:
f2:40:de:55:3a:74:ae:3e:c6:0c:77:9a:55:ba:8f:cd:29:35:
6b:58:3c:48:c7:16:c4:6e:5b:e7:a4:3f:0b:15:14:b0:a1:f5:
ad:c0:ee:ba:42:99:33:8f:e8:8a:19:fa:12:74:15:64:ea:5f:
b5:d4:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:31:19 2025 by rpki-client