Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baf19930-36a8-37d1-bc29-cd4662b21a48.roa
File: baf19930-36a8-37d1-bc29-cd4662b21a48.roa (raw, json)
Hash identifier: Wackv6a6xQ/ItM+tYpPetBpt/3ARuglpcRCqIzxTGiU=
Subject key identifier: FA:1D:4B:14:06:BB:25:6E:D8:AE:8F:5E:04:27:29:70:5C:99:8A:64
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847C4A9F3DFD91069CB68CB4C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baf19930-36a8-37d1-bc29-cd4662b21a48.roa
Signing time: Mon 04 Nov 2024 14:00:48 +0000
ROA not before: Mon 04 Nov 2024 14:00:48 +0000
ROA not after: Sun 02 Feb 2025 14:00:48 +0000
asID: 59953
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c4:a9:f3:df:d9:10:69:cb:68:cb:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 4 14:00:48 2024 GMT
Not After : Feb 2 14:00:48 2025 GMT
Subject: CN=c82d3901-3944-4c7b-8920-3275ed4eac7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:cc:90:27:4c:32:a5:c2:c7:b5:07:38:a8:
22:9b:67:e7:65:5d:c8:c0:d7:b0:81:17:9d:6c:09:
31:71:8a:5a:06:66:15:8f:22:84:13:ec:8d:37:11:
6a:6b:d1:bb:b2:50:de:2e:88:d1:da:8f:7f:80:15:
1b:cb:b9:f5:c7:22:e0:99:0d:ee:71:7d:cb:d8:f1:
a1:05:79:ad:79:db:96:50:a9:ed:b1:ba:16:63:63:
7a:34:7a:5e:21:df:af:e3:69:0b:4a:09:30:23:d1:
21:49:76:1d:c6:6b:b5:27:c1:79:78:44:de:38:bb:
de:b8:5a:f9:76:b4:50:b6:25:61:24:96:3c:8d:74:
37:d2:fd:bb:a3:2e:1e:05:e5:de:bf:c2:53:ff:6d:
5d:0f:8b:61:4c:5b:33:07:8f:09:30:57:ce:2a:78:
58:89:b5:ce:aa:32:43:ff:05:e7:55:a3:d2:ac:96:
90:4a:78:cc:54:ed:a0:37:d9:5d:ff:b3:ba:29:16:
72:e6:95:ab:14:56:32:75:af:8c:d1:fd:6c:1e:6c:
e4:05:5f:40:4e:82:36:5e:a8:13:6b:6e:1c:67:52:
c7:c3:52:1e:ac:1c:35:aa:15:7a:74:09:d3:a9:21:
1b:c8:81:77:ca:52:c1:64:d4:1d:c4:db:e4:12:0f:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1D:4B:14:06:BB:25:6E:D8:AE:8F:5E:04:27:29:70:5C:99:8A:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baf19930-36a8-37d1-bc29-cd4662b21a48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:8f:00:03:51:27:1b:52:13:a9:08:1e:39:65:4f:6d:74:6a:
f2:88:d5:c6:49:ec:d8:bb:a7:d2:30:38:d3:cf:60:4f:0d:14:
96:85:90:f7:47:34:a2:fd:d4:a5:fa:e2:6c:29:1f:0f:0f:7a:
b9:9e:bc:72:2b:8e:51:cb:4f:8c:74:22:e1:a2:0d:24:bc:7c:
f6:f3:6b:b0:4a:e4:ee:39:3e:59:6a:d9:3f:94:f8:93:86:9d:
27:7a:7a:bc:db:06:54:b5:36:db:49:f8:c3:99:18:de:53:78:
da:7d:41:dc:10:72:9c:38:87:85:8a:6d:bb:1e:ba:ca:8a:fd:
10:fc:fd:34:d7:1f:c3:7d:fe:99:60:02:2a:41:a8:79:7d:77:
93:0d:62:c0:0a:7e:3c:dd:2a:f5:a2:ff:55:57:ca:fc:96:04:
70:2b:d0:dd:f1:b2:69:30:ba:24:3a:76:a9:49:77:a1:00:98:
dd:1a:da:d9:c3:67:70:fe:60:18:2f:c9:68:3e:75:8f:cc:40:
07:bd:d9:c1:3e:da:9d:b8:00:77:79:cb:cd:d7:93:b6:6a:6c:
84:7f:f9:63:36:ea:b8:0e:9a:18:11:e5:b7:54:e8:82:3f:98:
6d:a4:4d:b1:cf:b9:07:10:a2:50:ed:4f:20:f3:59:08:2d:70:
1d:97:c5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:29:52 2025 by rpki-client