Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bcae74b1-0485-3395-bbf3-75829962b579.roa
File: bcae74b1-0485-3395-bbf3-75829962b579.roa (raw, json)
Hash identifier: WkaNPnSNerwK/FdeGlawJCgZ0AEOwtF73tFxtbT/u1M=
Subject key identifier: AB:B5:D0:81:C4:D8:79:0C:52:BB:C0:3A:60:CD:A8:0B:BE:22:B5:DD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846196979FBC211AEFA63D89000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bcae74b1-0485-3395-bbf3-75829962b579.roa
Signing time: Tue 04 Jun 2024 13:00:34 +0000
ROA not before: Tue 04 Jun 2024 13:00:34 +0000
ROA not after: Mon 02 Sep 2024 13:00:34 +0000
asID: 25668
IP address blocks: 2001:470:1d1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:19:69:79:fb:c2:11:ae:fa:63:d8:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 4 13:00:34 2024 GMT
Not After : Sep 2 13:00:34 2024 GMT
Subject: CN=b0d18939-a704-466b-ad89-b7802cf66a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:85:66:05:8d:8f:6e:55:b6:9f:fb:b8:69:
9a:d1:91:e8:13:5b:d8:52:2c:0f:a7:67:a4:6d:f4:
5f:f6:a5:69:df:f7:58:97:02:05:e2:b7:e3:7e:d8:
f4:1e:43:8a:8e:21:a2:97:b5:38:ee:ad:42:87:d9:
9f:54:59:90:0a:90:de:99:cc:5d:c2:6e:00:36:2a:
91:91:dc:6b:a4:43:a3:fb:e5:c1:ed:e7:18:81:c9:
18:4a:a8:a1:f0:d8:dd:a6:58:05:2c:c9:a4:bd:47:
9c:e4:b0:3a:90:ff:74:c3:ec:45:43:f0:df:43:62:
ac:2b:0e:4d:13:69:c8:fa:5f:a1:0e:7d:96:9e:90:
ea:a2:7d:ff:e5:f9:30:9c:f1:fe:24:f0:db:be:95:
bc:cf:4a:18:a2:4f:d7:7a:b4:0f:18:8f:26:2b:df:
a3:33:60:36:85:6b:c3:40:7a:2f:38:79:31:4d:02:
da:be:dc:d7:a1:71:ee:47:b5:b8:c8:09:94:26:3d:
6a:c5:d8:32:1b:ed:11:c9:57:4e:4e:3f:99:7f:49:
5d:94:89:bd:cd:40:55:78:e4:1f:93:f4:91:0e:5f:
5b:a8:0d:8f:cf:e7:a4:48:0a:1c:80:d8:4d:64:50:
93:1c:83:ec:89:41:31:bc:7c:95:26:c3:c9:73:e6:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B5:D0:81:C4:D8:79:0C:52:BB:C0:3A:60:CD:A8:0B:BE:22:B5:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bcae74b1-0485-3395-bbf3-75829962b579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1d1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:8f:4e:f6:f0:d3:c3:71:40:95:2e:bb:f9:89:fe:08:6b:32:
4c:ca:72:ec:36:11:c1:f2:f9:5d:8f:04:f9:87:1f:2d:4c:d3:
8e:0f:3c:16:c7:c0:85:45:2e:5c:13:82:3c:b6:8b:39:49:89:
c4:8d:31:b4:79:e7:1c:8e:8b:9f:41:74:c1:83:80:d7:b5:6c:
81:45:25:b2:bc:6b:b8:c1:3e:c9:fd:62:01:6f:98:6f:8b:aa:
ba:ab:c5:e9:84:e4:04:e2:1b:48:6d:24:8c:8e:cc:1f:dc:ab:
a5:84:d4:f9:79:7e:aa:21:f6:36:52:25:4d:b6:28:31:03:9f:
4d:2b:fe:40:21:ee:12:f6:2a:34:77:ea:a3:bb:f6:ef:16:a1:
3c:2f:4f:31:86:2e:3c:e5:59:5a:d7:03:6a:23:38:48:6a:4b:
9c:5f:f6:32:0f:cd:9a:af:93:13:d4:91:9e:17:2a:c8:07:8f:
bf:62:05:6b:b5:f6:a8:c0:d1:97:89:0c:09:a1:da:b8:ae:34:
b8:01:5d:78:dc:28:f5:68:45:e0:22:25:91:8a:8a:7b:31:20:
1d:29:f8:1b:8d:b4:76:9c:77:eb:2b:06:c2:34:b0:a2:21:5b:
e7:4c:1f:06:60:25:d1:d1:eb:4d:6b:6e:48:81:1b:f7:e2:1a:
bd:0f:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:40:27 2025 by rpki-client