Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3da713-6060-35ba-8043-49f11e514e05.roa
File: bf3da713-6060-35ba-8043-49f11e514e05.roa (raw, json)
Hash identifier: NxohP3/fCUvvfyiuGh0pp24596bITUdG8V3tZiNqtew=
Subject key identifier: 98:7D:29:12:7D:91:E1:82:0B:FC:7D:27:0C:15:12:DA:77:E7:74:E8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A775DB372EB7982A4C29080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3da713-6060-35ba-8043-49f11e514e05.roa
Signing time: Thu 27 Jun 2024 20:16:16 +0000
ROA not before: Thu 27 Jun 2024 20:16:16 +0000
ROA not after: Wed 25 Sep 2024 20:16:16 +0000
asID: 329386
IP address blocks: 2001:470:30d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:5d:b3:72:eb:79:82:a4:c2:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:16:16 2024 GMT
Not After : Sep 25 20:16:16 2024 GMT
Subject: CN=08761a37-8d27-4ca0-8acf-ac3af332d121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:1c:f4:f4:77:27:da:bc:a6:85:da:38:fc:
d4:57:5e:4d:ff:a2:e3:b3:47:ff:1f:17:97:00:1d:
6a:fe:1c:1f:24:29:48:73:3c:83:f4:e2:65:52:80:
03:80:83:b3:3e:21:37:8f:7a:24:7a:dc:a9:b7:09:
f5:22:6e:81:bd:fa:40:4f:3d:a5:53:47:7c:1f:8b:
dd:bc:8c:aa:3a:20:09:21:59:d5:1c:37:76:32:a9:
15:fc:2f:0e:bb:59:f5:26:57:f2:e4:72:43:47:15:
61:67:b1:c2:38:35:c0:cd:f5:5f:0a:9e:94:5a:93:
90:33:a9:f6:f7:5d:a5:ee:f2:4f:af:3c:a7:f4:b7:
cf:6e:ec:44:6b:64:9a:cb:8f:ab:f4:ea:ec:14:f5:
7a:c2:20:67:69:4a:0a:0f:79:26:86:d4:b0:bb:71:
5c:2b:4d:1f:d4:7c:84:dc:b3:5c:c3:c1:cc:04:f1:
9f:8e:78:77:9e:31:88:75:86:be:77:06:15:61:90:
6f:c5:47:6c:55:47:c2:cb:87:f9:74:27:cf:26:aa:
d0:0f:6e:21:6b:85:35:cb:a2:06:dc:78:bc:04:62:
d0:50:4d:ae:d9:ae:06:16:56:0a:59:e4:4a:bd:5b:
ae:fb:3f:f4:7c:43:9b:1b:4f:bc:25:a9:68:be:cf:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7D:29:12:7D:91:E1:82:0B:FC:7D:27:0C:15:12:DA:77:E7:74:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3da713-6060-35ba-8043-49f11e514e05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:30d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:98:7b:aa:5f:11:ca:ff:dd:93:7b:2b:3a:58:a7:b8:e2:e3:
62:b5:d3:41:5d:74:9e:6e:08:ca:b0:a8:4d:76:ad:55:01:52:
42:b4:8d:3d:5a:b7:91:68:b9:ba:b8:47:54:db:5a:0e:e4:50:
f4:d1:59:06:09:b3:0b:66:a0:ea:bf:bc:bc:dc:e7:66:5d:e3:
0c:a1:35:18:2b:9d:87:a0:8a:32:2f:72:19:04:23:53:02:cf:
35:40:25:b6:f6:79:67:b4:ba:0b:27:4c:7f:af:d3:90:ea:de:
ce:54:18:56:ac:06:c1:c4:01:85:ed:bd:d1:5a:66:dc:63:8e:
92:af:c3:5c:14:36:60:30:d5:21:db:71:0f:0e:17:2d:55:66:
6e:c6:41:fc:09:f0:94:0c:d9:dc:8a:f4:e6:e5:10:51:5a:3a:
d6:7b:b7:e6:6a:9c:50:8b:40:50:ed:6f:e3:ae:9e:55:d1:a2:
ba:be:3b:0c:8c:4c:7f:c3:50:a5:8c:69:92:d3:a1:43:91:79:
7b:3e:1b:42:3c:2e:82:82:3e:ad:c9:db:82:26:3e:70:a5:a6:
b0:19:2f:9b:68:df:15:25:93:7b:70:29:93:63:09:4c:8f:59:
d4:25:66:f1:97:65:60:1f:c0:a8:65:a1:21:0f:47:a7:c5:af:
a5:e1:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:01 2025 by rpki-client