Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfad791b-0e73-37ab-95f6-eeceaa399bf2.roa
File: bfad791b-0e73-37ab-95f6-eeceaa399bf2.roa (raw, json)
Hash identifier: RTCW0KyLq31A3/MIo5JBZ6qs82OX7o56A5ubPmceGj8=
Subject key identifier: 17:8D:E7:EF:74:47:53:77:7A:D7:C2:58:BD:02:B3:EC:7C:20:A8:1C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858463AE9A4E0941EC02239DF8BC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfad791b-0e73-37ab-95f6-eeceaa399bf2.roa
Signing time: Sun 16 Jun 2024 13:00:33 +0000
ROA not before: Sun 16 Jun 2024 13:00:33 +0000
ROA not after: Sat 14 Sep 2024 13:00:33 +0000
asID: 58299
IP address blocks: 2001:470:15f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:3a:e9:a4:e0:94:1e:c0:22:39:df:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 16 13:00:33 2024 GMT
Not After : Sep 14 13:00:33 2024 GMT
Subject: CN=ce956864-c6dd-4d03-a0d8-98288b98c609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e3:08:9a:2c:62:d1:a9:49:9b:67:db:92:ed:
a8:d0:e0:7f:86:ae:53:32:b3:21:06:32:93:fb:52:
84:31:a5:3d:cf:3d:05:7a:5e:da:2d:2b:c0:8b:10:
d5:9c:89:cc:3a:17:58:fd:93:ce:3f:67:3c:8d:88:
3a:51:e6:47:68:f3:e1:14:76:2c:53:68:39:83:00:
67:e5:f6:d0:c5:d3:58:20:44:00:3f:2e:4f:08:f6:
86:c2:b7:4c:d4:21:af:03:6f:cb:27:65:19:26:13:
0b:c8:8f:f6:51:a8:12:dc:31:a1:73:ff:59:b4:e5:
c0:4a:4b:a2:8b:84:be:4f:9d:66:60:76:d7:21:33:
db:5a:2f:90:6f:1e:8a:5d:2b:86:15:60:5c:04:3f:
1b:28:be:2b:b4:83:18:bd:83:ee:e3:1e:c5:6c:54:
8f:51:ce:ef:4a:70:f2:de:54:9c:6a:5f:0b:fa:ce:
cc:eb:5c:66:ac:17:f3:74:f0:9e:d5:a4:4b:80:ad:
7f:55:5b:58:e8:a4:fc:4c:d9:4a:58:3b:27:dd:8c:
0a:a7:13:46:f0:ed:45:23:64:e7:da:13:77:f1:38:
65:32:c6:84:05:a0:85:5f:c2:1a:60:bb:26:af:ea:
15:fb:7d:77:cc:9b:84:a3:81:e8:ac:b4:8f:63:d8:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:E7:EF:74:47:53:77:7A:D7:C2:58:BD:02:B3:EC:7C:20:A8:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bfad791b-0e73-37ab-95f6-eeceaa399bf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:15f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:f6:69:20:a9:8d:87:a2:98:ef:02:30:23:27:59:90:da:aa:
3c:79:b6:ec:28:52:52:36:b7:13:28:1d:a4:75:08:17:cd:b1:
43:7a:b0:c2:56:08:1f:3b:ac:f1:0e:51:eb:92:f6:35:71:76:
da:41:c1:ef:a3:52:b1:3b:1c:ba:ae:0d:df:d0:64:5d:9d:9a:
c5:fb:ac:3a:b4:16:3a:0d:04:c6:93:ef:f0:b4:a2:70:4a:8a:
5e:cf:c8:11:db:60:22:ff:b4:6f:eb:01:a3:1a:81:1c:bf:70:
05:f6:83:01:78:ee:95:ea:a0:1a:2b:8f:d3:0c:78:7c:ce:d8:
9d:23:b9:64:f7:56:57:66:4a:79:bb:36:55:e8:99:fa:f3:fa:
6f:d2:52:14:54:36:e4:9e:67:78:26:2c:b2:c7:5b:cf:87:f8:
80:4f:9f:a6:13:b2:59:cf:ab:71:75:e7:13:3b:fc:d0:20:43:
3c:2d:99:dd:63:b5:1b:f2:de:96:b0:a7:89:eb:56:07:1e:a4:
e8:19:60:dc:8f:fe:36:9d:30:81:a9:a6:6f:57:3f:ba:df:a2:
7f:2f:81:c3:23:fa:78:d9:4a:74:e0:55:06:7d:5f:74:31:ea:
ef:0a:c6:04:52:4c:c6:06:19:6d:7b:35:1e:93:fb:95:4f:cf:
8c:4c:f1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:32:59 2025 by rpki-client