Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c31b79fb-d916-3b50-bf39-a1b469547876.roa
File: c31b79fb-d916-3b50-bf39-a1b469547876.roa (raw, json)
Hash identifier: BxUZIQuYW8NdxHqDJR61x3inSKVc3sg5HoNBGQFvpc0=
Subject key identifier: B9:EF:DF:11:C3:E0:65:C5:DB:EC:D5:80:26:6B:F7:B3:CB:71:BE:16
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285843F4F3AD0A42544D735DC158C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c31b79fb-d916-3b50-bf39-a1b469547876.roa
Signing time: Tue 21 Nov 2023 02:00:16 +0000
ROA not before: Tue 21 Nov 2023 02:00:16 +0000
ROA not after: Mon 19 Feb 2024 02:00:16 +0000
asID: 50058
IP address blocks: 2001:470:87::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f4:f3:ad:0a:42:54:4d:73:5d:c1:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 21 02:00:16 2023 GMT
Not After : Feb 19 02:00:16 2024 GMT
Subject: CN=046d2970-53a9-4eec-a1c8-57eb0d9b463f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:fc:9b:63:12:8d:2a:3f:58:f4:fe:88:22:
80:d0:f6:97:ab:f9:6d:9e:6a:b8:06:3f:c7:83:81:
94:20:74:de:9f:ad:03:91:d5:9e:e0:f7:42:f3:df:
c3:b3:b8:eb:83:ec:79:90:38:40:9f:3c:ba:00:9d:
3d:bd:5d:e0:19:a6:79:5e:61:ee:6b:12:f9:37:ff:
9e:13:61:89:47:8e:a9:f1:64:31:d7:c7:ba:d6:16:
10:b7:71:82:68:89:22:b5:ec:85:e7:0e:16:a3:4f:
2a:51:9d:a2:31:a1:f7:c3:7b:57:1f:88:b1:e6:e4:
93:23:2f:67:c5:5a:11:00:53:d6:b0:2b:de:21:5f:
f6:1e:0f:1e:0b:85:39:80:79:e8:3a:97:e6:fe:05:
be:78:b8:83:a3:2c:1b:21:d8:79:a5:2a:ef:0c:24:
e8:09:9d:5b:1d:83:45:da:06:35:25:df:49:a8:e2:
4f:15:0d:a5:01:0f:49:a3:fb:e4:38:ef:57:f0:d8:
3d:49:1a:9f:a7:3d:97:22:a7:82:55:42:d5:19:ce:
de:f2:68:ac:70:b9:54:d2:91:d1:33:c5:ea:bc:44:
9e:3a:b8:ad:23:f5:c8:7b:67:03:7c:3f:10:a7:bf:
be:11:fe:27:a4:c3:48:17:24:2d:e4:24:a1:c8:f5:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EF:DF:11:C3:E0:65:C5:DB:EC:D5:80:26:6B:F7:B3:CB:71:BE:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c31b79fb-d916-3b50-bf39-a1b469547876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:87::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d5:aa:2f:a3:a3:28:4f:74:59:27:62:b8:1d:f2:a7:09:9e:
08:82:35:8c:87:ba:eb:10:dd:cf:51:a8:ec:f8:13:4e:17:a5:
38:20:24:37:b6:8d:de:b2:7f:0e:14:5d:39:b0:38:e9:8c:78:
c7:c5:89:73:54:1a:e4:2e:d9:52:77:64:ff:21:7b:99:8d:c2:
e9:9f:e6:7d:32:fd:ce:2d:11:f3:2d:48:fd:d4:3a:6d:0a:6d:
70:cf:36:ee:d5:60:64:dd:d0:6a:13:27:9e:16:c3:72:2f:1f:
29:a1:bb:5b:66:60:1a:8f:3b:7d:14:6d:e3:ba:1e:06:4e:27:
d6:2c:00:21:09:c3:09:36:43:33:72:55:06:31:06:0a:33:ab:
f6:66:06:68:b7:6b:8c:33:89:6f:1e:78:4b:e4:a7:56:92:76:
96:be:5c:f1:13:09:d8:2d:7f:b0:05:e8:dc:d7:d4:32:0e:0e:
b4:72:02:44:78:bf:6d:12:8b:3f:26:e0:af:0f:20:90:7f:1b:
25:30:b0:09:3b:a1:d7:49:fb:b0:fe:ff:8d:58:5a:09:36:3d:
3e:7c:f8:f7:35:a0:2a:b3:c2:86:d4:eb:e8:8d:eb:53:20:1b:
db:b7:5b:16:e2:b5:51:79:09:de:f9:e4:8f:c7:6b:b7:7a:b9:
9e:4b:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:35:56 2025 by rpki-client