Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c384be19-fdaa-3b7c-a349-d05a50ace6a9.roa
File: c384be19-fdaa-3b7c-a349-d05a50ace6a9.roa (raw, json)
Hash identifier: E7P5fNdJxufZXbuLQAfsuDk91L7bFtrzzl4Q6CJJvBg=
Subject key identifier: 6F:46:35:66:AA:EB:D7:1E:AA:9C:42:CF:4D:95:8B:9A:75:A9:28:56
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584635543F1C9C2B2E1AE3BE7980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c384be19-fdaa-3b7c-a349-d05a50ace6a9.roa
Signing time: Fri 14 Jun 2024 13:00:35 +0000
ROA not before: Fri 14 Jun 2024 13:00:35 +0000
ROA not after: Thu 12 Sep 2024 13:00:35 +0000
asID: 41568
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:35:54:3f:1c:9c:2b:2e:1a:e3:be:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 14 13:00:35 2024 GMT
Not After : Sep 12 13:00:35 2024 GMT
Subject: CN=c10e04b7-a76e-44ee-9ccf-39fa151faa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:94:43:0c:b6:de:fc:c6:cb:49:47:68:7f:3c:
55:34:3b:88:09:94:dc:bb:23:4b:43:fe:b5:58:cb:
0f:7a:d5:60:e4:d4:fe:48:ac:34:87:3b:14:c2:01:
65:90:3e:2b:66:6a:ee:cb:c2:4c:c6:4e:53:1c:db:
31:8b:50:3e:bc:19:6c:df:a5:2f:86:b7:06:40:a7:
16:c2:d2:de:97:66:41:bd:c5:d1:56:25:e0:b2:21:
88:d5:ad:18:be:76:6c:27:88:86:d8:91:95:0e:22:
32:31:76:ed:2c:c1:9f:d4:b6:02:6a:3a:ea:d9:1e:
aa:ff:29:e3:24:69:58:9f:4c:03:1e:1f:ce:68:99:
94:03:35:08:db:3f:57:27:61:6a:91:cb:9e:a7:dd:
be:e8:48:17:7c:aa:c5:10:bf:57:1a:4b:ef:a0:42:
e3:5f:81:67:4d:d4:79:d6:ce:b1:c3:ad:ba:a2:3c:
78:58:ba:b3:45:95:a1:53:be:0e:e4:28:56:e5:f5:
50:99:d3:40:50:33:69:1c:f8:35:fe:35:7e:af:8d:
30:1e:54:7e:ab:97:09:5b:ce:b4:3e:81:db:ac:b0:
8e:69:85:21:43:52:b5:bf:f1:59:73:c6:f9:d5:40:
f9:6e:28:9f:9b:ec:e8:a8:92:b9:ee:64:0c:53:95:
29:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:46:35:66:AA:EB:D7:1E:AA:9C:42:CF:4D:95:8B:9A:75:A9:28:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c384be19-fdaa-3b7c-a349-d05a50ace6a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:61:89:ad:ae:d0:99:87:a5:45:52:39:b5:37:83:56:97:98:
43:35:d7:cb:41:68:d8:1c:a7:4e:d2:01:48:4c:21:62:c2:f8:
ed:a4:c1:54:a8:b6:24:72:2e:ef:49:07:92:f6:26:dc:b8:15:
54:a4:79:60:aa:27:a8:03:27:7b:6b:22:a7:28:1a:af:e6:69:
7a:03:e8:c9:6b:26:e4:e7:a0:27:34:0a:73:98:6f:4a:25:8a:
ca:86:f7:5c:9b:25:f2:a7:09:d7:03:0d:32:b3:74:5f:29:55:
cd:36:3e:e3:46:1c:cf:92:be:7f:e3:6d:9c:a8:9d:12:45:37:
50:ef:cc:25:90:23:74:5b:18:a6:3b:8b:74:4a:f7:60:ab:7e:
6f:d2:f5:63:77:58:d2:66:0e:c6:14:48:bb:12:0b:9d:70:e2:
f1:3d:4f:d8:d3:f4:2b:73:e6:8d:d3:39:96:a9:59:d9:2f:fe:
ff:f1:11:27:ae:5e:33:a0:eb:43:bd:d9:da:9c:9c:09:8d:94:
60:fd:5d:52:cf:3c:d5:6f:dc:fe:8e:a2:79:3a:80:73:eb:98:
0a:e8:b3:d8:32:71:2f:05:1d:c1:5d:5a:cb:ce:df:60:9f:57:
64:72:7f:72:a6:5e:d6:3f:36:1a:7a:a5:51:a4:eb:e0:e6:ef:
77:16:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:57:39 2025 by rpki-client