Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c48227a5-f4b3-3efe-970e-7ef37382c8e2.roa
File: c48227a5-f4b3-3efe-970e-7ef37382c8e2.roa (raw, json)
Hash identifier: TakK0IbXmL5ddd6GhqYr7PlDFCdId1YCOeSzkbXksQE=
Subject key identifier: B6:77:27:DB:9C:A7:AC:2A:21:08:33:C4:F7:C8:F3:78:D0:E1:E6:6C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846C7F3E2A0114054F443FF4540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c48227a5-f4b3-3efe-970e-7ef37382c8e2.roa
Signing time: Tue 06 Aug 2024 01:30:16 +0000
ROA not before: Tue 06 Aug 2024 01:30:16 +0000
ROA not after: Mon 04 Nov 2024 02:30:16 +0000
asID: 216040
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:f3:e2:a0:11:40:54:f4:43:ff:45:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 01:30:16 2024 GMT
Not After : Nov 4 02:30:16 2024 GMT
Subject: CN=26700624-7b8f-4cec-bd70-c5f5ae8e5d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:65:ff:13:d0:29:4c:fb:f9:32:df:de:89:
ed:ca:fa:80:03:a7:01:25:29:02:e1:5e:90:99:da:
e9:41:32:15:9c:b7:01:2b:bb:0f:5a:f7:53:22:ea:
90:90:0a:f8:5e:ea:ed:f0:fe:8b:f0:4e:89:43:fa:
b6:90:97:2e:1d:21:cb:b2:09:64:36:30:b3:ad:42:
ba:0d:b9:b7:30:5a:7f:fd:af:d3:61:a2:07:ae:85:
ee:6e:e0:8d:ad:d6:c8:bb:50:74:28:be:6a:48:f8:
69:79:ff:79:59:a6:f4:52:ef:cc:67:ec:8c:ec:aa:
c3:0f:a5:af:21:5c:01:0a:f2:8b:d0:2e:7b:11:1a:
2b:06:09:6e:b8:ec:da:12:b0:f3:85:0d:53:d7:42:
e9:c4:58:a6:86:88:48:7c:4f:40:c1:59:4a:eb:3e:
ce:91:ba:ed:e7:8c:62:f0:b3:a3:3e:7d:46:f3:20:
89:1f:19:f0:3f:1e:9b:ff:f7:eb:aa:b4:5b:d9:2d:
af:bf:05:e0:c7:1a:55:3b:f2:97:ba:03:f5:ce:6b:
c1:1c:41:6a:d1:2e:3f:ec:7f:49:86:92:78:d4:29:
1a:18:42:59:9a:1d:a0:b5:ee:87:72:1d:3f:ec:d0:
59:dd:1d:92:e0:99:f6:bd:5e:65:27:4d:40:81:69:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:77:27:DB:9C:A7:AC:2A:21:08:33:C4:F7:C8:F3:78:D0:E1:E6:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c48227a5-f4b3-3efe-970e-7ef37382c8e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:a2:c5:b9:c0:5f:b7:5a:f9:f8:97:7f:66:4f:a6:ae:5a:19:
75:3a:f2:6c:79:41:e2:99:c4:40:ff:2a:de:bf:5d:29:14:8f:
67:61:5d:98:98:40:f6:3b:dd:38:65:28:c5:06:68:8e:1a:ce:
c3:02:31:a8:a4:61:ff:18:54:60:bc:62:cb:aa:c2:b9:ae:2e:
bb:ed:5c:66:08:c9:c3:21:83:10:78:d7:e6:07:8d:18:41:4b:
29:e5:32:41:22:90:65:f7:16:ac:94:4e:b3:33:19:41:a6:c4:
7c:a4:dc:dd:eb:bd:8a:4e:a0:ff:e1:3e:b4:22:a4:bb:3e:61:
80:02:b6:67:00:51:e0:f6:b3:1b:5d:ef:4d:62:32:6d:18:8e:
54:fd:f5:ac:9a:48:39:f2:44:2a:6c:8c:07:6b:b1:fc:63:23:
f8:fb:45:f6:b2:64:96:29:6f:a6:ee:2d:63:fd:ac:a1:30:26:
a2:7a:dc:9e:2d:99:30:50:f1:f6:cd:e9:39:2c:b3:87:e4:a0:
10:53:db:ef:14:01:67:27:22:2e:5f:a9:90:6b:91:74:71:82:
7b:ff:a0:66:e0:d8:4b:0f:39:7a:a1:a8:4d:a6:e7:a0:9e:bb:
fe:e7:56:b2:e9:43:8b:41:e2:49:3a:8d:36:f2:96:28:13:27:
9d:82:ea:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:20:43 2025 by rpki-client