Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c4f06d72-49b8-3ff3-a7c2-c6ce5b1bf7cd.roa
File: c4f06d72-49b8-3ff3-a7c2-c6ce5b1bf7cd.roa (raw, json)
Hash identifier: WMOW2t6uV/qEA5VJXdstKZMcjkluYqzaxlCFTuSTkOE=
Subject key identifier: FB:3B:E7:0F:F1:C6:4E:52:01:40:48:A5:0F:08:16:A5:F0:DB:59:29
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858462E597F2423FE026DA0E00000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c4f06d72-49b8-3ff3-a7c2-c6ce5b1bf7cd.roa
Signing time: Wed 12 Jun 2024 01:00:25 +0000
ROA not before: Wed 12 Jun 2024 01:00:25 +0000
ROA not after: Tue 10 Sep 2024 01:00:25 +0000
asID: 396106
IP address blocks: 2001:470:db::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2e:59:7f:24:23:fe:02:6d:a0:e0:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 12 01:00:25 2024 GMT
Not After : Sep 10 01:00:25 2024 GMT
Subject: CN=2de162f7-d4e6-42e0-809e-b7f503364150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:f1:06:5f:d0:74:19:15:d9:08:ef:43:d7:
24:80:a4:c5:0b:aa:4a:8f:6e:e0:65:93:78:60:56:
41:83:18:0d:55:67:c6:6d:b2:79:df:89:23:23:90:
d8:d9:e8:fd:2a:54:cd:ea:22:23:bf:75:96:96:da:
61:66:6c:f0:da:6f:0f:67:ec:dd:4c:47:65:75:d2:
ec:0a:98:95:c6:e8:8e:ba:b6:fa:25:85:49:77:5b:
4e:50:f9:bf:f2:bf:d2:28:57:35:de:17:5f:4e:ed:
6f:cb:ce:ac:5f:76:63:76:31:2d:65:a4:3e:4f:16:
8e:bc:d3:e6:04:68:b6:7a:44:42:d6:36:24:15:70:
ba:f0:52:4c:6b:e4:46:e1:71:de:24:fd:df:29:e0:
c4:06:84:91:82:2a:aa:67:2b:1e:42:5c:52:be:e7:
78:0b:7b:4b:0d:b9:7e:d2:9b:8a:e8:ae:2d:5c:2b:
c5:87:d0:5d:83:81:c0:e6:ce:01:50:59:fe:5d:ba:
6c:89:32:c7:13:48:cb:ed:5f:74:50:b2:ec:6e:e2:
a8:2c:2f:71:d9:a5:1b:64:39:f2:3b:ca:d9:03:01:
b3:2e:43:59:2c:a5:10:d5:55:f6:8b:55:36:d1:dc:
73:6c:f6:7b:21:51:66:9c:81:75:a7:5e:55:2a:34:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:E7:0F:F1:C6:4E:52:01:40:48:A5:0F:08:16:A5:F0:DB:59:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c4f06d72-49b8-3ff3-a7c2-c6ce5b1bf7cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:db::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:c3:77:c9:83:c5:34:d8:96:48:e1:b8:32:66:08:d2:4d:6a:
09:3b:18:f9:78:54:80:2e:be:30:fa:5b:63:3c:35:11:db:cd:
f4:c5:48:2b:17:44:b7:a9:1d:41:e1:da:82:53:57:d3:f8:8b:
9d:23:74:61:fb:44:73:5b:43:d9:8f:5b:c7:12:99:ea:fe:a5:
65:15:e5:30:b2:75:dd:05:c7:c3:24:70:84:61:d6:68:3f:25:
3e:6b:31:a6:11:96:31:69:5e:71:a1:23:93:d9:45:3b:df:c4:
74:1d:43:f1:fe:c7:da:06:81:21:47:e9:97:26:38:6c:be:89:
f1:cb:f9:57:d5:4b:9b:81:cd:66:e4:7f:e3:b2:69:af:f7:f7:
34:31:ec:ca:30:a5:3e:74:e5:d0:f9:21:ea:80:c9:bc:f0:05:
b6:8f:95:3c:85:e0:78:1c:06:e5:fe:31:2c:0b:f9:8f:87:d0:
73:99:91:09:a7:44:d6:23:cb:99:85:9a:9b:5b:9a:d5:21:d3:
71:a8:5e:9f:c2:7c:7b:2b:61:8c:3e:38:b1:6f:d5:e0:7f:25:
cf:55:c6:92:ec:2f:71:c8:c3:34:be:b5:db:9d:5d:50:c4:e4:
bd:ce:9d:fc:95:a0:b7:05:64:ee:64:9e:73:a9:39:a5:40:92:
e8:4b:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:19 2025 by rpki-client