Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8161e68-5c2a-3135-a46f-50dd0796d748.roa
File: c8161e68-5c2a-3135-a46f-50dd0796d748.roa (raw, json)
Hash identifier: 6+v3EK4qildc1n4I1jpsSdUehnnjIReuuv8g8M4CkLQ=
Subject key identifier: 88:49:6C:7F:31:68:13:BF:51:77:EC:A3:E0:DE:46:2B:EB:E0:68:B3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858463B3E4E37F1F8406956AD3000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8161e68-5c2a-3135-a46f-50dd0796d748.roa
Signing time: Sun 16 Jun 2024 15:51:15 +0000
ROA not before: Sun 16 Jun 2024 15:51:15 +0000
ROA not after: Sat 14 Sep 2024 15:51:15 +0000
asID: 393667
IP address blocks: 2001:470:b0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:3b:3e:4e:37:f1:f8:40:69:56:ad:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 16 15:51:15 2024 GMT
Not After : Sep 14 15:51:15 2024 GMT
Subject: CN=c8db111a-42dd-48c4-9489-10b54ec3946e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:1e:f3:1c:94:82:36:eb:d6:f8:b7:d0:48:
7c:60:49:38:5f:ab:f2:18:22:e1:66:80:14:c4:82:
fd:91:e8:a7:6b:da:b1:50:c4:7e:d0:0a:39:88:f5:
87:25:14:de:f8:71:11:a5:7c:29:60:54:b3:38:73:
b8:37:31:e9:a7:6c:82:60:56:bf:1c:31:c9:29:97:
8f:4b:05:ca:8d:57:e3:c4:8e:21:9c:91:f8:5f:ef:
25:ea:3f:71:36:77:24:61:0f:b5:3f:09:57:3a:fe:
24:7a:9d:dd:f4:8d:e9:2c:21:52:83:7e:df:03:00:
6f:b1:5c:9f:a6:5b:9f:76:5b:b4:3e:0b:db:98:88:
8b:f4:d4:64:fe:88:89:dd:07:75:2c:d2:13:3e:be:
a4:cf:ef:ff:d3:6b:e6:6d:30:92:fb:db:5e:90:e6:
34:a2:0e:8e:d0:2b:98:36:ca:36:63:55:25:d1:a1:
d4:16:c7:2e:2e:87:a3:6e:10:dd:ba:95:15:42:5a:
ab:87:41:f3:21:69:94:07:6b:97:f3:30:5c:af:5a:
9f:40:96:45:8c:c3:cc:06:49:36:af:c0:e7:4a:29:
f0:1f:aa:db:f7:a1:75:45:b5:39:be:96:53:13:a1:
4f:8b:fd:88:f5:1c:78:a8:18:ae:94:15:44:a1:af:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:49:6C:7F:31:68:13:BF:51:77:EC:A3:E0:DE:46:2B:EB:E0:68:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8161e68-5c2a-3135-a46f-50dd0796d748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:b0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:a4:79:ce:b0:e3:0e:bd:03:ac:97:a6:a0:60:ce:c9:15:bc:
fd:7a:eb:16:42:1a:2e:b9:76:3a:0f:4b:08:fe:78:bf:fa:d2:
92:b9:2a:5f:1e:12:dd:a3:cf:ce:92:cb:2e:4b:8c:27:5b:4b:
0d:b9:bb:8c:af:37:2a:1c:a6:83:ae:5d:f9:50:d9:2a:55:e5:
59:81:e2:3a:04:87:1f:2d:f2:12:15:52:b0:ae:2f:11:7b:5a:
91:71:33:65:a6:6b:97:db:73:a8:5b:be:2f:ad:1f:cd:71:20:
0b:99:fe:3b:a7:6e:71:ca:9e:5a:92:70:ea:d2:83:79:75:7d:
f0:70:54:52:bb:14:89:db:b8:42:7b:57:ff:b0:bd:02:43:91:
6e:23:b7:c5:86:bf:a6:5f:35:48:88:35:37:7c:7c:dd:bc:27:
d8:a7:1d:5d:8d:ea:19:03:90:58:eb:d1:a0:94:65:4c:a7:e2:
f2:9f:73:91:0e:3d:63:8c:83:e6:eb:23:f1:4f:11:7c:38:ef:
91:90:99:1b:43:0c:e0:44:4c:b0:5b:0c:d1:fd:00:84:c2:3c:
e3:34:72:21:a2:f0:1d:ad:7f:5b:d5:90:05:42:31:00:33:26:
e1:71:2b:2c:6a:0b:2b:31:8d:46:d4:f0:73:f2:62:ad:c8:f6:
42:1b:cf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:52:55 2025 by rpki-client