Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd539706-b832-32c3-8964-4f8b7c69e4ba.roa
File: cd539706-b832-32c3-8964-4f8b7c69e4ba.roa (raw, json)
Hash identifier: sI3V5luYRaZ3YTkkkqk4CJXb/MJOWDqdhHsfsMzKa68=
Subject key identifier: 73:6A:16:08:71:1E:BD:31:5D:A2:E1:48:E8:25:96:72:29:4D:25:06
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285844FA09B7259FB195BB9E0B54A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd539706-b832-32c3-8964-4f8b7c69e4ba.roa
Signing time: Thu 22 Feb 2024 14:30:48 +0000
ROA not before: Thu 22 Feb 2024 14:30:48 +0000
ROA not after: Wed 22 May 2024 13:30:48 +0000
asID: 53221
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:fa:09:b7:25:9f:b1:95:bb:9e:0b:54:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 22 14:30:48 2024 GMT
Not After : May 22 13:30:48 2024 GMT
Subject: CN=3a2866f3-ab02-4e76-b99e-62929f1d03d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:54:10:31:35:80:75:f5:1c:b9:eb:55:46:db:
8c:37:eb:d3:fb:08:84:62:c1:f2:31:ff:c1:fb:c3:
56:60:68:2c:d7:33:d0:81:58:d5:70:6d:50:12:57:
5f:57:ef:48:ca:27:0e:ef:16:c5:04:11:05:84:e9:
d5:07:59:6b:41:82:90:af:a2:14:b9:85:1e:ba:d1:
01:f8:bd:51:23:a9:ef:a4:ed:f7:11:50:fc:06:30:
8a:c8:60:19:d8:14:74:31:83:7c:a5:71:ec:44:32:
9f:23:6b:1f:22:35:1b:54:99:36:1f:60:4a:c9:85:
30:c3:be:ed:ba:c7:88:90:8b:d3:20:5f:f3:28:68:
be:65:68:eb:ac:43:f3:e5:53:6e:25:17:ad:46:47:
4d:60:0e:99:e6:62:fb:ef:bd:37:b5:b7:54:3b:0f:
db:10:8c:aa:e5:fd:25:96:f0:1f:3a:25:b1:92:3f:
b2:f5:f0:a5:ee:2c:20:7e:0c:7d:79:b9:a0:d8:58:
49:7a:a0:95:dd:c3:7b:0e:3d:fa:0a:78:1f:40:6c:
b6:64:c1:ce:b8:a0:63:82:72:e5:84:52:ba:1c:7f:
85:b3:71:78:13:54:d6:50:a6:91:e9:92:fa:69:ed:
7e:9b:4d:11:19:c4:9a:21:bf:3a:a6:b6:96:19:dc:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6A:16:08:71:1E:BD:31:5D:A2:E1:48:E8:25:96:72:29:4D:25:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd539706-b832-32c3-8964-4f8b7c69e4ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:3e:e7:ec:53:6e:f4:eb:7a:1f:ed:6b:55:65:44:08:95:e6:
59:27:54:af:a6:c9:1a:c7:48:e9:33:60:5b:ca:2e:8c:8a:fc:
57:d0:0c:7c:07:7d:b9:15:a7:36:f6:fd:b6:1a:1e:3c:44:30:
cc:d7:73:f7:3c:17:d4:bf:c1:14:13:08:7c:dc:04:3c:ac:9b:
a0:7e:a5:78:7c:36:b5:36:12:33:42:fb:87:52:2b:71:c5:24:
82:df:5f:69:78:a7:02:00:83:f3:f5:0e:29:5e:90:26:43:29:
1e:7f:2e:c7:67:9f:27:e5:35:9a:ed:12:0a:5c:c2:16:e3:56:
8c:ed:8c:8a:9e:c6:b7:9e:3e:73:b0:e1:21:e8:d1:c7:f2:71:
c5:21:cf:21:33:ad:74:98:84:aa:81:fc:2e:a6:8e:2b:e1:5a:
36:eb:9f:1f:09:ee:ee:28:72:6d:7e:6f:52:78:a0:b5:5d:bc:
da:d8:00:b8:20:64:2b:a7:57:b6:31:33:f2:99:56:f9:f0:2e:
34:8b:09:71:bf:10:db:e0:9a:b2:2e:9f:0d:f6:8c:ed:96:cf:
a2:ca:80:88:67:2f:d1:8b:d1:20:d6:1b:50:e7:f4:0e:15:b3:
86:70:67:55:2c:00:1e:4f:40:76:e9:51:c9:e7:c2:4b:3b:e4:
a3:bd:6c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:53 2024 by rpki-client on console-fra.rpki-client.org