Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cde86353-16b1-3540-88a5-75e3ca2003a7.roa
File: cde86353-16b1-3540-88a5-75e3ca2003a7.roa (raw, json)
Hash identifier: FVV/Lkj3NCcKYshiihYPO66VWUKVLPPO8jgrvSWJxnI=
Subject key identifier: 3A:9B:4E:1B:42:90:C9:76:F6:9A:56:D6:4D:00:9E:78:30:C0:A1:70
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846004C8ACE6F7A1992169E1F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cde86353-16b1-3540-88a5-75e3ca2003a7.roa
Signing time: Sun 26 May 2024 13:00:34 +0000
ROA not before: Sun 26 May 2024 13:00:34 +0000
ROA not after: Sat 24 Aug 2024 13:00:34 +0000
asID: 20119
IP address blocks: 2001:470:1c1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:00:4c:8a:ce:6f:7a:19:92:16:9e:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 26 13:00:34 2024 GMT
Not After : Aug 24 13:00:34 2024 GMT
Subject: CN=73223a94-6584-4889-afb6-93ee80a03a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:68:78:c6:e2:b8:d7:d9:12:9d:fa:6b:66:
7b:7e:0e:2c:7b:e8:ae:33:6c:68:b1:c0:84:66:68:
55:0f:6d:fb:b2:a4:9b:e8:09:46:bc:65:d8:47:98:
40:51:6c:d0:28:e9:55:e0:8a:e7:c6:ec:0f:fa:7a:
17:99:d3:f5:29:2f:85:02:57:1a:50:9c:51:6e:0b:
15:b1:50:af:d3:c6:33:c4:46:c8:67:9f:cc:35:9d:
7b:ba:2c:b0:81:ac:87:6b:df:c5:7f:4d:ef:c8:bc:
05:32:07:6f:e5:6f:06:73:42:03:b9:61:96:c7:82:
cd:a2:10:3d:53:b0:3f:74:77:83:7a:bb:2c:2c:b9:
53:b7:38:ce:3e:65:e0:d8:c9:3c:f2:ba:d8:83:d1:
3e:39:d1:60:8a:71:01:86:26:77:31:47:1f:f1:88:
f5:43:64:5d:d1:76:76:d9:ae:21:7b:6b:24:fb:8e:
62:27:b1:27:52:44:70:2d:25:d8:57:31:de:41:d1:
cd:d5:dc:8f:0d:72:88:49:8f:9f:31:7f:ce:f2:9a:
b0:65:5d:7e:97:85:b3:23:33:c3:06:2e:b8:a7:37:
d0:5d:70:78:a5:bb:c2:6a:f9:9f:1a:84:15:88:4d:
de:cc:66:ba:db:45:9e:13:f1:89:ee:11:8b:ef:08:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9B:4E:1B:42:90:C9:76:F6:9A:56:D6:4D:00:9E:78:30:C0:A1:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cde86353-16b1-3540-88a5-75e3ca2003a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:71:d3:c2:5d:11:0c:5e:2d:b3:a0:f6:2b:65:25:ed:9d:5c:
7a:3d:0d:d2:49:ff:3d:bd:65:f5:9e:1e:00:11:b6:b6:6a:cd:
fa:a8:ef:e3:34:01:6e:27:20:cd:78:6b:1f:3d:35:23:9d:d9:
05:ca:ad:7c:41:50:6f:67:ab:91:5a:e6:f1:8d:1c:12:71:3f:
ca:ab:36:99:75:6a:41:51:0b:05:39:4b:68:2f:1c:f8:54:01:
9c:02:7c:61:6f:36:c4:34:79:35:82:63:48:03:2a:f9:22:3e:
68:96:16:61:cb:d4:08:00:37:6a:4c:ac:33:b4:d6:71:46:76:
33:49:f7:18:67:42:63:d4:1e:8b:37:36:f8:5d:04:b5:7e:57:
9d:03:e0:e2:2e:63:12:32:09:74:d4:14:3c:7d:5b:0f:f2:4e:
d9:d5:ff:55:ac:f1:88:20:4d:00:01:e8:dc:0c:b9:a7:7a:f5:
c0:80:a7:d7:53:af:37:54:b2:7f:fb:50:60:1d:0d:0c:45:19:
1a:2d:4a:c6:fa:8e:9c:2b:f1:80:39:35:af:f4:7b:ad:5a:c6:
59:4a:fc:85:bb:b8:3d:fe:fd:a4:8e:ca:ea:6c:06:de:fe:51:
50:b1:ca:16:aa:42:dd:d0:7d:79:1d:a1:7c:a3:30:5e:65:1b:
c5:f2:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:06:52 2025 by rpki-client