Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd19ca51-f157-3ffc-bbdc-6554f97ef4a9.roa
File: dd19ca51-f157-3ffc-bbdc-6554f97ef4a9.roa (raw, json)
Hash identifier: jy6abE0YXHRx9CiCw4HfDN2MP06BZbKHCRah1SkQYbo=
Subject key identifier: FA:FC:BB:66:E4:0E:49:B5:9F:B1:74:3F:A9:25:4B:19:74:FD:47:74
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A7779C0A311C0F76130F1A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd19ca51-f157-3ffc-bbdc-6554f97ef4a9.roa
Signing time: Thu 27 Jun 2024 20:16:30 +0000
ROA not before: Thu 27 Jun 2024 20:16:30 +0000
ROA not after: Wed 25 Sep 2024 20:16:30 +0000
asID: 12025
IP address blocks: 2001:470:30d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:79:c0:a3:11:c0:f7:61:30:f1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:16:30 2024 GMT
Not After : Sep 25 20:16:30 2024 GMT
Subject: CN=a1fb8ec8-29ad-493a-a5a5-36e56abc2e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:14:ae:02:dc:9d:0e:f7:3b:75:ec:2e:9e:b0:
95:94:78:13:4c:ab:70:e2:29:02:ed:3a:4c:0a:f9:
19:fd:6e:f7:42:dc:16:51:26:9a:19:b9:a5:82:a9:
00:52:be:5a:8f:58:15:31:0c:c4:11:08:71:7e:a3:
37:13:ef:2e:e8:fb:f6:ba:11:f5:4c:2c:1b:34:d7:
c3:5a:7f:25:68:f3:1c:7c:ee:1c:66:82:30:1e:33:
40:c1:1e:34:67:0f:53:d9:eb:60:ea:49:e2:45:e6:
c2:86:48:8f:b6:fc:6e:e4:16:9d:60:44:db:62:96:
0a:17:60:07:b1:93:4a:a9:01:29:e8:91:7f:40:82:
8f:44:0d:91:f3:06:60:3d:66:5f:9e:7d:49:4d:42:
b9:4f:90:11:3c:bc:4f:ec:2f:a6:4c:89:70:6a:4d:
50:69:4b:f5:ad:fc:1e:82:96:70:8d:5d:0d:24:49:
f2:da:6d:dd:61:eb:94:dc:c7:59:82:6a:aa:18:91:
91:90:6e:0a:13:06:32:e3:60:78:93:a3:42:b4:d3:
32:73:d3:70:79:74:fd:b9:7e:a7:4f:67:e4:45:e0:
9c:40:9d:74:15:e5:13:fe:4d:a5:db:d6:4b:54:57:
69:60:3c:b9:3b:2a:af:e0:4e:2a:d8:87:34:ac:5e:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FC:BB:66:E4:0E:49:B5:9F:B1:74:3F:A9:25:4B:19:74:FD:47:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd19ca51-f157-3ffc-bbdc-6554f97ef4a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:30d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:0e:bf:ca:76:b1:3b:38:81:0b:74:f5:aa:44:9b:4b:09:1b:
36:c3:68:cb:a2:21:61:e7:03:93:20:ac:91:d1:bf:0d:26:f2:
ce:25:b3:f1:bc:aa:e7:bf:00:02:9a:3e:c9:61:11:c6:d4:5a:
74:fb:bc:1d:7c:c9:89:90:8e:ee:7a:b9:a4:3e:a5:51:86:a8:
36:1b:b9:ef:7b:bd:da:a2:26:4a:c1:d0:71:04:7f:09:87:9b:
9c:5e:dd:d7:ef:2b:dd:cb:b8:0a:92:86:cc:a7:37:14:69:a7:
58:e5:f8:87:e5:97:d1:12:cb:f2:d3:a5:f4:52:13:d1:30:f4:
c6:63:94:bb:72:21:d4:9d:44:05:89:c9:8b:aa:bd:ed:15:e1:
d2:c9:e8:38:15:94:40:2f:80:83:57:2f:15:9b:62:2a:b3:4b:
b2:62:0d:93:2d:05:1c:8b:f2:23:9a:b1:39:e2:d8:b2:10:38:
fe:b0:f1:c7:3d:a9:46:98:61:48:9e:89:dc:8a:f1:bd:19:03:
76:6a:d7:68:7e:b1:c8:11:6e:29:fb:7b:26:00:37:98:fa:e2:
a6:6a:83:6f:0b:a9:30:26:8c:39:ad:87:f7:ed:3c:0e:5a:09:
a3:2c:53:df:d1:8e:7e:28:8b:0f:b7:60:73:18:a7:8f:96:f3:
ef:de:fe:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:44:41 2025 by rpki-client