Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df420cfe-1caa-3687-a790-0c1dc1e8c148.roa
File: df420cfe-1caa-3687-a790-0c1dc1e8c148.roa (raw, json)
Hash identifier: iCWlMKuFfEQSLs0r053oFc8WNneqEZjoQh7DDUs0UuI=
Subject key identifier: A5:66:00:D7:22:ED:3B:87:C7:C5:C0:82:69:4E:3B:43:CC:DB:2D:5B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858464788CC77834D1B354ED4FCF0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df420cfe-1caa-3687-a790-0c1dc1e8c148.roa
Signing time: Fri 21 Jun 2024 01:31:02 +0000
ROA not before: Fri 21 Jun 2024 01:31:02 +0000
ROA not after: Thu 19 Sep 2024 01:31:02 +0000
asID: 142271
IP address blocks: 2001:470:31a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:47:88:cc:77:83:4d:1b:35:4e:d4:fc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 21 01:31:02 2024 GMT
Not After : Sep 19 01:31:02 2024 GMT
Subject: CN=c6011492-b817-4a08-a973-1463868422a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:0d:34:1e:dd:b4:49:46:c9:a1:08:f6:e7:
ec:c6:67:04:26:42:1c:a4:37:56:7f:72:6f:f0:c5:
bb:da:0c:82:c1:96:c4:80:9d:32:fc:df:83:01:8b:
79:b5:3b:b8:bc:d9:93:c2:09:5b:b7:7b:a7:88:fe:
5b:06:05:f8:ea:00:7f:04:44:36:bf:e6:a1:60:f5:
16:1b:6e:85:b8:7a:03:8d:e3:10:d6:3d:e6:92:6b:
d7:36:02:93:1c:47:35:f1:26:3e:92:99:e4:e9:52:
a0:08:26:5d:4c:44:68:30:dd:40:9c:81:88:ff:6f:
16:ad:a6:e4:52:71:8b:ff:a3:69:f2:42:08:c0:8e:
80:a2:93:2f:3b:59:e1:c2:5d:09:ef:ef:1b:de:df:
26:12:00:46:48:ef:58:79:e1:b3:c2:7d:a6:5b:64:
94:74:9d:05:37:7b:88:49:ba:58:ad:10:d9:bc:06:
c5:e0:2f:13:76:25:b4:86:13:0c:98:9b:53:45:63:
b8:97:bf:fc:4a:88:fd:ac:9c:9e:b1:b1:69:5c:a8:
f4:b5:37:21:50:c7:b2:35:05:b4:9c:b9:16:bd:50:
8e:2c:20:32:90:d8:86:9d:63:89:bb:77:52:ac:3c:
e8:9d:23:8c:1e:d3:b5:92:e0:6e:99:f8:72:27:19:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:66:00:D7:22:ED:3B:87:C7:C5:C0:82:69:4E:3B:43:CC:DB:2D:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df420cfe-1caa-3687-a790-0c1dc1e8c148.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:31a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:c4:c8:e0:8a:95:0f:c8:64:93:a7:8e:0c:1a:fc:da:ec:ab:
0b:e4:fa:19:4e:30:54:c2:2b:d3:c3:49:c3:45:bf:1b:85:f3:
5b:4a:0e:f6:f9:e6:d9:d2:ac:b8:c4:27:42:ba:f8:60:66:bb:
46:b0:92:6f:03:6e:5b:05:63:46:c1:9b:23:0b:4e:5b:fd:ce:
72:49:50:96:0c:e1:16:84:9a:e5:bd:a9:2c:fd:ee:ef:4d:90:
f2:98:ca:ec:85:81:e5:d9:c7:84:60:e0:c2:b6:68:39:d8:30:
45:79:72:36:00:8d:dd:6a:48:03:17:55:42:62:3a:21:8e:f2:
ce:f3:b5:bb:54:ef:49:28:d9:78:b2:45:d7:96:fd:ca:a1:2f:
cb:99:14:b7:e4:91:8a:17:ac:f7:f5:af:e3:1d:5c:88:ab:ee:
d0:72:41:72:d7:cc:89:f6:87:99:52:b2:43:10:c9:c8:2f:9f:
44:cb:bb:74:27:32:b9:b4:91:da:88:84:62:bd:91:be:f2:9f:
f1:80:3b:66:a7:44:d4:d4:6e:3d:17:27:da:5d:d3:0d:75:ff:
32:9e:79:1d:a3:78:f1:b0:2e:c8:1a:32:55:ac:87:03:60:9e:
cf:fd:ea:a2:93:20:3f:d1:65:1f:e7:84:5d:41:68:6e:bd:00:
0a:b2:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:24:50 2025 by rpki-client