Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e11d2e1b-7420-34e9-9f9e-ad7be32471ad.roa
File: e11d2e1b-7420-34e9-9f9e-ad7be32471ad.roa (raw, json)
Hash identifier: D+OtX9SSknu0lbI9mjlNEmxuiFmap/RmXtGd5HPc+oA=
Subject key identifier: C7:95:7B:1C:C2:5A:E4:1B:4F:1B:4A:46:86:9A:F7:E5:07:25:34:AA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858475BEA18DC9D00DD24EEDC9100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e11d2e1b-7420-34e9-9f9e-ad7be32471ad.roa
Signing time: Sat 28 Sep 2024 01:30:11 +0000
ROA not before: Sat 28 Sep 2024 01:30:11 +0000
ROA not after: Fri 27 Dec 2024 02:30:11 +0000
asID: 267522
IP address blocks: 2001:470:398::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:5b:ea:18:dc:9d:00:dd:24:ee:dc:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 28 01:30:11 2024 GMT
Not After : Dec 27 02:30:11 2024 GMT
Subject: CN=3ac43774-205a-4135-967e-05fe0ef0e02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:eb:f0:0f:67:ea:4a:12:16:c1:36:11:90:9b:
15:4b:0f:b7:f0:50:ed:2a:32:06:0d:b1:08:c3:3f:
34:0f:ce:47:7e:81:42:ac:74:8f:b6:5e:fb:96:e6:
8b:0f:fe:8b:cf:63:82:f9:cf:1f:89:d0:d5:95:d7:
6b:a8:d8:65:5a:8e:f6:a1:e6:1e:e5:cd:22:8f:23:
84:d9:d1:21:bc:73:fa:5e:36:54:da:b2:21:af:58:
da:38:a0:63:9f:a8:90:d1:6c:46:f9:70:38:e7:26:
66:47:3a:28:20:25:b8:c3:af:46:10:71:8a:f6:bd:
cb:54:ec:33:06:89:3d:83:ca:8b:14:c3:ce:62:22:
1b:c8:4d:87:e9:b3:4c:82:46:dc:f4:d9:b4:0c:00:
77:a5:de:ad:8e:f9:f2:81:d2:f5:0a:c5:f4:fd:75:
c9:a6:75:47:9f:24:3e:04:c9:b5:2b:0d:79:d5:08:
0f:ee:30:09:84:d8:35:00:3a:0c:6f:32:be:87:73:
af:4e:77:4b:a2:82:ef:31:03:11:62:9a:ae:80:f0:
a9:07:37:74:61:d0:f6:17:68:18:38:75:ae:17:42:
36:d4:b1:d3:ed:64:e1:db:68:ba:36:29:f7:82:23:
4b:f9:55:30:2d:46:46:23:ff:24:c6:e3:76:24:1a:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:95:7B:1C:C2:5A:E4:1B:4F:1B:4A:46:86:9A:F7:E5:07:25:34:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e11d2e1b-7420-34e9-9f9e-ad7be32471ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:398::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:d1:ac:7c:ff:82:9c:ff:78:76:42:ac:24:e0:30:38:dd:cb:
1f:8b:fe:52:63:b0:da:e5:9c:69:60:36:d0:f6:0a:e4:a0:f1:
c9:3e:3e:a9:1a:28:a6:d2:8b:a0:2b:ab:4e:b4:8e:23:69:9c:
93:d7:b6:5e:4c:7e:b4:5f:04:f6:3f:8c:22:7f:f5:dd:cd:ed:
04:68:f2:6d:30:d0:7d:fa:07:9f:65:ac:19:69:b9:fd:3b:27:
37:90:89:59:b2:32:b7:ef:93:76:9a:b0:bd:39:9d:ae:42:3a:
4d:54:60:5f:10:d0:38:c6:bf:ab:d8:28:71:d1:f2:7f:1a:cf:
5c:5d:48:f0:ba:0a:2c:c6:08:8f:02:9f:46:84:1e:99:b0:51:
bd:dc:51:45:6c:b8:ed:44:eb:69:66:99:43:e8:d0:18:5f:b3:
20:48:09:e1:81:62:96:29:90:cd:f9:5e:63:5d:f3:fb:52:62:
bb:45:e5:d8:ca:a0:c9:d6:0a:83:5f:79:53:f2:06:d3:55:10:
cc:d3:d8:10:d3:1a:02:3f:58:9f:88:5b:d9:f6:d8:08:86:e5:
97:67:25:4b:8a:19:c3:13:c3:63:59:0a:94:5a:f0:1f:59:27:
06:c5:74:49:fa:69:98:27:82:f1:69:95:74:8b:35:de:62:25:
fb:f6:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:33:00 2025 by rpki-client