Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3bebe20-5ee8-36e0-9b68-bcef8f414312.roa
File: e3bebe20-5ee8-36e0-9b68-bcef8f414312.roa (raw, json)
Hash identifier: esi4UawaNB2v1vWyfnyEdjWctoQ+xStwjP3+BbJi3II=
Subject key identifier: 31:9C:B3:C0:40:10:A9:2B:D4:45:62:A1:5F:E4:1B:5B:2F:2D:14:2D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A773632011E5AA58538B200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3bebe20-5ee8-36e0-9b68-bcef8f414312.roa
Signing time: Thu 27 Jun 2024 20:15:58 +0000
ROA not before: Thu 27 Jun 2024 20:15:58 +0000
ROA not after: Wed 25 Sep 2024 20:15:58 +0000
asID: 983
IP address blocks: 2001:470:305::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:36:32:01:1e:5a:a5:85:38:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:15:58 2024 GMT
Not After : Sep 25 20:15:58 2024 GMT
Subject: CN=0575e3ff-5239-4339-800f-7563487b837a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:42:db:64:01:2e:f8:92:a6:d4:c8:da:85:b1:
bf:53:bb:8e:e3:14:e7:eb:1e:ae:18:32:7d:12:c3:
2e:aa:5c:e0:6e:ef:25:0a:dc:f8:60:27:5b:3e:1a:
40:61:43:fd:14:08:30:3a:a7:6d:0f:e9:25:df:ea:
d8:3d:5a:6d:31:4e:8c:41:67:a0:a8:af:30:89:70:
32:3b:7f:ea:64:93:ab:e5:b5:cf:c2:79:bc:8b:b4:
d4:73:79:65:68:99:39:b2:77:34:42:39:e8:67:72:
55:6c:08:93:9a:c8:f6:a2:61:cc:e8:32:c3:2f:66:
f5:a3:e5:de:3b:cb:ea:b6:b0:7f:68:2d:0a:4e:b8:
02:a4:ed:71:0d:1d:20:e8:87:9f:fd:ba:c7:05:64:
d4:9a:ee:bd:e9:d7:83:1e:5d:48:7d:d9:b5:fe:b5:
d6:6d:e8:36:7b:36:2e:8c:3c:53:a3:a0:f5:ad:ea:
62:ae:92:cc:00:8e:be:eb:6a:e3:be:14:d3:92:71:
6c:87:14:e8:12:5d:fc:a3:de:e9:c4:61:84:16:3c:
46:b1:63:84:db:9e:41:f0:92:5e:45:49:3f:23:a5:
fa:a5:22:97:19:77:34:c4:c5:85:6a:fe:7a:06:30:
05:70:38:5d:82:e9:09:49:78:e8:5f:9a:8d:b5:52:
bc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9C:B3:C0:40:10:A9:2B:D4:45:62:A1:5F:E4:1B:5B:2F:2D:14:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3bebe20-5ee8-36e0-9b68-bcef8f414312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:305::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:5f:e3:37:eb:a1:d6:3f:05:13:4a:83:e2:8d:1d:45:f2:03:
7e:f8:8e:20:f7:6b:07:8d:85:2a:8b:1e:b1:f9:20:3e:e0:2c:
27:53:82:3f:38:85:4d:47:e2:11:8e:63:6d:74:e6:c7:66:47:
27:b0:92:10:77:de:39:df:38:08:bc:ee:1c:8c:7f:36:fa:4f:
c1:8b:f0:0c:9f:7f:bb:d0:6e:9c:52:55:37:e8:54:c0:86:e4:
76:cd:ae:45:89:30:28:5c:ac:cf:3f:4b:54:35:c4:1e:b1:e7:
39:f5:92:61:29:af:ad:b0:40:6b:53:c7:d1:06:ee:65:8e:8a:
f9:4b:16:8b:59:94:2f:b5:d3:76:b0:c7:ff:ac:21:e0:ff:61:
da:a3:9c:3b:2c:88:bc:66:2c:c4:2f:ad:71:c0:6c:3b:4a:53:
a1:81:91:78:08:a6:0b:a1:0e:c9:75:fd:5a:b2:06:a5:48:92:
cd:46:40:3a:3f:28:17:ce:18:84:27:f7:f8:48:2c:f9:e5:d4:
5d:50:90:35:c7:66:89:af:56:cf:a1:2f:6c:ca:86:20:45:02:
63:06:bc:eb:e7:ec:20:68:cd:21:ed:16:84:6e:ce:e9:46:ba:
ef:6e:6d:03:6a:dd:16:15:87:d6:2b:e8:1f:55:da:ec:ed:3a:
9d:3d:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:34:19 2025 by rpki-client