Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e5d4efba-f6cf-3f8b-bbf5-2dfa0343ab23.roa
File: e5d4efba-f6cf-3f8b-bbf5-2dfa0343ab23.roa (raw, json)
Hash identifier: JbGeYDIZz2UrjlSH0d1+B8n+vofC6o6NPc1eVsi8awg=
Subject key identifier: E6:F4:AE:0B:49:0D:02:82:D3:B2:7B:A6:32:3C:C2:8B:B6:73:B7:97
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847A1B52ACC47DAF3B378633000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e5d4efba-f6cf-3f8b-bbf5-2dfa0343ab23.roa
Signing time: Wed 23 Oct 2024 01:30:07 +0000
ROA not before: Wed 23 Oct 2024 01:30:07 +0000
ROA not after: Tue 21 Jan 2025 02:30:07 +0000
asID: 56554
IP address blocks: 2001:470:398::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a1:b5:2a:cc:47:da:f3:b3:78:63:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 23 01:30:07 2024 GMT
Not After : Jan 21 02:30:07 2025 GMT
Subject: CN=0cd3eecd-948a-4b93-b914-74c8f62584f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:f8:06:6a:2a:8b:68:ff:3a:2f:5b:41:b0:
ca:26:cb:11:65:23:d0:77:1b:41:4a:ba:9a:67:40:
34:fa:f2:3a:eb:d5:ce:d9:b7:3e:20:c3:ac:82:af:
05:96:d0:a1:1a:bd:4b:c3:28:ee:22:b5:40:d7:0f:
ab:0c:d0:04:52:88:94:ad:f6:52:35:d4:1f:bd:3c:
48:94:cf:5b:65:5b:40:88:6b:09:ca:6a:94:85:b7:
70:e3:db:81:40:40:f9:57:27:2c:59:0f:d9:74:10:
3f:10:4f:65:83:e1:ed:22:79:8c:92:ac:6a:54:0c:
ff:1c:fb:b6:44:06:5f:17:8e:7f:78:3a:87:1b:e6:
59:71:37:0e:e7:17:32:49:b4:d4:6e:4e:e3:22:b4:
8c:93:15:5a:21:84:97:33:0d:87:cb:c9:66:f5:4b:
66:b7:42:ca:06:fc:6e:3a:95:31:57:3a:56:cb:2e:
8d:27:d5:3f:1b:77:f8:6a:44:9d:14:83:59:76:e4:
b1:52:18:08:7a:85:fe:09:6a:c9:10:32:2b:3b:7f:
b4:47:59:72:ab:08:49:d6:5b:37:dd:d7:a2:85:35:
3a:28:fa:c7:a8:aa:4b:8c:ea:f0:5c:09:98:af:83:
67:ed:c1:95:0b:3a:74:c2:8f:73:ba:91:e5:9f:d5:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F4:AE:0B:49:0D:02:82:D3:B2:7B:A6:32:3C:C2:8B:B6:73:B7:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e5d4efba-f6cf-3f8b-bbf5-2dfa0343ab23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:398::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:49:41:47:ff:93:a7:02:4b:99:24:eb:54:d7:b8:e7:52:17:
ed:e4:bc:36:99:ab:c2:8c:32:aa:4c:a1:c1:db:73:7c:36:df:
74:33:c8:ac:d6:6f:48:56:45:a5:d1:e6:fb:80:60:19:ef:e2:
2c:5e:12:ad:cc:d8:f1:1d:c5:9d:87:6b:70:d1:77:f3:42:f5:
56:3e:f7:44:20:8a:71:94:ab:be:63:a3:8b:6a:ce:42:00:52:
c4:8a:99:3f:a4:6e:a6:13:21:04:c8:26:dc:08:41:93:47:88:
b8:b0:fd:79:82:bc:b9:78:4a:6b:f4:cb:b3:b1:60:7a:de:f6:
41:06:30:0b:3b:08:09:0a:41:d8:c6:fa:a8:7c:53:af:3e:77:
02:39:b5:0f:7c:9a:40:bf:ff:56:68:48:9c:f9:5f:02:74:1a:
2b:e6:74:fe:ce:f1:41:6e:3f:a1:e7:6f:b0:4a:75:47:0a:95:
36:d1:32:fd:57:33:5e:48:b4:9d:6d:3a:9d:cd:53:61:d7:e7:
e7:a0:66:78:11:b3:eb:8a:dc:3e:4d:cc:ac:f3:ad:92:02:58:
36:36:32:49:f8:61:89:75:2c:61:6c:a1:04:44:f7:a3:04:52:
62:29:e6:5d:f9:f3:25:34:f4:ac:41:74:fc:77:1d:25:9a:c7:
77:8e:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:58:56 2025 by rpki-client