Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ea148fbf-ed92-3022-b7a0-f840957384d2.roa
File: ea148fbf-ed92-3022-b7a0-f840957384d2.roa (raw, json)
Hash identifier: 9C5lpexkGYmaQR8A9/QyeW/d7OqD01+B97AXLqhXDVY=
Subject key identifier: 8D:42:1B:A1:C3:1A:6B:41:CE:98:37:99:74:3D:F7:18:5B:A1:1F:D0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858476F74DE5C3A70EA2D45DC5B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ea148fbf-ed92-3022-b7a0-f840957384d2.roa
Signing time: Sat 05 Oct 2024 01:30:09 +0000
ROA not before: Sat 05 Oct 2024 01:30:09 +0000
ROA not after: Fri 03 Jan 2025 02:30:09 +0000
asID: 48347
IP address blocks: 2001:470:3a1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6f:74:de:5c:3a:70:ea:2d:45:dc:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 5 01:30:09 2024 GMT
Not After : Jan 3 02:30:09 2025 GMT
Subject: CN=159c46a3-c071-4cee-a912-7a7c90e05b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4c:c3:e6:d2:4f:4e:71:17:15:f3:17:6f:ab:
64:dd:b5:9d:97:1f:cf:14:f6:77:ff:4d:86:48:38:
e9:d7:fe:d9:4f:ab:82:6b:f3:99:89:52:a0:3b:bf:
1a:7a:86:f6:20:e3:72:49:42:fc:b8:a9:25:d4:f0:
2b:95:c2:0f:a1:78:0c:c2:b3:b4:ad:c9:1d:a6:6b:
e7:ab:9a:aa:c6:3c:82:5d:da:79:d4:c2:84:0b:ed:
ec:6a:a0:95:5a:f6:a9:5e:a1:4d:f1:32:47:a5:cd:
e2:8c:a5:51:64:26:82:6a:7b:bb:18:95:7d:83:bf:
bb:fb:3d:5e:5e:62:4d:5f:29:0d:77:3b:89:a1:50:
b6:c7:c0:5a:ab:cb:f3:d6:61:ca:b6:b4:dd:ea:71:
4a:dc:cd:fd:da:1b:f0:26:41:cb:d2:9b:04:cb:e1:
92:e5:8d:7e:b8:09:ab:4e:2a:66:62:5e:17:22:da:
f5:8e:64:d8:73:4f:20:62:f4:8e:af:e0:28:56:7e:
73:4a:0e:b5:60:d8:8d:f6:f3:e7:47:83:c2:c8:29:
fb:bf:f4:9c:3a:2b:cf:81:87:25:ad:7e:27:f5:bc:
0d:72:71:17:91:ae:d6:28:e1:05:71:d3:44:d5:71:
72:66:19:d1:cc:e7:46:66:12:6a:a8:57:f3:79:f8:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:42:1B:A1:C3:1A:6B:41:CE:98:37:99:74:3D:F7:18:5B:A1:1F:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ea148fbf-ed92-3022-b7a0-f840957384d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:55:d9:aa:62:7c:b1:33:9a:79:4b:5c:a4:c6:08:1e:9f:49:
cc:bb:3f:24:b2:fe:25:92:a4:64:a0:c6:f0:0a:c5:58:97:02:
a2:c8:b0:08:97:41:3a:6e:43:19:32:51:21:8f:0d:29:a2:13:
ed:57:97:9b:87:0a:46:30:99:24:ca:e0:88:3c:ac:d9:6b:a1:
87:11:7c:a5:67:22:00:21:84:db:53:1b:0f:b9:6e:08:12:04:
fa:a3:45:a7:34:5a:2b:b8:f2:61:ed:d9:a0:01:cc:65:3d:33:
9f:94:80:1f:08:17:8e:9e:cf:9d:6b:be:7f:87:d7:22:15:73:
b7:df:01:9a:66:1f:35:74:cd:01:80:58:00:c6:a9:e6:78:93:
97:e1:7b:e1:9a:c6:25:58:90:01:78:d8:ca:7d:c4:3e:e2:73:
ea:7f:53:9c:12:3d:c4:9a:b2:fa:de:30:c7:bd:37:b7:1d:f3:
81:0f:81:f1:43:f9:2b:a2:4f:ad:5d:4f:dc:45:43:f0:f1:bf:
2c:8f:68:ce:71:69:1e:bc:6a:b3:14:7d:24:8c:bd:ff:32:5f:
93:6a:db:4a:33:ea:3d:11:74:b5:55:74:52:e3:e2:d3:83:c4:
9c:7d:af:45:e7:73:b8:8d:26:1b:09:10:4c:e7:59:4b:81:c4:
bb:db:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:40:11 2025 by rpki-client