Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ea3e4e8c-edbe-301a-a17b-a0b5af227bd2.roa
File: ea3e4e8c-edbe-301a-a17b-a0b5af227bd2.roa (raw, json)
Hash identifier: EAARiMHxmNxBwQvrhYIJWD/tFCZSGZVKi5mizVo5Bw4=
Subject key identifier: 28:50:67:52:56:06:30:5E:FA:14:FC:88:46:94:4E:29:78:88:59:8C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846313345C96A55F2E466E98D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ea3e4e8c-edbe-301a-a17b-a0b5af227bd2.roa
Signing time: Thu 13 Jun 2024 01:30:56 +0000
ROA not before: Thu 13 Jun 2024 01:30:56 +0000
ROA not after: Wed 11 Sep 2024 01:30:56 +0000
asID: 54725
IP address blocks: 2001:470:313::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:31:33:45:c9:6a:55:f2:e4:66:e9:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 13 01:30:56 2024 GMT
Not After : Sep 11 01:30:56 2024 GMT
Subject: CN=0f3e651b-3e21-433b-be80-d497503fce0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:f3:f3:44:84:9e:fd:f9:9a:c7:da:c0:ec:
d6:b1:a1:4d:e5:b6:01:59:37:e3:b8:e1:ce:2e:f3:
b3:30:40:d0:95:c3:04:06:15:e7:20:c5:46:34:63:
ec:61:bb:d1:16:43:3d:1f:34:34:ab:5a:66:27:78:
cf:0d:18:f3:f3:69:ca:40:70:41:23:73:17:d5:ff:
f9:d5:ab:e0:ed:2e:14:38:2a:3f:da:82:33:76:3d:
07:5c:5d:5d:b2:93:48:62:b5:a6:25:e4:ed:fd:1d:
dc:d9:f0:04:6e:30:38:4f:80:9f:70:62:2c:70:3c:
d7:5b:52:f8:43:ac:09:68:2c:d0:2c:1e:8d:5e:1c:
fc:85:a1:b2:3b:d4:07:34:3d:34:02:db:aa:42:97:
41:7c:f6:83:37:3f:74:a4:8e:2f:4d:a3:b9:87:9d:
6d:22:88:06:d7:b4:45:f1:dc:f1:34:19:ac:43:7e:
a6:5a:2d:ff:47:76:73:b0:dd:5a:42:29:08:fc:35:
f4:1f:35:18:0f:f3:41:a2:ce:59:ba:ef:f5:68:9e:
b0:6e:0e:b3:58:0f:58:e3:91:cd:79:5a:0e:84:81:
e2:c2:14:a6:28:b4:35:a1:96:f4:8a:6c:40:c1:4c:
bd:22:1c:f0:27:12:3f:d1:fc:f9:c1:ca:ef:dc:26:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:50:67:52:56:06:30:5E:FA:14:FC:88:46:94:4E:29:78:88:59:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ea3e4e8c-edbe-301a-a17b-a0b5af227bd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:313::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:d3:0e:66:49:17:f7:4d:92:58:8c:a6:4f:23:40:ce:73:b2:
53:41:82:46:9f:37:a4:54:e1:12:9d:65:2a:73:59:53:a6:e4:
5c:e8:36:5e:24:48:e3:0d:b2:b9:62:b8:cd:1c:28:b2:3e:b1:
98:bc:6a:75:60:f3:d9:54:61:32:7d:6e:4b:fb:83:27:59:90:
45:f0:0e:cb:a3:05:14:a0:45:69:47:51:77:ff:8c:f5:99:75:
72:2b:81:91:cb:cb:f7:ef:6c:61:00:b7:20:00:74:c6:e2:4f:
30:56:b3:bd:53:e4:2d:22:c8:ba:a4:a7:21:99:f3:5a:6d:59:
98:da:f3:27:ac:28:a8:c5:3f:35:5b:27:8b:2d:ed:d4:13:54:
95:16:e1:af:f5:0a:4d:d6:b8:c3:06:1f:ed:8e:29:3e:e5:ee:
e3:a2:3a:da:91:af:dd:e4:77:fe:40:e2:3e:f1:5d:0d:e9:9c:
7f:6b:c6:79:da:15:6f:3b:d8:16:94:be:4c:f9:4f:fc:31:db:
94:2c:3f:6e:d1:ea:5d:01:ca:bc:f6:17:cf:e1:3f:ef:e7:8e:
7d:18:8f:48:f4:1e:42:0f:74:3f:41:df:f4:a8:25:82:3d:4d:
74:91:a6:1e:eb:00:e5:4b:fc:ce:b5:6c:a6:41:96:76:ce:4f:
05:63:2d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:26:10 2025 by rpki-client