Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f08bef25-d047-3445-b2f5-beb298a16c6a.roa
File: f08bef25-d047-3445-b2f5-beb298a16c6a.roa (raw, json)
Hash identifier: 01paiyldkxw2SQQixvMWifOxm25ILR25iwBHIgEchpA=
Subject key identifier: EC:14:A4:8B:07:C2:04:4E:21:AC:7F:68:6D:23:3B:4C:41:CD:89:D3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847055EDF5591E228B823407C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f08bef25-d047-3445-b2f5-beb298a16c6a.roa
Signing time: Wed 28 Aug 2024 01:30:09 +0000
ROA not before: Wed 28 Aug 2024 01:30:09 +0000
ROA not after: Tue 26 Nov 2024 02:30:09 +0000
asID: 52896
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:05:5e:df:55:91:e2:28:b8:23:40:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 28 01:30:09 2024 GMT
Not After : Nov 26 02:30:09 2024 GMT
Subject: CN=937ebbfd-f516-4f5d-beb6-bfe8fcce0c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:3e:54:ba:c8:cc:08:4e:8e:d3:43:10:94:
bf:dd:d9:4f:67:9a:69:58:ee:56:fd:76:4e:29:4c:
8f:c7:e0:1f:58:13:36:0e:7a:49:96:34:c5:23:6b:
28:10:6c:78:9e:6b:09:6c:a7:a3:4b:b6:2b:07:2e:
68:de:2c:81:62:a7:c9:fa:7a:db:72:21:65:62:d5:
bf:7f:03:2a:82:a3:c5:e8:c2:dc:f7:e8:5b:dc:28:
dd:2d:72:4b:3e:84:ef:87:10:c3:fc:d6:a2:c1:e3:
00:25:a2:28:00:49:d6:c2:3a:98:d9:a2:52:81:4d:
54:f5:25:1e:eb:91:66:28:6e:1f:12:95:90:3d:9a:
2f:70:99:4d:e2:ec:6c:3b:d4:f9:70:44:e9:14:bf:
b4:9e:32:49:7e:ea:d6:8b:a9:b2:06:88:47:34:6b:
4f:e5:55:d0:ef:37:88:43:78:8c:9a:9a:58:da:ed:
89:e2:7a:be:77:6f:bd:76:bf:a8:ff:e8:86:84:77:
9a:b0:de:49:a3:53:a3:ce:15:16:4a:8c:f7:36:02:
56:41:c5:d2:98:72:11:4b:2d:5a:1b:ac:92:21:99:
90:bc:d4:b1:f0:25:d7:de:80:ce:d4:65:af:3b:d5:
8b:03:ed:5c:6b:5a:10:12:04:b5:6c:13:26:cf:91:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:14:A4:8B:07:C2:04:4E:21:AC:7F:68:6D:23:3B:4C:41:CD:89:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f08bef25-d047-3445-b2f5-beb298a16c6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:94:d2:43:e5:ce:b4:ce:97:d3:01:cd:b7:03:99:aa:61:7b:
c9:92:55:27:58:7e:08:de:f8:4f:92:ae:e5:a3:6b:26:0d:9e:
fd:1f:db:3a:3f:fa:d0:27:37:f7:e4:eb:56:59:27:0a:b8:e3:
42:4d:29:a4:df:23:d2:ba:a6:8a:f2:d2:77:23:82:c4:26:fd:
96:85:cb:2d:58:43:09:5d:18:dd:92:25:b3:69:65:59:a1:36:
c3:6c:d2:88:02:72:8f:4e:10:78:f7:0c:8d:29:d1:da:93:08:
b5:b5:54:fc:a3:22:38:41:92:69:ce:06:63:19:6c:ff:97:ac:
5f:79:ac:78:ed:31:16:cf:26:2d:8d:67:24:94:ed:69:06:c6:
84:b4:3c:d6:ce:8e:d2:a3:37:c1:de:f5:da:77:e0:99:5c:72:
e5:60:0d:96:26:cd:b7:cf:c5:7f:59:6a:f2:18:3c:f8:67:85:
af:e7:86:97:ab:5c:d2:cc:22:12:f9:33:55:6e:34:f0:fb:67:
6c:49:50:52:0d:ea:84:d7:ed:98:3b:39:41:c3:c5:e9:ea:d9:
a0:f5:d3:6a:44:aa:66:71:1b:79:2f:2b:5c:87:6a:f5:ff:8b:
fa:30:bd:05:a0:14:08:6d:0e:55:2e:6e:7a:7d:e2:9b:db:e8:
a2:5b:48:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:35:43 2025 by rpki-client