Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f093272d-f1c8-38e6-a5b1-433feac31ebb.roa
File: f093272d-f1c8-38e6-a5b1-433feac31ebb.roa (raw, json)
Hash identifier: yI6i/Pl/RTo/5/BBTvTzx0bbLSmkrb8NxVku7ZdmTSw=
Subject key identifier: 90:F3:58:92:E2:54:F8:26:CC:B0:0E:DB:D0:DF:C3:C3:06:F1:61:BB
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858463AE9A4CD9B8CCBCAF4E45D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f093272d-f1c8-38e6-a5b1-433feac31ebb.roa
Signing time: Sun 16 Jun 2024 13:00:33 +0000
ROA not before: Sun 16 Jun 2024 13:00:33 +0000
ROA not after: Sat 14 Sep 2024 13:00:33 +0000
asID: 22709
IP address blocks: 2001:470:98::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:3a:e9:a4:cd:9b:8c:cb:ca:f4:e4:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 16 13:00:33 2024 GMT
Not After : Sep 14 13:00:33 2024 GMT
Subject: CN=dfff8bee-1a39-42fa-bb62-ff784f5590c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:89:cd:71:a5:17:20:30:43:4f:32:f7:43:57:
ad:41:19:1f:fb:e8:9a:c5:40:13:3c:82:d0:0f:27:
6f:a1:70:53:bc:c8:18:86:a8:30:3d:f3:bd:16:cd:
f1:e1:70:08:01:6b:59:4e:45:7d:37:bd:a1:c0:af:
a3:3b:a9:a5:8e:37:9c:2d:ff:16:83:44:c8:46:9f:
ca:a9:78:f1:b2:5e:fc:de:47:6f:cd:de:08:9d:79:
4d:f9:2e:db:ab:a3:02:14:a7:d3:3a:97:de:6f:1c:
fc:b5:83:24:ba:ea:fe:55:0f:80:de:e4:8a:8c:eb:
92:53:de:7a:b8:c7:78:2a:1c:b1:e4:cf:2b:b0:a7:
62:72:7f:cc:85:67:8f:e1:bd:4d:d7:a4:3f:cf:5e:
ae:51:08:6e:d0:e5:1b:d7:42:a3:49:84:06:06:73:
9e:15:00:71:9d:cd:cc:e6:24:89:58:2d:b1:ca:fb:
03:06:13:c2:5f:bf:43:14:43:70:32:24:6d:32:f6:
a0:e7:ce:d7:2b:61:0e:74:77:3c:8b:81:39:d3:71:
55:1e:1a:ff:38:bb:c9:d4:6b:62:bf:f8:3e:72:52:
50:f8:43:29:15:63:45:e8:a6:59:8a:b1:8d:6c:e9:
d5:ce:7f:a6:62:d0:54:ec:b4:23:6d:52:7b:58:f0:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F3:58:92:E2:54:F8:26:CC:B0:0E:DB:D0:DF:C3:C3:06:F1:61:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f093272d-f1c8-38e6-a5b1-433feac31ebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:98::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:48:c1:4d:ee:c5:8e:e6:5e:94:e3:3b:5e:5c:56:38:f2:84:
06:f5:b7:ee:8a:f5:4d:26:9b:35:ba:37:fd:d0:ea:1c:82:6f:
26:be:07:b6:c2:da:29:f7:c0:04:16:55:47:71:13:f2:14:14:
cc:f3:4b:4c:1d:d1:38:27:11:b4:98:5e:d8:45:a7:41:f3:b4:
a2:00:12:c0:57:31:7f:5a:a9:eb:71:6a:7e:df:91:de:20:b6:
cd:ec:a7:4a:25:d0:1c:7e:fd:50:f5:9d:80:7b:b4:a3:9f:b4:
e4:f9:69:0a:d4:7e:44:de:60:07:fc:a2:5a:e3:65:e7:f6:fc:
75:32:9c:b0:1c:4a:50:b3:d2:01:b3:0e:64:38:91:01:0a:ce:
82:75:93:ff:6d:b4:a8:52:81:19:05:f1:eb:9b:e2:82:a8:31:
10:38:d8:7b:f6:49:b0:3c:f9:a7:2e:30:a0:33:40:02:ae:3a:
3b:1f:11:10:de:fc:b9:76:c6:13:15:19:2e:0d:88:32:ab:33:
df:f7:1a:7e:13:24:da:d0:85:c1:68:aa:ca:47:1c:f4:12:99:
27:c1:8b:b8:96:91:c9:10:72:45:eb:9f:e9:c4:49:6e:f6:f7:
b4:d4:93:d6:66:b0:d6:59:02:1e:4e:70:1d:83:72:fc:bc:e5:
5f:be:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:50:03 2025 by rpki-client