Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f139ff65-4a51-3fe5-8e93-a9a2bd8429f2.roa
File: f139ff65-4a51-3fe5-8e93-a9a2bd8429f2.roa (raw, json)
Hash identifier: MM2TTZyh3JyLiy3fMLuLFIB+XLT0vNetpbcAGKv/LIM=
Subject key identifier: CA:69:C3:AF:70:F1:1C:98:D7:EC:2B:E2:F8:36:AF:14:B1:60:36:15
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847C61DDB78E80EFBA9ADD51BA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f139ff65-4a51-3fe5-8e93-a9a2bd8429f2.roa
Signing time: Tue 05 Nov 2024 02:30:10 +0000
ROA not before: Tue 05 Nov 2024 02:30:10 +0000
ROA not after: Mon 03 Feb 2025 02:30:10 +0000
asID: 38987
IP address blocks: 2001:470:31a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c6:1d:db:78:e8:0e:fb:a9:ad:d5:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 5 02:30:10 2024 GMT
Not After : Feb 3 02:30:10 2025 GMT
Subject: CN=d90a313c-4bcd-4794-9da1-ae863f0b0cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:74:50:ef:d1:f7:d4:69:99:7a:e4:f4:63:
16:54:10:a1:28:7a:5d:81:49:99:35:16:fc:cd:d4:
d0:0c:f2:0f:db:03:50:11:7d:f5:eb:91:ed:2f:40:
cc:79:86:16:30:06:f0:2f:94:8e:43:a6:24:cc:fe:
da:57:98:d1:99:7c:b0:bf:a1:ca:96:32:10:82:cd:
4d:c5:e7:08:ef:80:50:8a:1d:c7:cb:4e:7c:e4:e7:
91:6d:6c:39:af:ba:f6:54:23:53:32:51:4a:d1:cd:
81:f1:3a:10:d1:2a:36:21:aa:ba:e6:cd:8f:82:7c:
36:eb:bf:db:78:c7:f5:3e:32:97:72:6c:15:76:80:
22:da:19:74:91:7c:fe:96:b2:80:e2:6d:ed:ae:bf:
7e:17:db:2b:81:ab:f5:6e:0f:6b:98:2b:97:45:2a:
b9:17:b4:dd:d1:d5:22:8e:8e:ed:dc:28:30:b8:ad:
d8:30:c2:ab:fb:9a:2d:36:ef:88:1f:c8:e1:85:c5:
4e:39:67:27:f6:6c:8d:a8:35:37:8f:10:f2:e0:3a:
de:6b:a2:98:ac:d6:4b:54:0a:d7:2b:6f:65:ec:9c:
fe:a8:26:1b:f3:59:4e:39:ef:87:ef:de:24:62:35:
cd:20:14:0e:f7:d5:f4:59:a7:b5:6f:22:aa:37:f6:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:69:C3:AF:70:F1:1C:98:D7:EC:2B:E2:F8:36:AF:14:B1:60:36:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f139ff65-4a51-3fe5-8e93-a9a2bd8429f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:31a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:f0:44:76:44:75:35:5f:f7:8b:41:5b:ab:1d:31:4e:57:96:
96:ac:3e:08:10:4e:6e:83:94:b1:96:0c:f2:e1:6f:7d:3a:58:
8d:26:6c:7a:e9:fc:0d:2b:90:4c:d7:e3:66:6d:53:82:f3:c2:
55:97:08:d8:cb:0e:24:d7:8e:ec:be:90:32:ce:c7:66:f4:da:
d6:46:df:1e:ec:37:d4:45:db:b0:7d:c0:76:66:c1:e6:3b:09:
31:91:81:78:b0:49:29:06:02:fe:28:70:fe:0d:8c:7d:c1:07:
3d:e0:ff:a5:62:95:c5:37:70:65:dc:19:bf:fb:a6:a2:0e:bc:
78:f6:31:63:cb:ef:7f:56:55:2e:d0:8a:ce:d5:9b:c4:c5:ca:
21:20:d7:36:60:dc:89:87:7e:24:5d:b4:82:ee:d0:07:e8:62:
29:f5:33:4b:6f:50:8b:cc:e2:af:e9:50:9e:a5:3c:4d:0e:12:
9a:e8:ef:87:ac:39:44:e5:82:32:52:f8:cc:e7:b0:f4:2a:e8:
ee:db:30:2d:76:69:5e:ae:3e:46:a9:bb:aa:06:98:da:35:a2:
4a:24:dc:ad:3f:eb:12:2c:cf:1d:85:dc:c1:ce:c5:3d:44:45:
2c:03:8c:91:97:af:e7:12:ba:ec:53:ef:d8:13:66:9f:29:96:
ad:36:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:30:32 2025 by rpki-client