Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1b0ced6-6c27-37c3-b5b6-d720f9477ebe.roa
File: f1b0ced6-6c27-37c3-b5b6-d720f9477ebe.roa (raw, json)
Hash identifier: 3o0Me0HWzI0mBv9tGn6ERRgnHj1vZsCDoqUqbwSSrdg=
Subject key identifier: A1:90:D8:22:36:6E:90:FC:B3:03:33:75:41:68:8C:40:C6:BF:EC:80
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584605DEA866E175447519899040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1b0ced6-6c27-37c3-b5b6-d720f9477ebe.roa
Signing time: Tue 28 May 2024 13:00:34 +0000
ROA not before: Tue 28 May 2024 13:00:34 +0000
ROA not after: Mon 26 Aug 2024 13:00:34 +0000
asID: 32681
IP address blocks: 2001:470:253::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:05:de:a8:66:e1:75:44:75:19:89:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 28 13:00:34 2024 GMT
Not After : Aug 26 13:00:34 2024 GMT
Subject: CN=3b60b01d-f340-487e-97b2-b7899fcc469e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:c2:1e:27:98:d1:9f:4b:fc:1e:20:8b:15:
35:e8:d2:c2:5c:f9:2f:e1:2a:ba:9d:5d:e9:4a:86:
e5:ac:1b:8f:20:e9:fd:ff:65:13:7c:84:eb:da:df:
0f:a5:4d:11:3d:2f:d1:98:6b:b9:f2:d4:d9:cc:0a:
b8:8a:da:a1:57:c0:f0:d1:dc:a3:eb:de:98:f9:7f:
d7:63:b5:f5:1e:de:4c:14:27:92:8f:9d:f5:f8:f9:
ac:45:99:9c:4f:84:79:b5:35:83:13:22:ae:42:87:
47:d2:d6:ff:a7:e6:15:11:5f:60:96:c8:05:76:f5:
7c:e6:63:30:e6:7e:fd:d5:00:cb:de:22:c7:97:9c:
be:d7:3e:3a:9f:67:a1:eb:31:4e:a8:0e:36:19:14:
82:d2:e1:49:18:78:f5:cc:c9:52:92:50:e1:31:f0:
f3:34:91:be:2d:52:05:e3:33:5e:05:d8:3a:40:8a:
9f:32:c8:86:5d:39:60:ba:9b:1a:40:97:39:01:aa:
2e:24:14:01:5c:ea:a2:e6:4a:5a:96:ce:93:68:41:
cc:bd:af:f1:a1:45:be:43:cb:84:f7:c8:f1:5e:00:
d0:3b:ff:a7:06:f5:ab:cd:71:9c:1a:8d:62:dd:df:
e2:e1:c8:a7:c0:aa:c8:4b:43:83:b5:75:e8:58:27:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:90:D8:22:36:6E:90:FC:B3:03:33:75:41:68:8C:40:C6:BF:EC:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1b0ced6-6c27-37c3-b5b6-d720f9477ebe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:253::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:9a:df:87:5e:82:9a:a3:00:8f:8c:6e:f7:27:a9:3b:13:0c:
7e:52:85:1e:2e:a5:d6:f1:4f:06:d7:11:15:79:08:10:98:9a:
8e:98:cb:a7:46:0f:93:74:68:5b:6e:5e:a9:c4:ef:08:3b:84:
d6:d7:f7:bd:4b:2f:c1:16:94:7f:1b:e5:7b:dc:2d:67:1a:3f:
da:77:ee:54:92:b5:53:0a:4a:ba:fd:1d:2c:14:5b:07:ff:3f:
b4:ea:3c:6f:36:0e:2b:dd:33:53:37:a5:4b:3d:1c:95:03:5e:
91:79:45:c8:66:46:57:72:ae:b9:32:15:ff:d9:b9:c6:f9:fe:
cc:95:f4:d5:e0:41:39:00:cf:72:77:01:f8:e6:91:d2:32:80:
a1:69:a3:b2:d5:f5:b5:2c:45:ee:a2:3d:86:b9:69:89:0e:c4:
ae:d7:4a:13:7d:da:fe:76:66:b4:a5:96:16:b3:ea:fd:8c:50:
97:a0:d5:08:14:ff:e0:55:8b:85:36:ca:94:e1:a1:a6:15:e7:
fa:1e:23:2b:4f:ec:c1:a2:3e:f8:77:3e:a3:37:1f:fc:c6:00:
41:da:0d:0d:83:25:05:f7:f6:e0:cb:12:c8:64:d5:b2:2d:45:
f4:a3:d6:ea:31:0b:5f:8f:db:89:3f:7f:4c:f7:20:8e:92:37:
d2:29:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:30:30 2025 by rpki-client