Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f60d06f3-edb9-3245-9edd-6cce6b66b2f0.roa
File: f60d06f3-edb9-3245-9edd-6cce6b66b2f0.roa (raw, json)
Hash identifier: dX3+cFO8n1CB9bxUmdz/Xd9UgaH7rrYKDoA5lCliUqY=
Subject key identifier: 25:2D:5C:14:3F:58:58:A9:02:C4:45:C3:5B:3D:3A:53:9D:54:B8:01
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858462E597FB5EF0F63E92A4237E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f60d06f3-edb9-3245-9edd-6cce6b66b2f0.roa
Signing time: Wed 12 Jun 2024 01:00:25 +0000
ROA not before: Wed 12 Jun 2024 01:00:25 +0000
ROA not after: Tue 10 Sep 2024 01:00:25 +0000
asID: 14978
IP address blocks: 2001:470:db::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2e:59:7f:b5:ef:0f:63:e9:2a:42:37:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 12 01:00:25 2024 GMT
Not After : Sep 10 01:00:25 2024 GMT
Subject: CN=00176c21-72c8-4dd1-b1ec-c39455d548c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a9:05:3f:43:b3:7e:1b:b1:c0:ff:f4:5b:de:
f4:7c:08:7a:ed:5d:74:df:c7:4f:25:23:87:0d:94:
9c:88:57:d7:24:21:1e:bb:aa:d1:a1:a9:1b:11:a1:
db:20:61:9d:2c:c6:5d:e5:1c:e0:d1:51:c3:c6:ba:
ee:63:a9:e4:6f:98:65:fb:31:a9:de:20:df:1d:9a:
a8:af:76:01:57:50:b3:e9:50:7d:b8:fe:69:de:1a:
a7:f5:61:13:28:38:04:23:2a:bb:9e:94:b7:12:e2:
92:f7:3a:3e:ea:58:ef:38:20:b1:98:04:67:09:cc:
ba:9e:92:64:86:2d:d9:bc:eb:6e:94:87:b3:35:36:
02:7f:b9:de:22:85:75:e5:e5:e7:d4:62:12:38:0c:
8c:9f:6f:df:41:64:97:6a:6c:3a:5b:09:96:d5:9e:
46:86:19:db:41:cc:3e:4a:6f:06:ca:65:fe:dc:1a:
21:35:92:cd:85:6f:21:ed:fc:6e:33:6e:f8:61:1e:
5c:e1:91:86:a0:c9:e3:06:8f:1e:d5:4d:6c:e4:20:
54:86:70:8a:f3:5c:72:e3:a3:78:45:ce:7a:49:d0:
ff:c7:24:d2:bd:0d:77:6d:22:07:5d:45:55:12:e3:
08:55:b0:05:c3:31:ff:43:51:e9:1e:b4:63:61:cb:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:5C:14:3F:58:58:A9:02:C4:45:C3:5B:3D:3A:53:9D:54:B8:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f60d06f3-edb9-3245-9edd-6cce6b66b2f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:db::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:ce:16:d3:f9:6f:c9:f6:37:cb:46:38:de:66:73:b6:16:3e:
b4:d0:fe:ec:76:75:14:08:b2:07:76:a4:23:6e:c8:2c:1f:82:
15:01:5c:61:9b:47:a5:8d:42:66:6b:38:f2:34:d9:40:2f:51:
4e:aa:d3:06:c2:f0:ab:3b:ae:df:e3:8b:e5:c0:e1:12:16:c7:
94:10:55:30:27:6d:08:06:25:85:4d:f3:17:35:33:10:31:a9:
e9:81:9f:94:70:ac:33:9f:1d:9a:fe:71:ab:f5:97:8c:24:ba:
23:7f:1e:d6:c2:e4:0c:9a:71:4e:2c:88:83:d7:39:d1:ad:44:
b1:e4:bc:6a:04:7f:6f:de:d5:f2:4e:18:de:a8:35:34:9d:ff:
94:d7:cb:ac:5a:23:32:e2:3d:e0:ff:a7:63:42:ce:2e:1d:4c:
a2:62:e8:f5:28:78:0d:90:99:d3:c3:d3:cf:68:cf:27:42:b2:
71:03:5a:5a:cc:fa:a7:66:14:81:2f:40:c1:aa:e0:ef:83:1e:
ea:f9:f0:81:ac:6b:2c:d3:f3:c2:2b:81:a5:12:85:c0:5b:0b:
26:0a:d7:a6:f6:98:f1:15:14:ae:dc:66:73:d7:52:ad:8d:f6:
51:02:48:96:07:95:13:ce:f2:62:50:64:c4:e0:d1:f6:83:8d:
e3:5d:46:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:25:21 2025 by rpki-client