Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6aef0aa-ccf6-3a1b-9924-02ae9ab906de.roa
File: f6aef0aa-ccf6-3a1b-9924-02ae9ab906de.roa (raw, json)
Hash identifier: vEBFhf+sJS5H4a5HOTygfJP5+ggYtQx+12B9CtSLVnk=
Subject key identifier: 37:4F:26:92:8A:F8:96:6E:05:20:C8:52:88:A3:FD:70:C4:6E:87:5B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B79160CE7BCB7ED29C540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6aef0aa-ccf6-3a1b-9924-02ae9ab906de.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 60602
IP address blocks: 2001:470:31a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:79:16:0c:e7:bc:b7:ed:29:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=af96b6c7-5883-4eaf-80fd-14907354b40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:34:85:3d:39:a3:a4:ea:85:cb:a7:e1:dd:a9:
43:64:57:21:ba:9a:48:ac:06:ef:46:0f:fb:af:cd:
d1:f3:91:d6:fa:95:4e:c7:92:14:dd:96:d3:09:68:
f7:6a:ed:66:42:17:d4:5e:9f:85:95:1c:2f:23:57:
4b:9a:75:e1:7a:6d:66:01:83:2e:05:d5:6b:b3:e5:
93:3e:d6:59:80:4a:ea:c4:59:48:d5:35:87:f3:10:
2d:ff:88:c6:a7:28:8c:c3:25:e4:e5:85:04:3e:78:
6d:82:f4:65:49:92:b5:a5:28:74:e2:42:c7:42:1a:
fe:30:28:4c:ae:5c:aa:df:fb:a0:9e:d2:ce:b7:f2:
44:63:04:35:52:f3:e3:fb:71:b8:87:cf:81:71:6e:
77:49:9e:51:e6:18:22:0d:76:b2:92:73:95:85:a3:
73:2c:ef:3e:b4:69:c0:2c:5a:79:8f:cd:67:39:3a:
95:3a:3a:a1:18:4a:63:46:c1:09:0f:25:4f:3c:9e:
65:60:48:4b:da:e5:bd:3f:74:fe:e3:0a:ba:33:6f:
77:6c:31:00:7e:dc:f5:5b:5b:d9:68:c3:0b:9c:ca:
4d:3f:99:8c:f3:93:29:9e:8e:27:56:c0:b1:10:67:
d8:64:0f:6d:1d:a3:ab:88:b5:8a:3d:09:dc:b1:e7:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4F:26:92:8A:F8:96:6E:05:20:C8:52:88:A3:FD:70:C4:6E:87:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6aef0aa-ccf6-3a1b-9924-02ae9ab906de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:31a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:0a:66:40:13:84:00:30:54:02:de:4e:cd:39:f1:62:e0:a7:
37:53:04:1d:cc:13:cd:c7:19:89:9f:0f:56:9f:5f:c5:89:9c:
7d:f0:bf:17:0c:e6:5d:c3:9a:01:40:3e:80:15:68:49:e1:ab:
c0:b7:f6:f9:c8:ad:e2:13:62:b6:be:ae:1c:a2:74:3e:38:a9:
4b:7c:e9:ed:4b:a5:71:37:e9:5d:e1:d9:50:a3:0c:81:e9:4b:
1b:00:fc:c7:b3:32:9d:8b:d8:e2:7d:38:1a:b9:89:5e:90:c7:
82:c7:53:53:7a:87:9c:2e:d4:01:84:b8:24:5a:de:85:f6:ba:
81:2e:f7:08:6f:5e:c4:54:f6:a2:84:67:64:c1:e9:13:77:2b:
e2:f1:af:0f:2e:87:ad:53:fd:4f:d7:eb:ff:2b:8e:41:16:ed:
9e:6b:ea:b3:89:28:8e:7d:62:b6:b5:39:dc:ab:28:98:2d:28:
ce:03:d8:9b:af:99:8b:20:b6:dc:09:f1:e0:07:ff:21:1c:07:
10:c4:d9:6f:c9:f6:c1:79:52:6c:fb:64:2c:3e:ef:31:fc:f6:
36:8a:4b:e8:e5:fb:ad:99:fb:b2:19:28:96:34:c6:b0:7c:6d:
a8:9b:bb:44:a4:d6:d4:5e:ad:74:d8:e8:12:0f:df:33:f9:e6:
07:dd:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:28:27 2025 by rpki-client