Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f969ffa9-b5ed-31dd-bc40-155d44a5e534.roa
File: f969ffa9-b5ed-31dd-bc40-155d44a5e534.roa (raw, json)
Hash identifier: 6GRKNMNJSEHz8q3pRuYOuTZ8k/a0bWic7Jt23OZQeC0=
Subject key identifier: CA:CE:2D:31:8E:43:DC:C8:E2:9E:87:64:75:98:66:1C:D4:58:67:B8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858476F74E023A3985263F582CC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f969ffa9-b5ed-31dd-bc40-155d44a5e534.roa
Signing time: Sat 05 Oct 2024 01:30:10 +0000
ROA not before: Sat 05 Oct 2024 01:30:10 +0000
ROA not after: Fri 03 Jan 2025 02:30:10 +0000
asID: 395945
IP address blocks: 2001:470:398::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6f:74:e0:23:a3:98:52:63:f5:82:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 5 01:30:10 2024 GMT
Not After : Jan 3 02:30:10 2025 GMT
Subject: CN=5c605618-9238-4bea-985d-91a1f96b7904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:b4:8f:63:18:5b:d5:88:19:76:b4:5d:6d:
ac:bb:0b:cf:1d:16:16:6a:90:18:1c:16:6e:06:89:
72:32:c0:f6:33:8f:fc:8e:44:ac:4a:7a:d4:24:8e:
f2:27:bd:35:29:2c:c9:1c:ae:a8:c8:ee:8a:ca:0d:
21:c9:87:38:fe:a7:af:05:45:82:56:8b:b5:3b:7f:
4e:a0:c9:cb:1c:06:40:45:22:a9:54:2c:95:5d:15:
5b:bc:c8:32:98:da:71:8d:60:7d:e3:8e:68:a6:03:
6b:60:72:1f:96:3e:03:4b:d6:13:3d:59:e8:33:f1:
7e:b1:9e:f8:0f:78:47:49:af:ef:25:2a:d3:86:f6:
d4:7f:d8:91:b0:00:a0:ba:ad:20:6d:64:56:8d:47:
2e:df:49:5d:30:30:0e:2d:78:3a:38:b6:cf:e5:2f:
20:b9:e6:ad:e7:73:72:a0:04:0f:d5:39:26:03:ae:
a4:1e:ef:b5:09:78:0e:79:56:53:6a:c8:91:1b:2d:
07:01:fa:a7:45:9b:19:4d:94:77:54:c3:d4:81:19:
e9:70:37:2e:54:f0:7d:e6:84:ac:9f:5b:89:bd:a3:
81:7f:af:44:b0:85:c6:68:fe:df:ea:e4:35:f7:c1:
4c:cb:b9:94:1c:02:79:59:42:06:54:61:d7:85:01:
d7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CE:2D:31:8E:43:DC:C8:E2:9E:87:64:75:98:66:1C:D4:58:67:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f969ffa9-b5ed-31dd-bc40-155d44a5e534.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:398::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:b0:e6:a2:b2:ef:2d:88:0c:b3:0d:47:ae:9b:69:52:a1:f0:
45:87:d3:5d:14:ef:ff:f2:9b:cf:48:0e:89:e5:88:66:92:fb:
95:b0:89:7b:0e:1a:9e:c8:50:85:59:1d:de:ab:83:e5:6f:89:
eb:66:24:16:83:7c:f1:55:bf:8c:11:ba:d2:78:65:b1:08:06:
e1:15:48:90:fc:90:39:81:fd:07:1b:81:3c:3a:19:90:65:6b:
10:da:49:00:9e:a1:50:c5:43:f1:fa:82:83:ee:07:10:b4:97:
0b:04:ba:49:12:0c:bc:34:79:cb:48:7f:65:02:78:57:2b:90:
c9:e4:65:26:f4:82:c8:e1:93:38:d3:ec:1d:9d:98:42:24:36:
ac:1a:8a:03:ed:c4:3f:5c:15:25:10:86:6e:27:3a:33:f7:14:
13:a8:8e:b4:b4:d3:dd:d9:ae:24:68:65:ba:94:8e:59:44:d4:
12:4c:45:e9:e4:6b:05:5f:cf:36:c7:c5:f0:b2:9e:52:7a:cf:
ba:01:6c:ee:bd:50:30:73:f8:11:19:da:20:c9:75:47:b1:b5:
27:b2:92:c7:32:39:70:3d:02:30:c7:94:c2:ee:64:38:cb:51:
70:0f:ef:a0:7e:fa:6e:0c:a5:23:93:d4:38:8c:4b:1d:c2:2f:
f5:39:4a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:25:41 2025 by rpki-client