Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa4138ed-6cbd-35cc-83f1-3641aa8bdfb5.roa
File: fa4138ed-6cbd-35cc-83f1-3641aa8bdfb5.roa (raw, json)
Hash identifier: 9o/13AIOvGvce9Wt27aer0NFo8HpnmKF1phlqUFm5hI=
Subject key identifier: 92:2E:2F:90:42:A6:EE:35:26:8C:22:1F:2B:47:5B:85:66:D1:ED:EE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845DD63A0CB91AE6E0F02D607D0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa4138ed-6cbd-35cc-83f1-3641aa8bdfb5.roa
Signing time: Tue 14 May 2024 01:00:24 +0000
ROA not before: Tue 14 May 2024 01:00:24 +0000
ROA not after: Mon 12 Aug 2024 01:00:24 +0000
asID: 62206
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:dd:63:a0:cb:91:ae:6e:0f:02:d6:07:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 14 01:00:24 2024 GMT
Not After : Aug 12 01:00:24 2024 GMT
Subject: CN=9e1bce9e-e910-4a1a-a1ae-5df1a0776a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:a0:5b:06:65:61:e6:3c:75:57:80:33:20:
a3:75:89:8f:3f:05:f4:a7:ec:3b:47:cd:5e:38:56:
ce:93:12:d5:56:2b:12:65:8c:90:7c:46:76:b9:8a:
5d:f1:82:98:2f:23:2e:ef:5f:de:2d:07:34:4a:81:
1a:fa:7b:0f:fa:de:8d:31:a2:ec:52:6b:47:54:57:
f5:45:3a:05:4a:00:68:c4:64:ce:fa:84:68:46:1c:
07:cf:f1:14:56:a8:0f:00:66:e0:18:e5:c2:cb:e6:
b4:48:c2:a3:6a:f3:65:c4:b8:ac:ac:48:cb:de:fc:
c4:0e:ed:a3:3f:76:b1:73:7d:73:9c:db:85:e8:a9:
89:c7:20:e3:d6:0a:c6:1d:02:ca:9f:fb:57:83:c8:
01:27:56:da:b4:1d:94:49:3f:d9:78:61:82:40:b2:
28:09:46:12:b4:c9:55:ff:55:b4:04:3f:bf:51:2e:
04:60:2e:e6:4d:ae:5a:8b:a3:d1:cc:47:5c:30:02:
08:fb:9d:8f:0d:f0:81:79:47:59:9d:d0:11:f7:fc:
be:8f:97:ec:10:ef:2f:bc:ed:04:0a:ad:a3:95:3c:
3b:f0:48:a3:4d:27:dd:24:d8:ea:21:e5:2c:d5:e4:
32:7e:31:98:a9:d9:51:39:7b:33:03:2e:a9:f2:f1:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2E:2F:90:42:A6:EE:35:26:8C:22:1F:2B:47:5B:85:66:D1:ED:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa4138ed-6cbd-35cc-83f1-3641aa8bdfb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:52:dc:66:d9:f5:b7:8b:21:6d:fc:17:ad:a3:bc:52:d2:57:
7f:8f:97:5f:d1:75:77:a8:a1:52:85:bb:b1:f3:77:1d:21:37:
93:2d:8a:88:94:bf:2e:d5:b4:61:97:16:02:d0:39:92:2d:7b:
c0:8f:bc:ee:39:95:1c:3d:48:0c:8b:47:19:54:6d:a4:bb:7a:
3a:04:4f:93:9b:87:28:1c:62:e2:ea:9b:4b:5e:bf:e8:df:bf:
ba:af:82:f3:ab:dc:9f:f1:69:8e:74:0f:5a:90:28:db:e7:94:
36:29:e3:d4:fa:54:0e:2a:5a:0a:56:fa:b4:e7:5e:9b:f6:dd:
4f:4e:55:69:24:4b:d4:d3:b2:82:8b:3d:b3:da:91:bb:04:0e:
d4:c9:90:9e:01:fe:fc:79:12:8c:5a:48:6f:7c:38:23:5b:ee:
e4:b2:2a:38:21:3c:43:73:d5:77:50:98:49:e8:68:07:cd:d1:
1e:39:a0:5c:fa:57:39:ec:ff:e6:1c:71:68:cb:03:4a:48:95:
75:b6:eb:0b:8a:80:ab:87:91:7c:7c:40:a2:7a:b4:15:f6:e3:
ff:8c:52:85:51:16:42:4c:3d:67:bb:c1:24:05:4c:61:16:bf:
13:ed:a6:e5:5e:dc:aa:46:41:b6:25:75:c1:e2:52:45:fb:f6:
5c:e1:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:46:21 2025 by rpki-client