Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb6a9355-ec14-30df-996d-1e90024b7184.roa
File: fb6a9355-ec14-30df-996d-1e90024b7184.roa (raw, json)
Hash identifier: EuVSqjL4OjpL21f48S7NSGCwAex7bydDaUMFT5vGvzQ=
Subject key identifier: 4C:8C:6B:A7:7D:EF:59:6E:2A:3D:EA:A5:32:95:D1:D1:29:95:44:B4
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584812D52215C16817D9A2ED83C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb6a9355-ec14-30df-996d-1e90024b7184.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 399337
IP address blocks: 2001:470:385::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:22:15:c1:68:17:d9:a2:ed:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=8456ec04-da70-4609-8e41-e691f5539165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:e3:9f:ae:26:4e:0b:76:34:27:dd:51:82:
1d:21:e1:c2:05:a7:c8:ce:e1:5f:71:90:01:07:49:
cf:0b:cc:bb:5a:ea:e9:e5:66:cc:9a:bf:49:64:c6:
c9:22:a1:18:7d:21:96:4a:dd:6e:35:29:04:cb:73:
ca:ae:fc:0c:20:fd:57:12:0c:06:eb:55:6b:c5:9f:
33:c3:88:a7:dd:a6:0b:d8:71:e2:d3:7f:2f:eb:77:
2e:6c:a6:7e:37:54:7a:d5:a1:56:3e:e4:0a:e3:24:
ff:be:d7:a2:a7:62:91:92:08:04:97:59:c9:f1:21:
15:6e:28:4d:1e:a0:1c:d0:5e:af:58:6c:87:47:72:
29:49:0c:8f:e3:78:15:a4:4d:08:5a:f8:d4:41:4b:
65:65:72:da:21:c0:54:d5:80:56:39:eb:20:84:9d:
ae:dd:5c:d3:82:96:47:ec:8e:27:3a:a3:79:06:0c:
86:d2:e7:2c:92:f2:0f:d4:88:48:44:02:e6:53:9d:
5d:c0:3b:5d:d2:6b:3a:77:b1:89:ef:4a:60:22:a3:
6a:8c:29:e2:1f:4b:e6:99:88:40:38:98:79:57:85:
b5:c1:b0:4a:84:b4:67:a2:0c:c3:9e:b7:34:3b:03:
18:d3:2f:c8:2e:c4:77:57:ec:ce:23:09:66:20:63:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8C:6B:A7:7D:EF:59:6E:2A:3D:EA:A5:32:95:D1:D1:29:95:44:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb6a9355-ec14-30df-996d-1e90024b7184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:385::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:58:21:22:49:ff:74:da:02:1f:e0:14:fb:ea:97:28:b5:d9:
6e:e0:a8:7a:1a:cc:92:6a:62:f5:8c:8c:67:b4:85:f0:33:fc:
7f:02:97:66:0b:8c:40:d3:2d:60:b5:28:0c:b1:89:bc:ed:56:
d1:c7:40:53:40:7c:d3:93:2b:5d:85:64:f2:ed:fd:d0:15:b6:
08:15:9c:63:3f:d0:3d:6c:1a:b2:f8:5b:9f:0d:ed:8c:73:a7:
26:2e:9d:68:a2:8f:7a:a3:ec:b2:b8:22:af:95:09:ae:aa:ed:
11:b4:1b:67:9c:55:a0:f3:a4:66:2a:e6:c0:d5:86:02:58:22:
0a:ef:0b:5f:c3:db:aa:a1:c1:65:55:6f:2b:c6:a0:7d:f4:4b:
37:ba:13:ed:69:93:7a:48:c8:a5:42:99:22:4f:b6:75:b6:68:
6b:9b:b3:59:a9:58:ce:f5:8f:b0:b8:1f:f3:5e:08:46:f8:b0:
af:03:57:12:6d:40:b5:f3:e1:55:8d:88:d2:52:68:2d:34:6f:
c4:54:8b:55:20:3b:4c:2b:92:a9:c6:c1:06:fb:71:6d:2c:16:
dd:a5:56:75:11:da:4f:85:30:eb:73:6f:16:b1:f3:9f:79:4d:
39:e6:55:2e:b7:47:8e:2a:5f:85:00:e9:bb:52:55:46:1e:e5:
8c:e3:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:34:31 2025 by rpki-client