Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ffc75321-27df-3462-bc06-963a5f7f1f54.roa
File: ffc75321-27df-3462-bc06-963a5f7f1f54.roa (raw, json)
Hash identifier: C7M3uUae3TuX3eAvLJCJKc1cTZFB9qrjecN/YZuZ6+Y=
Subject key identifier: 45:E4:E7:F4:BD:E4:F5:7B:47:F1:DA:C0:BA:8D:31:A2:A9:28:5B:D6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584635543F54FFB7159B9849CC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ffc75321-27df-3462-bc06-963a5f7f1f54.roa
Signing time: Fri 14 Jun 2024 13:00:35 +0000
ROA not before: Fri 14 Jun 2024 13:00:35 +0000
ROA not after: Thu 12 Sep 2024 13:00:35 +0000
asID: 49461
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:35:54:3f:54:ff:b7:15:9b:98:49:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 14 13:00:35 2024 GMT
Not After : Sep 12 13:00:35 2024 GMT
Subject: CN=8e554616-af8c-4712-b30f-4b414b8494f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dc:04:21:f8:00:aa:5b:2a:ff:11:12:39:cd:
54:ff:b1:58:9d:72:28:21:d6:b3:9f:c7:04:16:73:
03:ab:a0:d1:36:ca:d9:30:20:ab:54:8e:d5:98:e5:
5a:fd:64:4a:bd:8d:80:7d:c0:7f:05:aa:8d:8c:cc:
fc:b7:1c:4e:35:8d:8d:85:de:2b:78:ea:c7:37:ce:
f5:02:ae:fb:20:08:ec:52:e3:c9:6c:d3:26:3e:73:
95:a5:c5:3e:35:61:6d:60:43:46:eb:51:68:d5:bc:
9b:d4:4f:50:70:05:51:93:84:ab:77:69:1d:95:7d:
92:68:e7:49:16:37:1d:c3:62:1f:ad:f4:a4:4a:ff:
0d:25:cd:2d:29:84:c8:f5:f4:9f:8a:41:e9:40:f0:
b6:ca:93:0b:d4:4e:b1:f4:28:34:22:e6:91:42:2a:
f2:b0:3b:a6:6c:42:e6:3c:57:74:a8:09:41:01:d2:
bc:2f:b9:ab:57:76:ff:03:64:f7:c6:ec:cc:29:93:
41:5f:2b:02:33:44:b3:48:05:e4:6d:83:55:c0:5a:
02:51:82:4a:7a:59:7a:5d:af:53:b6:a5:c9:c9:22:
cf:b5:9f:0e:ea:97:64:fb:5d:0e:ce:ee:db:43:f0:
42:bb:31:00:dd:88:8a:00:b9:36:a0:7c:95:d9:c7:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E4:E7:F4:BD:E4:F5:7B:47:F1:DA:C0:BA:8D:31:A2:A9:28:5B:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ffc75321-27df-3462-bc06-963a5f7f1f54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:34:e8:8b:13:14:50:39:9f:78:49:de:84:e2:75:d5:96:e3:
3a:10:dc:e0:b5:c2:42:9c:48:8d:cc:45:9c:2a:8b:f9:82:58:
df:2b:f4:ad:c3:67:c1:66:25:45:ca:10:3d:49:95:49:7c:0e:
dd:6f:a4:f6:98:9a:25:1e:05:18:3b:8b:85:a0:a3:a5:3f:3d:
cf:be:54:cc:a1:79:39:72:af:86:0c:4d:bc:3c:ec:8a:a5:10:
4d:bb:25:95:d1:bb:d5:ef:1a:e6:3e:0e:91:0f:13:54:d8:47:
ba:23:68:50:b4:b6:33:b1:16:1f:ca:b2:02:4b:c5:df:78:7c:
de:c6:97:9c:a5:1b:16:34:50:63:5d:03:04:9e:76:be:ea:fb:
fa:af:40:ee:c0:db:a5:fe:ba:75:80:94:bb:fd:e7:b8:f4:fb:
f7:1d:57:e2:21:b7:7b:52:71:87:35:d3:ef:16:54:7f:1d:9b:
9d:5d:54:64:88:a8:ba:6c:a3:5b:fc:69:83:ac:89:c1:14:92:
eb:e5:1f:ca:81:30:bc:b2:d7:89:d6:8c:99:6c:33:a9:5f:79:
23:42:ec:7e:7a:cb:2f:5e:6e:6b:08:6a:58:23:be:31:e4:a6:
45:b9:50:05:01:62:54:6d:de:ec:70:79:79:d0:59:f7:1e:1a:
24:b6:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:29:28 2025 by rpki-client