Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14bbd72f-baca-3fef-a28d-855c25232a7d.roa
File: 14bbd72f-baca-3fef-a28d-855c25232a7d.roa (raw, json)
Hash identifier: ZUhpymyGMXlY6whZhlNhE2I4xXXHjSk5ZJd9qK2Am9E=
Subject key identifier: 33:49:D8:8C:1C:81:55:DE:19:09:21:CA:C8:33:FF:2B:DD:25:D8:B0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A774551B016EB4697EE5E40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14bbd72f-baca-3fef-a28d-855c25232a7d.roa
Signing time: Thu 27 Jun 2024 20:16:05 +0000
ROA not before: Thu 27 Jun 2024 20:16:05 +0000
ROA not after: Wed 25 Sep 2024 20:16:05 +0000
asID: 37057
IP address blocks: 2001:470:30d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:45:51:b0:16:eb:46:97:ee:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:16:05 2024 GMT
Not After : Sep 25 20:16:05 2024 GMT
Subject: CN=15562c7d-4f67-4f72-9caa-b36b69b871c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:19:6f:fd:99:6e:c9:fa:58:03:f3:29:58:
51:05:09:3a:92:bf:12:32:94:f8:b8:58:e2:fc:40:
a9:b8:38:9e:35:f3:40:76:8f:59:77:22:fb:3d:dd:
e9:b3:49:4b:62:40:d5:f7:40:75:56:f4:29:2b:39:
ab:f6:58:00:4e:d4:3d:42:4e:08:e1:34:59:45:fc:
4e:7c:15:32:56:15:ab:d4:35:1b:f0:c1:ab:98:44:
79:67:d7:40:cc:31:fc:06:f6:6a:45:39:65:ea:96:
f5:b9:b7:f3:52:fc:0d:c9:36:14:44:a0:ed:2a:d1:
f2:31:cc:74:92:94:0c:21:55:d2:16:f2:68:92:6a:
9f:1e:38:1a:55:cf:93:86:95:8f:8d:f2:c6:c7:5e:
05:eb:a2:9b:8e:f0:98:97:50:e7:1c:0e:ee:bf:a6:
52:a1:85:34:fd:33:39:46:5c:a7:4b:50:09:c0:f6:
e8:3c:9e:a8:11:f9:38:2e:03:a6:a6:1f:d7:3e:fc:
0c:f1:57:c8:3f:b8:67:17:87:b1:05:bb:2a:89:05:
56:06:5e:9d:63:b4:b0:31:f3:9e:25:75:8d:db:93:
42:b3:ce:8e:e5:a1:22:04:8b:a5:ae:00:1d:ff:bb:
9b:b3:20:41:92:35:c1:f5:99:ea:04:95:93:62:33:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:49:D8:8C:1C:81:55:DE:19:09:21:CA:C8:33:FF:2B:DD:25:D8:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14bbd72f-baca-3fef-a28d-855c25232a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:30d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:39:c4:b6:ed:5e:e1:fb:bf:c0:04:64:5e:26:21:ee:74:fc:
a7:40:ea:04:ca:ac:97:b4:bd:cf:b9:0d:26:dd:bd:23:52:c6:
41:ab:94:76:f8:9f:ea:e3:05:5d:09:84:54:49:07:1e:9c:8e:
c8:f3:23:bc:66:f7:a6:87:de:8d:16:13:2a:f4:8b:bd:08:b5:
d6:13:f6:89:7c:fa:bd:f4:96:5a:64:40:8d:b8:e8:80:8b:2b:
4f:07:14:47:58:62:91:ed:10:8b:92:b7:f0:c6:68:bc:15:d7:
bf:e1:7d:81:e8:c9:8f:de:2d:e7:cb:55:13:08:6f:b8:8a:18:
4e:27:ce:06:c6:d9:8d:be:19:fa:00:14:cc:b5:cc:bf:11:8f:
3c:89:1b:3d:ee:ba:4b:0d:f4:c4:85:62:f3:f7:5c:cd:4b:1e:
9d:b6:7f:67:6c:de:21:9a:89:11:c2:98:aa:aa:61:8f:50:94:
b2:69:8d:c1:9c:18:79:03:a4:1f:f3:b9:f1:b7:ea:e2:d4:12:
f4:b5:0d:a2:6a:0e:70:3e:c1:27:10:1b:7c:b3:fb:66:4f:e1:
af:77:d2:ed:47:75:45:14:c8:8e:dc:1c:ad:4e:07:7c:2b:9d:
dd:3a:14:a5:c7:0d:bb:d1:32:c9:6e:61:5e:90:6b:38:fe:59:
1b:c7:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:42:58 2025 by rpki-client