Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/155cd483-aaf4-3d13-a89e-159ff4cd7218.roa
File: 155cd483-aaf4-3d13-a89e-159ff4cd7218.roa (raw, json)
Hash identifier: 8KE2+7kdi3KWJoWfo8KUbs+V4lzyDu9f03Mvm3h5NQY=
Subject key identifier: CD:70:C9:FC:73:74:44:59:E1:4A:3A:D2:C7:84:E5:54:8A:23:9D:A6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847A1B52E48979B4B7C0F3BE980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/155cd483-aaf4-3d13-a89e-159ff4cd7218.roa
Signing time: Wed 23 Oct 2024 01:30:09 +0000
ROA not before: Wed 23 Oct 2024 01:30:09 +0000
ROA not after: Tue 21 Jan 2025 02:30:09 +0000
asID: 56554
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a1:b5:2e:48:97:9b:4b:7c:0f:3b:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 23 01:30:09 2024 GMT
Not After : Jan 21 02:30:09 2025 GMT
Subject: CN=aa1cbf54-b12a-4a90-8898-ecfc4182fdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:a6:8d:26:88:51:f8:95:91:40:2b:4a:b7:
f3:9d:a5:a6:ed:30:ac:5c:c0:2e:12:4e:48:b2:46:
c1:b6:82:44:98:59:9a:c7:71:40:19:4f:a1:2b:d6:
1a:4d:3d:dc:f3:5f:06:c7:26:42:58:71:97:52:4f:
a6:01:72:44:44:15:35:08:02:dc:3c:6c:5f:46:07:
8a:2e:60:ce:9c:c4:28:7e:ea:56:e5:76:b8:ca:2c:
00:cc:5b:c1:d4:97:fb:14:45:a2:64:1e:00:2b:88:
0c:cc:e1:d5:05:20:dc:6c:33:41:99:08:eb:58:dd:
29:12:b0:ae:15:c3:e7:08:d5:0d:cf:88:e9:10:08:
df:6b:10:9d:52:5d:0f:85:8c:34:42:7e:43:c4:e9:
8c:d0:b8:53:45:96:ea:f3:67:af:2e:98:12:e7:d6:
b6:9a:ae:b4:58:62:ea:44:d9:fa:cf:ee:fe:1f:ae:
35:df:89:0f:ae:82:39:fe:23:65:00:b9:22:b8:89:
b0:58:87:ba:01:36:f6:2a:b0:21:f9:34:e4:bf:99:
13:93:8f:b4:08:74:dc:06:1a:0b:48:4c:72:64:a2:
d5:50:c8:70:de:1b:ca:44:aa:7f:e5:6f:50:0d:1c:
60:17:a2:03:ca:9e:51:92:81:80:8d:70:84:4b:6c:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:70:C9:FC:73:74:44:59:E1:4A:3A:D2:C7:84:E5:54:8A:23:9D:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/155cd483-aaf4-3d13-a89e-159ff4cd7218.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:14:fa:4b:aa:f8:d2:b9:06:0f:45:8b:a4:6c:a6:05:59:0e:
60:ab:a6:dd:28:66:bb:e0:3b:13:24:68:76:2f:ed:6c:87:9d:
81:66:d5:22:3a:82:46:cc:94:f0:85:8b:93:aa:96:dd:b0:56:
2a:98:c6:52:e2:07:98:2f:df:68:06:51:78:14:09:f7:03:15:
a4:ab:13:24:3a:c7:05:92:e2:06:f6:d6:2a:29:3f:ab:90:21:
1e:ec:4c:23:f6:ce:8b:67:06:be:d8:d2:db:2a:7d:11:10:14:
ff:12:6e:7e:c7:56:3c:59:22:8c:3a:02:15:88:f2:54:4f:38:
3a:2c:96:61:10:79:41:44:7d:9c:de:31:ca:b6:1c:1e:aa:e0:
15:bc:0d:9d:82:28:51:88:20:1d:20:da:a4:79:06:08:fe:dc:
2d:55:57:6b:d8:bb:c9:a7:7a:9f:e5:53:29:16:71:4b:9a:c4:
8c:6b:46:4c:67:2b:66:8f:b3:fe:21:a8:c2:ed:ad:9e:56:5a:
97:c6:b2:ac:32:44:fd:c5:c4:e4:72:21:a3:9b:95:84:24:c5:
4f:64:a3:b2:aa:f1:26:b4:cd:0e:e3:ac:ab:14:8c:7a:2f:21:
6e:df:e1:3a:1b:1d:21:96:81:5f:3f:94:b2:55:f2:af:79:56:
ce:31:01:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:22:29 2025 by rpki-client