Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/19906e12-49fe-357e-afe2-0d584fd175a6.roa
File: 19906e12-49fe-357e-afe2-0d584fd175a6.roa (raw, json)
Hash identifier: Z5CCGUFKGSctB3etNqHQOgr4CdkuQTCsMtQoum4FCAY=
Subject key identifier: 86:D5:03:49:BF:F3:34:2D:5B:AC:AE:1A:37:92:E0:F7:6E:EC:12:CC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584729A9C42B77BD982247899D4C
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/19906e12-49fe-357e-afe2-0d584fd175a6.roa
Signing time: Tue 10 Sep 2024 01:30:09 +0000
ROA not before: Tue 10 Sep 2024 01:30:09 +0000
ROA not after: Mon 09 Dec 2024 02:30:09 +0000
asID: 399337
IP address blocks: 2001:470:31a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:29:a9:c4:2b:77:bd:98:22:47:89:9d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 10 01:30:09 2024 GMT
Not After : Dec 9 02:30:09 2024 GMT
Subject: CN=1a8e761a-22fb-4904-83cb-90a2509d0347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:52:b8:d6:e2:1f:af:7b:85:27:be:1a:55:
fc:af:f5:b8:c1:ef:36:b3:6f:f9:7a:94:ab:d4:bd:
9c:8a:cb:1b:b2:98:3c:5c:e8:70:6b:9f:01:46:ee:
ef:70:36:48:74:24:09:8b:17:f5:5e:5b:e4:07:f0:
df:3b:cb:ef:f5:46:40:81:4b:a5:8c:6a:b0:a5:fd:
84:50:68:f7:a0:68:3d:e9:e6:14:62:e4:6b:9d:6c:
a1:a3:2d:36:7a:21:c7:09:a6:bf:14:10:d0:dc:57:
01:16:f3:e0:43:41:03:e8:04:bb:b4:d3:fc:a0:80:
6e:2d:76:c3:dc:7d:31:0b:a2:7b:88:ee:84:fb:5c:
c4:ce:48:2b:7e:17:61:39:ab:e8:c4:d2:73:c3:7e:
5b:95:81:19:80:e8:8a:53:64:7c:4c:73:b4:c3:bd:
3e:4c:e4:a8:57:17:03:61:40:fa:9d:88:54:7e:f9:
8c:a6:e2:ac:82:76:74:57:75:3c:70:43:0f:dc:ad:
a3:97:fc:ca:e0:c8:b7:9f:46:83:e8:b9:e0:74:6c:
8c:b8:b0:c9:77:41:48:6d:b9:59:5d:f0:f9:13:71:
34:c5:41:76:b5:a3:f9:9a:26:f1:da:bd:84:70:3c:
d1:76:21:28:9d:73:f9:ad:c0:57:c9:13:9e:51:39:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D5:03:49:BF:F3:34:2D:5B:AC:AE:1A:37:92:E0:F7:6E:EC:12:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/19906e12-49fe-357e-afe2-0d584fd175a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:31a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:25:73:f8:f0:81:c5:70:04:1c:d6:dc:d7:81:7c:d1:ad:82:
07:26:8d:b3:58:46:5a:be:c9:e8:67:d8:f3:0d:75:83:2a:d5:
7e:a2:d2:2e:e1:13:35:43:5b:1d:df:f1:12:b8:e9:95:b0:d0:
cf:c9:ec:a8:a8:b9:6c:eb:fe:9c:30:1c:c2:c8:84:f3:4d:6f:
cc:0d:c3:81:d8:41:7a:81:51:8e:20:5c:d0:c3:94:da:67:9a:
c6:84:89:8a:47:87:31:52:e4:f4:22:a1:b3:c0:3e:53:a9:c1:
e1:e6:f0:d6:27:e5:a4:c4:c3:f7:0d:4b:7c:fb:8b:b0:65:38:
75:34:c9:dc:6f:fc:36:12:9d:6d:28:ee:b0:55:c9:e9:7c:00:
23:97:5b:37:f7:5a:d6:d5:fa:3d:a9:3d:e2:23:26:6c:bc:9e:
03:08:69:46:f6:0a:c7:31:d7:f1:02:a2:e1:a9:dd:32:7e:f7:
de:69:f8:8f:c3:b4:7c:dd:8b:41:6d:4a:25:ef:85:a7:fb:63:
4f:8d:b3:bd:db:3c:95:c4:32:bb:fc:ed:db:16:59:2a:ff:73:
01:d7:88:b8:8d:97:b4:85:cd:f8:ed:e3:b8:44:ba:6f:f6:4b:
6a:29:47:09:f2:1e:d7:dc:78:83:af:9c:91:78:cf:67:6b:15:
9b:e2:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:32:29 2025 by rpki-client