Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28198fd1-8d42-3eb0-ade7-a8854011146f.roa
File: 28198fd1-8d42-3eb0-ade7-a8854011146f.roa (raw, json)
Hash identifier: ezdHbfsC8JtkfMYd0AH1ZX+UErd+Um5oWPfRO/9Ryb4=
Subject key identifier: 96:07:75:13:A1:87:56:0B:38:48:8C:D4:B9:E0:94:97:D0:80:3F:33
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846004C8B52AF66F243A2517480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28198fd1-8d42-3eb0-ade7-a8854011146f.roa
Signing time: Sun 26 May 2024 13:00:34 +0000
ROA not before: Sun 26 May 2024 13:00:34 +0000
ROA not after: Sat 24 Aug 2024 13:00:34 +0000
asID: 8057
IP address blocks: 2001:470:1c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:00:4c:8b:52:af:66:f2:43:a2:51:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 26 13:00:34 2024 GMT
Not After : Aug 24 13:00:34 2024 GMT
Subject: CN=2c07e20e-171f-4568-90d8-f0c68fd0b05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:a1:a9:c7:ca:4e:18:d0:92:f2:e9:f9:ef:
57:11:6d:2b:39:4f:c6:57:0c:a4:55:5f:5e:63:c7:
0f:e0:06:e3:65:17:7e:b7:ec:a8:4e:c6:53:c7:ec:
1e:9f:9e:a4:3b:c2:65:f3:77:82:59:0a:bc:83:4c:
64:3b:aa:95:32:6b:eb:af:3a:47:24:e2:11:27:44:
dd:c1:fc:d6:d7:53:52:c5:07:ee:1a:28:cf:c1:ae:
d0:36:d8:cb:7b:f9:44:8c:20:b4:a0:bc:bd:78:70:
b4:92:6a:5d:1b:f2:0d:c1:11:8e:c8:8b:53:cf:93:
48:8f:c9:1a:f0:94:8f:53:3b:db:75:e2:d3:e6:e0:
06:e0:23:ae:51:18:a1:b7:ce:10:58:a9:6d:fa:15:
42:b3:c2:82:33:02:2c:5d:34:e6:dd:86:87:0d:15:
e3:f4:e6:de:e2:0a:7f:8b:8c:c1:73:5a:a1:5b:0e:
4e:15:c2:b4:ac:91:14:9d:87:e4:84:f7:22:d5:9e:
c0:3b:39:ba:ad:b7:b7:33:34:c4:a8:0e:7b:d8:22:
94:e9:50:2b:57:e7:ae:4e:6a:92:5d:b8:a6:a3:32:
89:ab:aa:cb:63:9f:4a:54:94:3b:d3:d2:dc:90:67:
ba:b0:92:30:e4:71:a7:39:a7:fc:ac:15:1e:44:1d:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:75:13:A1:87:56:0B:38:48:8C:D4:B9:E0:94:97:D0:80:3F:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28198fd1-8d42-3eb0-ade7-a8854011146f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1c2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:5a:11:45:c9:f4:71:a9:42:3e:63:f2:62:6e:d6:b5:ad:79:
06:b1:50:1d:f0:c1:dd:8e:62:28:3e:95:9b:bf:0f:33:65:3c:
82:eb:dc:34:f7:ed:ea:23:d0:5d:a3:f5:0f:96:04:10:40:e7:
c9:73:71:9b:13:67:2b:ac:af:b9:78:46:be:27:fb:08:a4:ef:
30:eb:91:75:6d:cb:b2:69:03:a9:a7:3f:fd:dd:45:50:bb:00:
eb:e1:4e:27:be:bc:85:b0:32:d4:62:2c:ba:58:7c:0b:02:a3:
82:cb:8a:b7:86:d3:68:c1:c1:a6:55:cb:a0:37:eb:3c:b2:26:
05:91:ff:75:da:e3:2e:3a:97:41:7c:40:ca:23:19:9b:cd:de:
f2:50:21:48:7c:8f:9e:50:72:d6:a0:86:e4:44:d2:0e:7b:d0:
a2:0e:74:92:5c:af:0f:45:50:e7:aa:a4:9d:3b:28:61:e1:b9:
ac:a5:e6:79:d7:2e:f6:fe:86:3b:ac:7d:54:dd:76:8c:81:06:
13:e0:62:62:ff:05:35:e5:f1:0f:39:2a:10:6f:7b:30:2f:f8:
8a:46:f3:51:6f:00:2d:53:d1:21:bd:06:10:fa:54:e2:6f:93:
71:f5:67:91:f8:b0:6a:d0:18:3e:08:cf:84:b9:ec:ab:4a:81:
6f:cf:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:29:09 2025 by rpki-client