Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3272b453-7826-3828-9043-929a226a39dd.roa
File: 3272b453-7826-3828-9043-929a226a39dd.roa (raw, json)
Hash identifier: oNNq2A1ds6pORrEV4WGTeoUxfH7KEVyKkXEnWtsS7Rg=
Subject key identifier: 90:E9:BE:6A:AE:21:11:EC:AD:E7:8F:B6:54:AB:44:8B:56:50:F5:47
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847055EDBECCA4E296C0AB60900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3272b453-7826-3828-9043-929a226a39dd.roa
Signing time: Wed 28 Aug 2024 01:30:07 +0000
ROA not before: Wed 28 Aug 2024 01:30:07 +0000
ROA not after: Tue 26 Nov 2024 02:30:07 +0000
asID: 52896
IP address blocks: 2001:470:31a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:05:5e:db:ec:ca:4e:29:6c:0a:b6:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 28 01:30:07 2024 GMT
Not After : Nov 26 02:30:07 2024 GMT
Subject: CN=34d9f736-df82-4683-af01-a483409c01b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:69:6c:35:af:96:ea:05:c4:ae:57:21:16:
65:72:11:93:30:99:1c:68:0f:5c:4b:25:c9:11:68:
fa:03:0a:6e:5b:c5:3e:70:bc:44:c3:e1:82:f2:e9:
e0:f1:ed:6b:c2:46:84:77:0b:36:66:2c:11:e0:da:
96:ef:7f:1b:e3:79:8f:b4:65:88:64:46:c5:12:88:
4c:26:e6:66:80:d2:9f:74:61:ee:94:d4:30:24:81:
e2:4e:74:a5:c9:c6:b5:30:77:2e:09:9c:1d:e2:b0:
06:70:06:81:92:5e:9d:35:e6:45:24:71:ce:57:71:
f8:db:db:2e:ee:ae:eb:72:58:f9:17:6f:02:86:a2:
5c:05:dd:f8:5b:81:4b:16:7b:7b:9c:e4:12:60:e6:
db:79:94:99:bb:33:cf:dc:f7:8f:dd:c7:b3:08:e4:
5c:43:75:ce:5f:34:46:ca:a3:9f:94:61:4b:29:81:
3d:dd:09:74:6f:b2:12:30:69:ba:ae:cb:36:7a:db:
36:0d:53:9f:be:a3:de:1c:0e:d2:02:30:b9:46:d7:
14:ac:ae:9e:77:a1:a6:56:22:71:d4:17:90:66:8e:
44:c1:95:83:a7:eb:c7:54:a5:ad:01:bb:bc:6d:b4:
ec:40:0b:3c:bc:2f:c7:41:c4:8f:26:1c:d2:43:8c:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E9:BE:6A:AE:21:11:EC:AD:E7:8F:B6:54:AB:44:8B:56:50:F5:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3272b453-7826-3828-9043-929a226a39dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:31a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:21:e8:b8:d5:8a:49:4a:dc:75:e9:2a:c7:2d:75:f9:8c:92:
3e:50:80:10:1c:1c:58:e1:a8:25:86:e2:51:15:bf:e9:a6:88:
58:86:d8:46:6a:c0:05:5d:d1:74:62:66:8e:f5:a6:e8:08:93:
4f:13:36:38:1e:b2:cc:be:57:ec:c7:a0:39:d2:c1:e9:70:0c:
d8:79:07:b9:bc:50:f2:74:fa:ec:8b:ed:3c:5d:f7:e5:a9:4d:
bf:5e:0f:b3:ae:69:16:f3:04:5f:35:60:9c:62:83:0c:25:85:
e3:d7:f5:74:6b:72:23:16:ad:c2:02:2c:09:95:00:89:82:3f:
bf:f2:37:48:cb:87:62:38:dd:66:58:ce:47:aa:4e:eb:e1:1a:
47:45:d4:9b:1f:b7:f5:ff:df:ad:c0:e6:eb:f8:eb:7b:66:39:
a6:60:cb:0c:59:7e:23:c1:76:61:5f:cc:b2:bf:6a:de:5e:e7:
ac:cf:e6:a5:86:f9:0d:87:8e:fc:6b:81:54:e6:38:82:99:75:
10:23:c6:49:dd:c9:d4:94:3d:03:23:d5:1a:76:52:b0:e6:a6:
18:e6:83:5d:a3:dd:27:b6:e1:d4:a4:b2:57:fe:cd:67:8e:ce:
0a:c6:2b:d6:7a:60:f4:64:cc:fa:d4:d4:36:72:c1:eb:6a:7a:
3b:f5:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:46:41 2025 by rpki-client