Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40a063d0-0f30-39de-b253-7da87a07f2fd.roa
File: 40a063d0-0f30-39de-b253-7da87a07f2fd.roa (raw, json)
Hash identifier: mItbOJGYSCY8ZDDVrKWzs/SR/N3nc8f+E5ZsWhw4WbY=
Subject key identifier: AB:FE:16:AE:D1:6D:DA:3C:54:3F:9A:8D:37:AF:55:52:03:E6:14:F9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584628C4B424B6202666A2E87000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40a063d0-0f30-39de-b253-7da87a07f2fd.roa
Signing time: Mon 10 Jun 2024 01:00:24 +0000
ROA not before: Mon 10 Jun 2024 01:00:24 +0000
ROA not after: Sun 08 Sep 2024 01:00:24 +0000
asID: 394230
IP address blocks: 2001:470:ca::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:28:c4:b4:24:b6:20:26:66:a2:e8:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 10 01:00:24 2024 GMT
Not After : Sep 8 01:00:24 2024 GMT
Subject: CN=ab8774bf-a747-4b5a-a9b5-3bf13e9ad44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:f7:57:b7:a3:35:13:2b:08:e0:87:25:9f:
c4:19:bd:2b:86:02:cb:f1:b2:bf:59:95:57:82:34:
89:46:b2:81:e4:cd:5a:b2:69:ef:d6:59:26:57:bf:
e2:6a:e4:e4:2c:c2:09:1b:aa:c5:b5:65:07:0a:73:
7a:9d:af:dd:4d:e1:9a:02:7b:31:2f:4e:22:6c:be:
41:97:75:f4:57:ed:71:ae:23:73:bb:39:d9:e9:25:
8d:e5:e9:7d:94:b4:c3:7c:72:f2:d8:61:bc:03:22:
17:9f:b1:33:97:0e:43:7f:c9:f5:05:6a:6d:ba:58:
db:90:99:44:c4:30:bb:8a:47:19:3a:26:2d:63:1f:
5b:e3:e3:38:e6:dc:e5:67:28:1e:1c:69:e4:a1:1d:
64:6c:e6:60:d9:aa:80:70:6e:7d:c7:4e:25:ae:0e:
9f:32:42:a9:7a:ca:86:94:79:2b:be:aa:71:fe:84:
da:b2:a5:c0:ab:a5:72:aa:ec:05:89:5f:d0:4f:bf:
2e:fe:b8:f1:e9:b2:90:80:0c:7d:f3:a2:a1:04:d2:
00:16:ec:3f:60:83:46:c7:48:40:32:20:a8:eb:42:
50:73:e3:8d:2e:1e:a4:7e:93:da:e7:e6:30:27:43:
85:ab:3a:af:0b:5e:a0:d4:d7:5d:41:2a:8c:51:d8:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FE:16:AE:D1:6D:DA:3C:54:3F:9A:8D:37:AF:55:52:03:E6:14:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40a063d0-0f30-39de-b253-7da87a07f2fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:ca::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:78:ad:67:3a:12:9c:9c:6c:1d:6a:6e:c6:da:70:b9:c9:85:
61:be:de:74:51:e8:3f:c2:9a:38:5e:3c:0f:5f:c8:2a:6d:96:
3d:a5:8c:5b:2e:df:7b:86:e5:cc:64:c9:6b:3d:bb:a4:89:70:
e5:2e:c3:b5:2b:c0:02:d4:c1:a1:08:e0:4b:d1:6c:ed:c3:24:
5b:4a:83:6a:6a:37:fd:59:ae:94:1f:8a:2d:6a:11:8c:48:4b:
0f:b9:37:41:d6:59:20:4a:2e:d6:8a:6a:3f:c8:a6:5f:aa:33:
25:52:96:80:f7:d4:44:c3:9d:0c:88:5d:33:9c:c5:90:92:e8:
53:d8:83:bc:c3:26:7b:e7:4b:7b:97:d1:82:73:1a:0e:8d:75:
a6:17:2a:77:4d:c3:90:5b:26:d5:61:3c:fe:71:e5:ad:b2:5b:
16:e2:5b:9c:ec:4d:34:ff:8e:38:e0:fa:4e:e8:37:88:15:9a:
76:e6:1a:7e:f7:22:30:5f:ba:c5:f1:e6:b8:d0:15:b6:3e:90:
53:e8:d8:70:47:2a:0a:e9:9f:ff:e2:cf:12:04:71:25:bb:46:
bb:f5:77:ed:3b:19:ae:10:25:c2:53:1a:cb:55:a2:2c:e9:e0:
89:a5:09:a3:86:a8:e6:cc:bf:e6:04:1f:ef:77:7d:61:a0:f3:
34:d2:be:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:04:39 2025 by rpki-client