Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68e5df79-0b60-3a92-95a6-82f84722a4e6.roa
File: 68e5df79-0b60-3a92-95a6-82f84722a4e6.roa (raw, json)
Hash identifier: KyKjPBxuYOM1o58Yvtas+cTf912oeQ2VdHTYBiLr7Ds=
Subject key identifier: 5A:AD:37:4A:D6:9D:BE:86:5C:56:4D:10:E9:12:DB:20:1A:50:04:36
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845FAC2EF2AD9A7CF396CD7CBCE
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68e5df79-0b60-3a92-95a6-82f84722a4e6.roa
Signing time: Fri 24 May 2024 13:30:56 +0000
ROA not before: Fri 24 May 2024 13:30:56 +0000
ROA not after: Thu 22 Aug 2024 13:30:56 +0000
asID: 30162
IP address blocks: 2001:470:4d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:fa:c2:ef:2a:d9:a7:cf:39:6c:d7:cb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 24 13:30:56 2024 GMT
Not After : Aug 22 13:30:56 2024 GMT
Subject: CN=c3107131-2966-4789-91cd-ba199794874c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:6f:4d:c1:17:34:84:68:ac:bc:90:67:09:
7f:16:d5:1b:9a:e5:4c:28:82:7e:e4:0b:d8:8b:8f:
05:0c:85:95:9a:47:1e:4b:dd:ca:e7:ea:01:21:af:
60:49:eb:f3:35:33:90:a8:f1:a6:2b:d7:62:59:32:
4a:36:5f:0e:3b:30:f9:71:f5:e5:97:24:71:ac:4a:
0f:ad:c5:43:ea:f1:99:a6:d0:9a:8b:cc:7f:1a:a2:
4d:47:0d:21:57:3f:fc:41:ba:e4:cc:dd:d6:ba:f3:
80:f9:39:72:59:85:78:ff:8a:e6:c0:05:56:36:c4:
d8:42:fb:a1:4f:d4:a6:2e:77:87:0b:ad:c1:41:60:
f2:3c:17:f2:0d:7e:1b:20:95:30:b3:10:d5:48:c2:
00:01:d8:09:4e:f6:fb:41:75:24:a0:ae:c1:32:09:
3a:5c:c9:c2:5d:f7:8b:80:57:6b:ce:95:d2:a0:51:
1a:a8:f5:88:07:19:53:c3:04:bc:02:3e:7e:14:b8:
4a:47:ad:87:15:2e:da:71:b4:84:4e:0f:2a:61:f8:
dd:92:a4:9d:44:29:46:7e:ab:7f:76:18:d3:ee:13:
f7:5b:fe:b5:30:e2:3f:0d:4f:af:00:20:7f:0d:39:
bf:54:94:9a:11:ac:9c:a2:e6:d0:53:88:39:07:a0:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:37:4A:D6:9D:BE:86:5C:56:4D:10:E9:12:DB:20:1A:50:04:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68e5df79-0b60-3a92-95a6-82f84722a4e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:4d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:1b:40:9a:1c:2c:20:cf:d6:78:22:b6:10:54:c0:da:eb:41:
00:86:08:d3:bf:48:85:8c:91:9f:f7:d6:c6:9a:6b:7b:c2:d9:
e6:46:8a:65:45:1c:fb:9d:e3:40:dd:f0:05:28:97:a6:88:fc:
1a:2b:92:5d:f4:12:f3:f7:7e:71:26:0b:9e:91:3f:b8:a4:bc:
c8:85:29:9b:de:90:26:46:39:5a:9c:66:7e:58:91:4c:df:6b:
b8:24:b5:59:53:89:fc:9d:79:a7:5a:68:7b:f3:b1:40:43:84:
c6:08:0a:32:1a:56:33:fd:a4:cd:2c:b8:ef:c4:23:20:80:8e:
5f:22:77:3a:72:52:e0:1c:f5:b2:f3:c9:95:f8:53:64:97:8b:
d1:ac:8a:26:87:83:6f:ea:bb:03:d3:93:2f:67:90:dd:79:c0:
8b:3e:fb:03:e0:49:0a:b1:ec:a9:4b:20:dd:d6:3d:37:0a:04:
4b:5e:92:f4:6a:12:68:20:ce:f0:3b:fa:05:b8:d7:db:1f:b6:
77:b6:5e:43:da:98:f9:ca:18:63:ce:18:e2:10:99:1e:7b:88:
db:1a:9b:e1:b7:75:03:11:61:9b:21:fb:01:29:55:c6:4a:55:
9a:83:9c:94:7c:1b:68:a3:c0:4d:d2:56:b6:dd:49:ac:8f:38:
d7:42:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:53:40 2025 by rpki-client