Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6beeb479-6e08-3268-bd83-1400e104024c.roa
File: 6beeb479-6e08-3268-bd83-1400e104024c.roa (raw, json)
Hash identifier: 8m2RoYJ63yo14DdUPiVMVeAIMv+DEHqy8K6aAOJCMaw=
Subject key identifier: 01:64:50:70:1A:1F:A5:67:86:32:0A:3E:0D:F3:DF:89:64:DD:54:06
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584729A9C2BAE43836425AC72500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6beeb479-6e08-3268-bd83-1400e104024c.roa
Signing time: Tue 10 Sep 2024 01:30:08 +0000
ROA not before: Tue 10 Sep 2024 01:30:08 +0000
ROA not after: Mon 09 Dec 2024 02:30:08 +0000
asID: 399337
IP address blocks: 2001:470:2ef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:29:a9:c2:ba:e4:38:36:42:5a:c7:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 10 01:30:08 2024 GMT
Not After : Dec 9 02:30:08 2024 GMT
Subject: CN=b0333b3f-64af-4f03-9f57-7d175e96c30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:4b:d7:63:54:42:d8:5c:ed:7f:da:93:9e:
b2:f1:02:1d:f8:04:b6:17:3d:d5:23:5d:58:34:a9:
e8:9a:d4:d5:c1:a4:f0:51:d1:b1:cc:59:0c:3e:60:
4d:55:83:80:60:0e:3b:06:f5:1b:0a:42:59:73:de:
f3:a6:60:d0:e6:ed:c6:32:c2:0e:95:7d:81:af:6e:
0b:4c:27:bc:1b:44:bb:07:b7:2f:15:3c:78:46:e3:
10:a9:14:e3:37:df:f4:43:69:18:25:dc:bd:0f:4f:
11:52:7a:dd:b2:63:0b:51:f5:48:17:1d:75:60:e7:
d1:54:f4:94:cc:1d:82:9e:08:0c:c7:c3:25:05:d9:
a2:9b:fa:aa:81:90:d6:20:06:53:9e:85:21:96:9b:
31:86:aa:cb:e3:e6:49:86:b1:37:91:85:c9:d4:ac:
c7:c7:ec:80:51:3a:63:51:01:85:c2:60:be:5b:11:
ec:4d:a4:64:6d:17:96:96:87:8d:d3:7e:0a:4c:0f:
f3:f9:c0:3c:a5:14:e0:fd:34:38:85:bb:4a:06:d4:
e1:ac:e5:86:ad:4c:b1:33:46:f6:67:84:7b:30:66:
ac:df:c3:2d:88:42:9e:1f:fb:69:ce:ae:1e:2c:b0:
53:ee:fc:90:df:46:b1:43:39:44:33:73:4b:c9:bf:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:64:50:70:1A:1F:A5:67:86:32:0A:3E:0D:F3:DF:89:64:DD:54:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6beeb479-6e08-3268-bd83-1400e104024c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:21:5d:cf:f3:8a:fe:c7:8e:c0:18:ea:81:4b:e6:ea:dd:9b:
72:1a:1c:90:ec:8d:f1:9d:dd:60:21:d3:03:7e:d2:a5:f3:fe:
0e:19:0e:0b:38:13:c2:3f:b8:15:a1:1b:2f:b4:02:7d:35:24:
69:39:78:9a:d6:4b:1e:8d:51:40:a9:5b:70:81:41:bb:c6:cc:
b2:88:f7:47:3a:c6:f8:41:50:5a:37:32:c7:8e:2d:4e:58:e7:
65:f1:2c:63:8f:08:af:3b:19:18:f5:bd:79:e8:98:a1:4c:18:
5f:b0:49:97:f1:d6:35:d6:62:9c:77:02:d6:f8:37:db:c2:ef:
9b:b9:f5:f5:fd:48:83:94:f0:b9:08:4c:45:15:bc:bb:e3:97:
ea:03:11:64:3f:52:08:0e:03:bc:bc:df:f2:a6:52:7b:28:2a:
a0:a0:d8:93:df:f0:7e:ed:a5:d4:b0:b4:3d:09:7c:eb:3c:5a:
88:4c:28:7f:45:2b:d9:27:16:45:a3:3a:e0:0a:3e:c8:38:ad:
ef:90:0a:e2:d5:98:e3:5c:86:96:e1:88:26:2b:2f:8d:ff:5b:
f6:e1:34:64:10:18:2d:05:6e:4a:8d:13:83:8c:0e:c6:2e:9b:
af:bc:49:5d:7d:73:ef:65:18:80:09:d6:6c:f7:45:10:e6:20:
52:50:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:44:53 2025 by rpki-client