Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/72208a14-46e2-3099-ac58-1e38e6bfa135.roa
File: 72208a14-46e2-3099-ac58-1e38e6bfa135.roa (raw, json)
Hash identifier: TaU42DEffPCJXlUGViJVPuvEugQu7mCFKSg2c/Knls8=
Subject key identifier: 27:5B:57:6D:9A:68:F2:17:33:40:D7:FF:A6:51:9A:E3:83:0A:9A:95
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584605DE9A31EBF5F4619A810A40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/72208a14-46e2-3099-ac58-1e38e6bfa135.roa
Signing time: Tue 28 May 2024 13:00:34 +0000
ROA not before: Tue 28 May 2024 13:00:34 +0000
ROA not after: Mon 26 Aug 2024 13:00:34 +0000
asID: 150770
IP address blocks: 2001:470:25e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:05:de:9a:31:eb:f5:f4:61:9a:81:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 28 13:00:34 2024 GMT
Not After : Aug 26 13:00:34 2024 GMT
Subject: CN=5c86bfd4-c661-4648-9093-d7b2463af4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:38:eb:73:8c:73:d0:da:a3:da:2a:66:7a:
bc:91:3e:c5:38:bf:e6:bf:4f:85:14:c4:b4:12:f4:
41:12:5b:84:05:27:ae:41:c3:a9:fe:90:ce:19:d6:
e0:ea:5e:5f:79:cf:b3:88:cd:1a:74:64:30:99:05:
3d:0c:14:e1:b4:6d:79:36:31:56:2d:c7:e7:31:3f:
61:60:af:72:5a:2c:eb:0f:c6:0a:53:90:ce:44:22:
5c:9d:6c:e8:a4:d2:83:f1:56:67:25:97:fa:ae:bd:
f3:3c:db:05:ac:b5:6a:7f:ab:1b:06:53:4e:b3:db:
66:24:a8:6f:56:4e:1f:63:40:6a:49:b1:1e:7e:0a:
2f:0f:15:94:19:41:f8:1c:bf:b5:40:0e:22:07:5c:
a6:4c:42:1d:af:ae:98:b5:5e:49:b3:c1:72:0a:15:
22:0c:39:bb:2e:92:6f:16:60:6b:fa:57:31:ba:0f:
04:23:b8:85:fd:34:9f:5f:dd:7a:98:1c:ea:9d:22:
c7:56:31:3d:05:72:06:77:1a:fa:f9:fc:fa:a7:98:
67:e2:bb:ab:26:cf:fd:cb:4a:de:ff:e8:d0:36:e7:
b7:5a:85:df:e2:c9:e9:60:5e:33:a5:6f:28:52:74:
91:25:18:8c:96:b8:01:d9:bf:fd:fa:1c:91:1f:dc:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5B:57:6D:9A:68:F2:17:33:40:D7:FF:A6:51:9A:E3:83:0A:9A:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/72208a14-46e2-3099-ac58-1e38e6bfa135.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:25e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:ec:5b:46:b6:2f:bf:c3:8a:f4:30:05:38:ab:d9:f9:a5:fe:
de:42:83:09:7b:74:74:6d:6e:39:19:8c:41:63:30:95:00:93:
12:51:f6:86:8f:4f:a4:bb:04:ff:59:60:83:28:26:f1:08:c8:
09:dc:9a:f4:5c:64:88:94:8f:ae:7c:26:f4:b6:fb:c4:0e:08:
28:52:0a:1d:0b:49:0b:86:11:a4:1b:1d:cc:d6:93:6d:b5:79:
5a:26:3d:56:c1:79:6b:10:b4:25:30:c5:ba:d8:48:1c:9d:7b:
6f:7e:07:90:65:11:f4:92:87:15:0d:b9:b4:c0:12:21:6d:02:
10:f9:5e:d1:52:66:89:3f:a0:82:7c:00:22:d6:34:72:e8:39:
30:58:bc:9a:0d:b3:f6:83:1e:f9:67:55:2a:a4:a4:72:59:4f:
a3:e0:31:2b:a6:59:7a:8b:52:2b:75:6b:36:0e:3f:68:63:ce:
45:24:2f:52:5c:fe:b7:09:52:d9:97:67:96:5b:e5:e5:f1:c0:
98:83:13:29:f4:66:33:f7:5f:ce:8a:ba:25:8a:c6:e2:d7:3f:
7f:b7:a5:2f:86:5a:99:d0:81:13:7f:f2:5c:cc:c4:fd:6a:0b:
43:32:9d:0a:d5:84:d0:cd:d3:cd:b5:e2:7a:94:85:20:27:dd:
ed:a4:3a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:42:35 2025 by rpki-client