Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b751631-0775-35af-baa2-494fe7742447.roa
File: 7b751631-0775-35af-baa2-494fe7742447.roa (raw, json)
Hash identifier: rnsEVwikTM0SdL8fUnD/LYOav0KTYGaHMyjUlHMYqco=
Subject key identifier: FA:07:5B:80:CA:33:E2:CD:93:6A:A1:D1:65:67:34:7D:CB:14:86:00
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B745FE2F558228153D880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b751631-0775-35af-baa2-494fe7742447.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 265389
IP address blocks: 2001:470:2ef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:74:5f:e2:f5:58:22:81:53:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=127cb6bd-09e9-4d8c-bec9-68860c55300d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:1a:06:b2:38:25:ce:77:76:cc:70:4a:ab:
fd:61:4e:18:61:14:50:ac:cf:8b:fc:c1:1c:e9:05:
1b:8c:82:a4:b0:cb:eb:14:7e:7b:35:da:56:14:ee:
a9:65:5a:93:33:fd:f6:91:73:ef:4f:e6:d9:0c:f9:
17:4d:44:1d:c7:7c:9f:25:c4:08:11:ce:79:bd:8a:
51:27:3e:5e:ae:42:bb:2a:16:a2:99:c9:16:12:9a:
bc:2e:54:de:c8:f8:7c:85:a5:75:33:48:4d:96:a7:
ae:a0:9b:27:f3:18:d5:0e:f5:d9:e1:d4:78:92:ce:
fa:f2:60:34:91:9b:fb:c8:3f:ef:53:82:ab:04:e5:
0b:f1:73:64:46:15:48:3f:70:ac:02:6f:a6:6d:d1:
27:ca:65:32:53:a7:1d:bb:5f:45:9c:db:4d:e9:99:
b0:0f:b2:3a:ef:29:7f:51:e5:0e:9c:0c:8c:8e:41:
e2:09:34:bb:0b:f2:13:d1:9a:52:03:3d:5b:22:f8:
99:66:56:9b:a3:ad:db:58:e8:83:a5:b8:24:85:88:
ff:b8:c8:a2:7f:17:06:9c:44:54:00:9c:0a:9f:21:
d7:d9:d2:b4:96:86:22:12:34:e2:9b:d4:26:d7:c8:
b6:f1:89:1c:95:39:ac:e3:8e:21:1e:01:44:cb:85:
33:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:07:5B:80:CA:33:E2:CD:93:6A:A1:D1:65:67:34:7D:CB:14:86:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b751631-0775-35af-baa2-494fe7742447.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:bc:0e:2b:07:5e:89:2d:f4:0a:45:f7:94:a7:f4:b2:88:56:
8b:4a:6f:f6:4a:68:3c:b0:e6:fd:2b:53:df:30:9e:05:e6:1e:
75:3e:f0:10:5f:39:43:1d:47:6d:10:00:eb:ab:66:99:b2:83:
33:9f:3a:79:36:3a:4b:e0:29:c9:1c:aa:54:42:d9:c2:cd:58:
09:36:32:23:1e:f3:44:f1:b3:d0:5e:2b:ca:9d:f1:01:8d:60:
01:1a:de:7f:0d:36:ab:49:5b:7e:50:e3:3a:ce:b6:ea:e9:a9:
a9:99:e0:87:c7:88:da:65:3c:83:c6:db:d4:1f:83:4d:9e:dc:
16:b9:5e:98:8a:ef:12:57:d4:cb:ef:02:f8:d2:a1:8c:ba:cc:
c2:d9:e5:04:5c:6e:17:0b:99:9f:6b:36:01:1f:c6:02:0e:6a:
31:0e:d4:f8:c2:d7:ca:83:55:a1:04:36:02:67:10:b0:29:07:
f9:20:bf:29:21:7d:09:2b:ba:7f:4c:e2:c7:46:da:27:45:b1:
9c:5f:32:8c:96:7f:00:5f:5b:b2:a9:4c:b6:c4:96:c4:4f:42:
8a:4d:b6:a8:33:2c:c3:37:65:a8:11:d2:3a:80:e5:15:e0:b0:
8d:5d:ae:7d:e9:17:80:31:10:1b:9d:e9:3b:c9:a4:4f:5d:89:
66:59:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:50:49 2025 by rpki-client