Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/866d4d76-fccc-365d-a6d1-06d1103baf98.roa
File: 866d4d76-fccc-365d-a6d1-06d1103baf98.roa (raw, json)
Hash identifier: htStom+be1MAhtJzMfJnQFk/30GsQeE5Tf1oPBFik44=
Subject key identifier: DB:15:58:E3:AE:E9:CF:C8:D8:4D:D0:25:86:70:70:6B:9E:63:47:14
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584633EEE5BEC0150D2C484F1000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/866d4d76-fccc-365d-a6d1-06d1103baf98.roa
Signing time: Fri 14 Jun 2024 01:00:26 +0000
ROA not before: Fri 14 Jun 2024 01:00:26 +0000
ROA not after: Thu 12 Sep 2024 01:00:26 +0000
asID: 63370
IP address blocks: 2001:470:8d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:33:ee:e5:be:c0:15:0d:2c:48:4f:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 14 01:00:26 2024 GMT
Not After : Sep 12 01:00:26 2024 GMT
Subject: CN=c7b51933-b24f-49fb-8d91-af1b14f6c3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:4b:de:92:3b:ec:b9:0a:8e:dd:5b:19:e7:
1e:c0:1e:57:89:07:0c:f0:39:98:36:ba:ab:cf:f0:
54:29:41:e2:98:df:99:96:2b:89:20:24:54:ca:9b:
10:7e:86:dc:fe:c1:29:a5:93:d0:39:8b:14:3a:f4:
e8:f8:94:17:b4:8f:71:59:54:64:78:c2:f4:b8:e4:
41:d9:16:af:81:4c:aa:c3:e7:84:9f:96:a4:f7:eb:
be:29:6f:07:40:da:d7:30:97:86:1f:e6:d8:47:5e:
0a:81:a0:81:d7:cc:e7:99:a1:d3:36:3a:16:9d:07:
a7:a0:3b:51:b5:5f:b5:52:33:ea:9f:fe:b4:e0:21:
fe:4a:c5:1b:87:41:0e:b9:60:6f:d8:9f:f7:ac:5e:
fb:43:56:25:04:0c:c2:dc:7b:68:a2:da:b1:35:f3:
a4:64:28:c3:4f:21:68:67:b8:4f:54:ce:2a:78:e0:
ec:09:df:c2:a8:00:d4:47:9b:7b:a1:fe:ff:80:26:
09:a0:cc:54:bb:66:30:7c:17:66:69:f2:cc:c7:52:
db:8d:0f:3a:a1:60:d4:e1:c3:08:c8:47:92:63:f6:
ad:1e:7f:e1:74:7b:48:e4:20:a1:11:4f:b9:c0:59:
28:b1:e1:5b:ca:f3:36:fa:37:a6:1e:af:83:51:1c:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:15:58:E3:AE:E9:CF:C8:D8:4D:D0:25:86:70:70:6B:9E:63:47:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/866d4d76-fccc-365d-a6d1-06d1103baf98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:8d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:ec:68:2f:1e:df:6d:2d:84:46:23:dc:12:23:5d:a2:aa:85:
00:e6:2d:51:c2:89:78:6e:28:ab:af:df:7c:2d:e9:e9:a3:39:
c9:60:a0:72:0e:ed:85:e2:cd:14:c3:d1:ea:67:83:bc:77:58:
e6:2e:98:07:0e:31:f1:f0:8c:b6:ae:d4:cd:4f:01:23:e2:74:
04:9b:a4:4f:b5:c6:c6:07:b7:d1:84:a9:15:78:84:49:81:b9:
b3:d0:92:0f:1d:ff:0f:c8:44:3e:81:d6:fe:88:63:92:be:1b:
98:7a:0c:79:0b:1d:1e:2a:48:be:63:aa:43:5c:66:af:ec:4e:
0e:a2:2b:51:c2:d7:f6:59:b9:91:d6:1f:d6:40:68:60:ba:e0:
65:b7:a3:2d:bc:7d:22:59:84:62:04:f9:ae:ee:1d:13:d3:c8:
a6:b7:a1:b8:14:af:b0:69:71:37:e2:79:1d:15:08:93:db:c9:
37:00:17:41:a5:c1:3e:e1:e4:ad:07:b1:e2:8e:22:32:09:62:
06:f6:70:61:1f:d5:32:74:60:e9:ec:d5:53:11:54:dd:87:cc:
29:26:15:aa:79:e4:e0:b4:fe:dd:60:85:fc:0f:ca:23:42:ef:
2b:e0:97:b3:d9:65:64:f4:72:4a:a7:da:c0:6f:9f:c5:b9:50:
21:1f:73:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:06:17 2025 by rpki-client