Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/922cede9-45a2-34ff-bf87-436221ef199b.roa
File: 922cede9-45a2-34ff-bf87-436221ef199b.roa (raw, json)
Hash identifier: M56KlI6PtJPMVjcVSD13Nim7VE6ko55xd6btD+vb+5Q=
Subject key identifier: B0:2C:F1:C1:47:D1:67:AC:BB:29:89:86:67:EF:E1:81:26:B0:C1:A8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A75149A3670A393AF9CE880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/922cede9-45a2-34ff-bf87-436221ef199b.roa
Signing time: Thu 27 Jun 2024 20:11:40 +0000
ROA not before: Thu 27 Jun 2024 20:11:40 +0000
ROA not after: Wed 25 Sep 2024 20:11:40 +0000
asID: 35075
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:75:14:9a:36:70:a3:93:af:9c:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:11:40 2024 GMT
Not After : Sep 25 20:11:40 2024 GMT
Subject: CN=948d8181-b440-46ae-b22d-085210f93c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:15:9e:92:06:11:b5:9e:83:07:c1:fa:89:05:
e0:84:0b:42:a2:04:bf:40:13:2e:6a:a6:12:60:df:
17:9e:89:f1:3f:8d:15:d3:b5:68:a1:12:07:20:4c:
c7:99:11:e9:e7:af:fa:8c:b7:50:97:a6:8d:79:a3:
65:d2:7f:37:61:57:da:0b:ed:84:d5:aa:ea:ed:78:
99:bb:fd:9a:3e:90:04:b2:eb:42:6e:17:71:b3:62:
2d:4b:aa:f8:40:e3:61:5f:1d:98:aa:f6:ce:a0:e4:
5c:ef:06:cb:c8:41:94:0d:07:f7:69:cb:c6:cd:b1:
64:ac:c6:6c:c2:09:e7:5a:4f:5e:9d:73:54:b0:16:
7a:bb:01:bd:c9:da:ab:c1:2b:3c:90:24:fc:72:38:
9e:be:7b:4f:bd:d2:ff:5f:62:d1:85:24:b9:7d:61:
21:29:aa:33:37:22:2b:0b:02:c2:4e:f6:be:b8:d9:
5f:e9:38:d7:35:1f:a9:66:de:84:c0:7a:8a:21:85:
63:b6:8e:1b:2c:d3:f2:c5:36:4b:90:b9:90:f8:a8:
a4:3c:d5:d1:fc:88:29:c1:35:ae:fe:9a:20:5b:1a:
a2:d3:34:d1:4f:0a:d2:0d:e2:97:7a:c6:f1:44:85:
e2:9b:fe:23:ab:6e:c5:65:b9:93:7d:6f:c9:12:5e:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:F1:C1:47:D1:67:AC:BB:29:89:86:67:EF:E1:81:26:B0:C1:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/922cede9-45a2-34ff-bf87-436221ef199b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:08:d2:e2:1b:ed:14:a0:a7:26:1a:b2:d9:42:03:d0:66:7d:
a0:23:b5:79:b7:d9:71:38:ae:91:20:18:f8:8f:23:4f:25:a9:
64:9f:fe:cb:3a:44:36:e1:9f:f8:66:99:d8:06:1a:5f:78:0c:
4b:4e:44:9e:6a:d7:d3:c3:ce:7b:b4:36:cd:95:70:88:b3:77:
e4:03:5f:04:5b:24:e3:db:f4:86:f2:c2:98:9a:38:4a:4f:4a:
cf:cc:7f:cb:4c:fb:32:6a:c3:5a:19:cb:65:0d:3a:7d:c1:19:
9a:3f:ef:de:b9:8e:6b:45:e6:1d:d4:23:75:f9:89:9e:2a:dd:
bc:4d:61:b8:8d:5d:4d:3d:5e:2a:23:84:54:26:e0:9c:02:28:
b2:dd:60:2d:9b:b2:54:ee:05:a5:85:cc:22:14:a0:8d:62:eb:
7a:d0:66:34:23:d0:d5:f4:1f:ab:ad:1b:1a:60:1f:94:51:83:
9c:06:73:82:7c:ae:8a:0e:ad:d1:86:1b:88:c4:46:0f:cd:fc:
24:96:bd:03:ae:3c:ab:86:07:46:90:4d:b6:84:69:63:92:37:
3e:6e:c0:92:2d:c2:e7:51:31:6c:36:7f:40:53:c8:5d:d7:4a:
df:42:26:ba:f7:ac:1c:a3:29:c3:67:c7:7a:e0:22:1a:6a:74:
35:a0:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:35:02 2025 by rpki-client