Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/924deca6-d538-3078-9c7e-7b6eb196257a.roa
File: 924deca6-d538-3078-9c7e-7b6eb196257a.roa (raw, json)
Hash identifier: uEaw7rDCJiZqzydJJaOqQlUHk1ZkGIkT2nzaTc29fEM=
Subject key identifier: C4:70:D0:28:F4:51:27:EF:78:45:0C:41:9D:C8:3D:DF:24:58:CC:7F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584633FDFBCCDE4A03409E85B940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/924deca6-d538-3078-9c7e-7b6eb196257a.roa
Signing time: Fri 14 Jun 2024 01:30:59 +0000
ROA not before: Fri 14 Jun 2024 01:30:59 +0000
ROA not after: Thu 12 Sep 2024 01:30:59 +0000
asID: 46657
IP address blocks: 2001:470:315::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:33:fd:fb:cc:de:4a:03:40:9e:85:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 14 01:30:59 2024 GMT
Not After : Sep 12 01:30:59 2024 GMT
Subject: CN=f8bfa0ac-9059-461c-8a79-6828636fa476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:54:91:52:c3:d7:57:58:42:2d:d8:63:8a:
51:5b:69:06:21:ac:00:b5:4e:e6:18:63:3b:86:60:
25:fb:47:1d:ce:e1:33:f3:e6:ea:07:b2:80:ea:ee:
46:b2:66:c7:2b:93:b2:ce:5d:12:0b:f3:fd:0a:85:
57:11:7a:34:b4:6c:76:cc:75:09:6b:96:f1:1f:8e:
e0:48:02:cd:7e:6d:f0:97:02:93:07:1d:0b:ba:c4:
22:c8:15:80:7d:8b:3a:73:4e:8d:c3:89:01:4c:83:
22:6a:c0:89:f5:2f:a6:d9:0c:60:d5:b5:e2:2a:40:
02:81:37:e9:96:45:7e:23:e2:e6:f7:9e:3b:05:00:
73:4e:65:75:2e:9e:24:ae:a1:52:ba:cd:06:86:d2:
f2:da:31:c4:b8:20:96:2c:df:ab:37:0c:69:16:5f:
11:90:9f:65:36:6c:32:df:fc:5b:00:48:7f:ec:1a:
27:0a:b7:82:13:90:fa:67:ed:e1:8c:fe:16:aa:6c:
33:a1:d5:bc:a8:77:61:08:a6:82:dc:72:81:c8:ae:
3c:a9:9f:7b:de:f6:65:da:42:15:02:f4:57:9c:f2:
b9:2f:f0:7e:34:d1:a8:97:f8:fe:3d:79:7d:df:ba:
55:71:1e:88:d6:0d:dc:7c:f8:cc:89:c7:37:f6:98:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:70:D0:28:F4:51:27:EF:78:45:0C:41:9D:C8:3D:DF:24:58:CC:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/924deca6-d538-3078-9c7e-7b6eb196257a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:315::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:66:49:ac:0b:b0:bc:76:3a:2e:82:5c:ed:31:60:59:de:72:
f9:15:f9:45:65:24:ba:d6:01:0f:7b:8b:e3:7d:98:1c:c1:0e:
4f:df:60:06:92:39:e0:fe:fa:95:9c:ae:9b:b3:4a:41:37:82:
17:a0:87:c2:11:90:3c:b6:31:17:b5:12:13:c5:cb:b2:e3:cf:
ee:71:a6:3d:90:6e:87:84:96:be:bf:40:e8:74:f6:c8:bc:f6:
31:9c:21:25:0f:da:3c:f1:7f:50:c1:ae:09:5f:29:77:e0:e2:
62:d2:d6:a0:f0:d9:be:84:41:44:14:1c:05:fb:74:f2:44:4f:
ab:a9:ef:d9:68:76:a9:da:9f:47:15:f0:c9:a2:c8:1e:30:26:
b6:02:04:52:90:b4:38:d6:11:2c:e8:59:20:d9:47:f6:a5:2e:
6b:3c:79:7a:16:14:28:34:e7:44:6d:f1:d3:bd:99:e4:1a:d2:
61:25:e3:bc:7d:8d:48:5e:18:1d:b7:90:8d:15:bf:76:b1:f5:
81:22:ca:6b:af:6c:6e:a0:76:b9:48:33:40:9e:33:82:b3:db:
8b:57:26:48:e2:6e:aa:86:d7:36:5d:23:ff:1f:7a:18:3d:67:
ab:37:92:36:1a:a1:73:9d:2e:9f:d6:f1:5a:f8:e6:85:b8:3a:
b8:2f:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:19:15 2025 by rpki-client