Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/934f8cdc-5705-32cd-8709-1b8560c1688a.roa
File: 934f8cdc-5705-32cd-8709-1b8560c1688a.roa (raw, json)
Hash identifier: q3JfAeXcib7cIC9oVbKvnYbRgnawjXXNCvSkkg7kma8=
Subject key identifier: 57:76:44:CF:72:F4:09:FF:B1:0B:6C:B2:DA:B7:6D:FF:B9:55:E0:39
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847644A1CD5373A562D23CDFA40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/934f8cdc-5705-32cd-8709-1b8560c1688a.roa
Signing time: Tue 01 Oct 2024 01:30:07 +0000
ROA not before: Tue 01 Oct 2024 01:30:07 +0000
ROA not after: Mon 30 Dec 2024 02:30:07 +0000
asID: 204020
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:64:4a:1c:d5:37:3a:56:2d:23:cd:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 1 01:30:07 2024 GMT
Not After : Dec 30 02:30:07 2024 GMT
Subject: CN=72476078-5c67-4cf7-9e96-0b115f7d3df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:be:68:fb:ac:c8:b8:32:74:97:d7:f5:08:61:
13:1c:55:ce:4e:a4:7b:a8:16:dc:37:01:a5:1f:09:
df:56:d2:87:c4:48:54:3f:0e:02:62:cb:ad:c0:48:
0d:a4:c2:24:25:55:c7:6e:9f:f6:52:f1:be:4f:40:
fb:2d:bc:5b:9f:85:fb:9f:36:76:af:e6:7c:33:1b:
da:85:70:56:f6:8e:bc:c5:86:2d:03:35:19:2a:1d:
ec:58:26:73:87:53:eb:65:47:97:db:09:c8:39:cb:
c0:c6:51:b2:62:5d:42:c2:cd:59:87:45:31:7d:2e:
07:2f:26:7f:a7:81:5f:ad:16:b9:c3:ec:6f:32:e3:
b8:1d:17:e4:1b:b8:e5:ca:72:d9:80:1d:7a:b8:ac:
de:fd:31:74:87:f2:dd:ca:12:44:e0:71:fe:36:ed:
65:3e:df:1d:49:79:57:38:a5:db:fb:4a:a8:8c:97:
82:a7:13:67:fe:b7:ba:3c:9f:44:b7:e5:a5:70:d5:
20:2f:2c:ac:7b:fd:1a:22:ec:8b:f1:4e:98:56:a5:
9c:52:b4:ef:df:aa:26:65:8e:32:72:86:30:df:8c:
37:ad:1c:3b:b0:8d:78:33:6b:74:7a:1d:27:ca:6a:
cb:f8:29:70:78:83:04:fe:67:e4:01:cb:4f:e3:64:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:76:44:CF:72:F4:09:FF:B1:0B:6C:B2:DA:B7:6D:FF:B9:55:E0:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/934f8cdc-5705-32cd-8709-1b8560c1688a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:99:b5:ca:d4:42:77:c8:45:f0:41:55:52:41:54:bc:64:02:
04:a8:d2:5d:62:6b:45:fd:b3:5e:2a:5e:6f:01:f5:a1:99:27:
42:80:3b:e1:46:96:56:5c:27:eb:7b:38:3f:2a:32:61:0b:3f:
e0:08:79:62:25:c1:45:3f:1f:25:a1:c1:6f:05:65:6c:65:f0:
fc:c0:55:3d:5f:05:1f:ae:e5:21:4e:0a:58:f5:a2:57:42:04:
53:a2:d1:f8:d0:43:11:bd:a1:7c:9a:99:bf:19:3d:42:f7:17:
7b:71:ef:ab:ee:57:c4:fa:6b:59:ad:67:46:6b:c4:d0:92:41:
32:e8:c9:6b:ae:bd:04:e6:f0:27:98:7b:62:38:a2:5f:5a:9c:
d6:a2:db:3a:8a:81:e1:e6:8c:c6:16:4e:46:75:f2:a5:bf:25:
20:45:17:5d:1c:d4:6d:9f:1a:a8:21:45:bc:2b:9d:31:ba:28:
52:37:48:31:e0:84:39:2e:cc:70:e3:c0:34:b0:7f:a6:4c:2b:
ba:d6:b3:22:8d:22:3a:83:31:8d:6f:4a:6e:89:46:26:c5:a4:
d4:79:e3:8c:25:74:f3:3b:3e:e5:57:a1:84:5c:7d:49:c6:56:
7b:24:7c:7e:be:1a:28:81:79:05:22:8e:19:5e:ee:97:22:c8:
f8:47:65:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:50:28 2025 by rpki-client