Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a116b689-2f88-358f-92cf-db65cd98964a.roa
File: a116b689-2f88-358f-92cf-db65cd98964a.roa (raw, json)
Hash identifier: fn1FAQwl3lJhp1QB/WEyJPMWFIzfwNSANGrM4jQcFTg=
Subject key identifier: CE:DF:F1:F8:8C:2C:1A:FF:D0:29:E3:20:4B:70:AE:54:AE:C8:86:40
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847055EE0E14FB21CA861E25A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a116b689-2f88-358f-92cf-db65cd98964a.roa
Signing time: Wed 28 Aug 2024 01:30:10 +0000
ROA not before: Wed 28 Aug 2024 01:30:10 +0000
ROA not after: Tue 26 Nov 2024 02:30:10 +0000
asID: 52896
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:05:5e:e0:e1:4f:b2:1c:a8:61:e2:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 28 01:30:10 2024 GMT
Not After : Nov 26 02:30:10 2024 GMT
Subject: CN=955c0f70-ff9f-4d2d-890d-0d1354050898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:2c:8e:cb:5c:2a:7a:a3:db:2d:6e:36:ed:
2b:da:ac:a2:5b:6e:92:17:52:a4:56:80:df:0c:23:
c7:af:13:ef:3a:8b:26:e7:a7:07:40:18:ad:0a:c3:
b6:a6:07:15:e1:7f:99:6e:03:e9:86:a5:a1:6d:22:
4d:59:aa:08:1d:ad:b6:2a:e6:71:31:0e:2e:2a:a1:
b6:18:55:df:e5:1b:2c:2d:8f:12:2a:be:c0:ab:e7:
90:fa:f2:bc:47:7a:e6:32:39:5f:e1:15:9e:a5:26:
bf:06:16:42:99:cf:da:b3:c5:45:10:f4:27:22:49:
1d:53:8c:f6:0c:41:ec:7a:5f:61:b0:56:8e:39:de:
7c:cd:62:43:c9:6e:b8:2c:2c:d1:fc:d0:1b:4b:4c:
a7:c9:d5:21:54:f1:26:83:0b:1f:3f:77:06:07:0e:
8c:52:36:83:f4:a7:46:cd:13:e7:4e:2e:3d:33:59:
6c:8a:7a:01:0d:32:2f:b1:e9:d4:4e:40:e2:e3:43:
7b:ad:c4:ea:c9:62:90:99:b8:60:35:a9:ef:da:62:
df:55:c2:c1:1b:32:64:01:84:52:5d:62:51:f4:97:
9a:b9:96:82:e3:7f:a0:3e:78:d3:65:09:58:06:8d:
6c:e4:23:9f:2f:54:7f:b6:b9:34:ac:1f:28:cb:e8:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DF:F1:F8:8C:2C:1A:FF:D0:29:E3:20:4B:70:AE:54:AE:C8:86:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a116b689-2f88-358f-92cf-db65cd98964a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:b5:a4:a2:7c:04:51:06:b1:4d:e8:8c:09:f2:27:62:cf:f5:
a4:b9:81:e2:79:42:5f:ab:5e:a7:43:b2:a3:c1:97:6d:2a:00:
fa:66:06:49:eb:b7:50:35:c9:3b:2f:19:12:69:d5:49:95:e5:
0a:4c:ef:12:15:c0:c4:b4:ba:ec:33:cc:59:4d:af:e0:3c:b6:
da:21:af:e5:81:28:54:2d:86:b7:08:f1:2c:60:66:f1:b1:e1:
1e:c5:7e:25:8c:c7:ed:0b:46:20:44:91:8d:ce:42:e8:1e:20:
d3:ef:f2:53:c0:62:9f:95:68:09:8b:55:5a:25:87:b3:c3:aa:
1b:dc:ec:f7:72:bf:e0:e3:9a:28:7a:e7:e7:c2:cb:d8:ee:d3:
1c:2d:5b:65:ce:83:f8:d7:71:c8:b0:f2:ba:64:b9:7f:5c:f7:
14:78:69:1a:5a:a6:e7:d5:b4:dd:9c:5a:4e:82:8b:63:83:fd:
b5:0f:50:0b:fb:f4:a1:ee:48:4a:b2:20:a1:fa:f5:be:91:1a:
83:e6:d3:bc:2d:e6:14:34:0f:11:95:73:5c:1d:4c:c3:7b:e9:
a7:0d:57:a2:74:e3:93:b6:1a:eb:66:64:27:fd:60:1b:58:86:
cd:e2:85:19:dc:30:ce:6c:d3:30:73:5c:ff:df:eb:5e:e7:7d:
55:43:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:32:52 2025 by rpki-client