Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1a96fd3-54bc-37a5-bdf3-d27f98ad35d6.roa
File: a1a96fd3-54bc-37a5-bdf3-d27f98ad35d6.roa (raw, json)
Hash identifier: kgfPel+ctzKJHdA54gHoVVcN+OG0orsXIlpZ2JNE8+w=
Subject key identifier: 1E:14:B6:58:2F:7A:B5:BD:C4:56:0F:FB:2E:D2:C0:0E:7C:2C:1B:64
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584635634ED7866674EFE81FD580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1a96fd3-54bc-37a5-bdf3-d27f98ad35d6.roa
Signing time: Fri 14 Jun 2024 13:30:57 +0000
ROA not before: Fri 14 Jun 2024 13:30:57 +0000
ROA not after: Thu 12 Sep 2024 13:30:57 +0000
asID: 270928
IP address blocks: 2001:470:31a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:35:63:4e:d7:86:66:74:ef:e8:1f:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 14 13:30:57 2024 GMT
Not After : Sep 12 13:30:57 2024 GMT
Subject: CN=d4822d41-e039-4aa7-8fde-7b2090ec7ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:9b:e2:c5:73:9c:44:a3:01:40:43:fe:47:
51:cb:3f:1b:a8:4b:a5:e2:15:c7:be:20:22:df:76:
e6:cb:5d:df:d8:5c:85:70:36:4b:2e:bd:c4:61:9c:
ad:99:76:d3:2e:ff:5b:df:79:f2:a0:96:e7:bc:dd:
d6:f2:c9:bc:a5:e1:64:6f:43:e2:7d:b6:4f:05:11:
af:65:34:96:3f:2a:7f:cb:75:52:f2:df:a8:15:1b:
4f:8e:c7:83:79:51:ed:d7:f1:29:57:cb:44:87:67:
3a:30:04:b3:1a:3c:a5:14:15:32:ae:b5:46:d2:d9:
48:37:d0:78:58:82:1c:81:e6:b8:d5:54:ca:c3:be:
14:b3:af:ec:b0:4d:bf:31:38:15:19:0e:70:c0:e3:
26:8a:0e:86:5a:18:32:e5:90:5b:53:69:80:86:de:
38:c1:c3:ea:08:fa:72:ca:34:e9:9f:fa:e2:bf:e6:
99:0d:32:2e:ec:7f:4a:84:43:7c:b9:da:ad:b1:0f:
b8:2b:22:1d:99:0d:53:7f:33:c2:d9:d8:f0:5d:7f:
17:ed:5e:81:e0:10:49:b0:c4:c9:c9:d4:53:c3:03:
da:16:b3:4a:83:7f:ec:44:fc:8e:d1:cf:41:16:09:
37:9f:44:0e:d1:41:fe:e7:3d:94:d8:a2:9c:07:f3:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:14:B6:58:2F:7A:B5:BD:C4:56:0F:FB:2E:D2:C0:0E:7C:2C:1B:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1a96fd3-54bc-37a5-bdf3-d27f98ad35d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:31a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:13:a2:e5:7f:91:e9:e9:45:e8:74:e7:ac:b4:99:3a:1c:9b:
73:b6:a9:73:52:0b:09:cf:1a:1e:c5:93:3d:79:c3:6b:3e:f1:
59:e3:19:11:34:b2:39:e0:77:e6:8b:25:78:f8:84:2f:a0:71:
bf:b3:cb:81:d5:94:86:78:f0:3d:24:a1:2c:1d:0f:85:90:90:
ef:6a:a2:f3:2c:45:fe:65:40:15:08:18:c4:86:c2:c9:40:1c:
79:42:63:70:6e:9c:84:db:e7:f1:fa:18:61:d9:b1:91:6d:ca:
b2:30:5f:66:b9:02:0c:8e:1c:d6:45:05:10:75:ee:cd:57:97:
03:ec:72:24:9c:81:cb:fe:a4:3a:f2:b9:3e:ac:18:69:54:8d:
75:13:94:3e:15:f4:8e:b3:66:77:dd:ad:38:03:98:d6:3e:db:
4f:95:7d:13:90:09:c7:05:2e:6e:26:06:28:cf:13:46:c4:2e:
ef:ae:c0:cc:79:1f:f5:ed:c2:a4:23:cf:82:6f:ad:72:90:12:
f0:2c:e5:b1:3f:7f:ac:7b:51:ef:d1:a2:ca:85:96:91:be:01:
ac:64:bd:57:a0:78:fe:2b:60:dd:da:30:33:b3:98:72:bb:26:
74:16:88:ae:78:a5:e9:e7:9a:34:0c:5f:a8:b2:64:b9:a6:c9:
a5:16:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:44:28 2025 by rpki-client