Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d35e18fe-18d1-35c7-b4c5-3e34d29078fc.roa
File: d35e18fe-18d1-35c7-b4c5-3e34d29078fc.roa (raw, json)
Hash identifier: i1a7sa6unsDSnhOqmgbq+rpCy9khVn8h1izpH8lUQ/E=
Subject key identifier: A4:A9:9D:8D:93:0F:93:68:BC:43:B9:2B:F2:76:6F:46:F5:C7:58:62
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285844C4FEAF7B80BE63C68A571880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d35e18fe-18d1-35c7-b4c5-3e34d29078fc.roa
Signing time: Sat 03 Feb 2024 14:30:44 +0000
ROA not before: Sat 03 Feb 2024 14:30:44 +0000
ROA not after: Fri 03 May 2024 13:30:44 +0000
asID: 400521
IP address blocks: 2001:470:287::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:c4:fe:af:7b:80:be:63:c6:8a:57:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 3 14:30:44 2024 GMT
Not After : May 3 13:30:44 2024 GMT
Subject: CN=b767f481-0110-4465-9ee4-4506e7cc1529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:a5:56:a4:16:30:32:b0:33:89:c5:52:27:
d0:67:94:ce:8f:b6:a1:e1:89:54:78:7b:94:4b:9d:
55:78:df:da:a9:52:3b:e4:80:b2:f7:4c:db:8b:85:
6e:8a:3d:84:f7:f5:63:59:9f:ab:a6:ba:08:6a:ff:
8d:00:a7:e0:c3:8b:91:36:0f:cd:87:86:04:70:fa:
53:cd:3c:86:0e:a6:90:be:ee:fb:ca:f2:fa:8e:2c:
6c:e3:96:49:e0:f4:26:77:9b:cc:d7:94:c6:b8:10:
03:c9:b3:e8:a8:ae:45:89:d1:f3:20:13:e7:07:31:
fc:11:d6:87:6d:eb:53:89:26:f7:1e:c8:10:8e:7f:
7a:6b:de:36:0c:0a:0b:ad:8f:0f:70:4f:86:38:49:
5f:ab:1a:f8:d6:99:0c:ea:22:12:8c:4b:a2:a9:c7:
2a:07:7d:76:d1:6c:6a:44:36:e5:63:60:3c:c5:b3:
02:24:95:36:c3:60:f7:75:bf:04:75:dd:fd:92:47:
26:67:b3:a0:8e:9b:48:92:35:2c:96:2e:df:f6:95:
c7:5f:38:c2:17:ce:50:6e:f0:b4:0b:d7:6d:23:40:
8a:14:78:3d:a5:0f:18:df:61:73:54:e9:49:44:fa:
bb:bb:92:d1:99:47:6f:c1:20:bc:a0:14:c3:7d:02:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A9:9D:8D:93:0F:93:68:BC:43:B9:2B:F2:76:6F:46:F5:C7:58:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d35e18fe-18d1-35c7-b4c5-3e34d29078fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:287::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:72:65:a1:ff:38:b7:13:73:31:af:8d:26:f9:17:f7:98:42:
f8:52:31:c3:a8:70:be:47:55:c5:82:ff:6f:e7:9d:95:ea:8f:
3e:2b:af:cf:33:8e:1b:c4:8a:e9:64:93:0f:83:63:1a:52:42:
19:00:de:cd:bc:c2:c1:67:c2:72:a6:a7:97:0e:46:f5:00:cd:
bf:b5:3c:2e:1c:a2:6b:3e:5f:0b:23:87:f6:08:4e:d8:6e:f2:
f0:02:e0:1b:d8:62:1d:57:41:b3:bc:e6:fc:98:28:ce:35:fc:
98:13:cb:02:11:93:4e:53:fb:47:59:02:38:03:ad:04:14:43:
5b:ed:67:45:f0:61:24:e0:31:90:77:ba:e8:7f:94:be:dc:78:
df:20:f7:5f:f8:08:0f:d7:ae:41:18:07:72:94:34:84:0e:78:
f3:ea:18:33:e6:cd:9e:6a:e6:8b:af:95:ca:ca:1e:f6:b5:a8:
07:7f:b9:26:70:f0:4f:93:89:14:cc:d2:19:16:21:c0:8d:04:
64:bb:68:11:09:04:d4:8e:1b:0d:21:8f:c6:c2:af:15:d0:c2:
0e:6b:e5:e9:c3:39:1d:a8:a5:93:71:15:aa:47:c9:6c:cd:ee:
34:f6:03:2f:a6:bb:b7:d9:5c:bf:dd:a8:ad:2a:20:c0:5c:92:
aa:d3:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:31:53 2025 by rpki-client