Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9febcac6-273a-36ac-aad8-93bafc7d4207.roa
File: 9febcac6-273a-36ac-aad8-93bafc7d4207.roa (raw, json)
Hash identifier: 0q2qEj9WkNxcUuwJ+WIFiPBVPH7tYt4l/skE8s5a2Ps=
Subject key identifier: 39:1D:BE:25:AF:FD:E0:63:F2:57:86:D2:81:D6:FE:D3:EC:28:F5:14
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847055EDCC9FAC6AF80C581CD80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9febcac6-273a-36ac-aad8-93bafc7d4207.roa
Signing time: Wed 28 Aug 2024 01:30:08 +0000
ROA not before: Wed 28 Aug 2024 01:30:08 +0000
ROA not after: Tue 26 Nov 2024 02:30:08 +0000
asID: 52896
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:05:5e:dc:c9:fa:c6:af:80:c5:81:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 28 01:30:08 2024 GMT
Not After : Nov 26 02:30:08 2024 GMT
Subject: CN=94e83b60-5b07-4977-81da-d4dccc23e70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:16:71:65:00:db:5c:b9:ee:b9:b7:ba:0c:
10:2b:88:2f:62:e6:0a:60:0d:61:31:2c:d2:9f:13:
eb:1c:b2:10:39:36:2c:5a:fc:23:f1:4a:e5:ab:55:
06:7b:eb:08:35:ca:c9:15:67:04:aa:6e:32:e1:f4:
9a:8b:0b:19:9e:63:ee:32:47:05:59:14:eb:31:80:
1f:aa:55:d0:2d:7e:f7:b5:ec:49:a7:82:e3:87:2b:
f5:bb:bb:b0:56:20:7c:06:d9:e5:3d:d2:fc:4d:07:
70:55:80:26:e8:df:a5:79:30:85:02:56:46:78:7e:
09:8c:c8:e1:e8:2a:74:97:f7:a4:03:54:16:94:5d:
89:a8:7a:a0:50:a3:d0:81:55:a2:d3:e8:a5:5c:1c:
f9:16:c8:cb:ef:0f:68:05:75:07:ae:d2:aa:b3:f5:
e2:4c:5c:ab:95:59:57:a8:e6:64:ad:ba:d6:62:e7:
6d:c0:39:34:e8:97:4f:60:37:28:8a:16:22:09:08:
62:fb:c2:22:10:e3:b7:e5:62:0b:19:29:1f:c8:80:
0b:17:5f:b6:80:1b:12:21:01:c8:a4:eb:df:cb:46:
7f:86:7e:7e:7e:23:0a:72:bc:a2:e6:ad:5e:d2:5a:
b6:93:c1:f6:7f:85:d7:97:9b:0c:5d:18:d8:5a:be:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:BE:25:AF:FD:E0:63:F2:57:86:D2:81:D6:FE:D3:EC:28:F5:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9febcac6-273a-36ac-aad8-93bafc7d4207.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:c0:7e:d5:04:30:d1:3d:7e:32:c0:2e:50:65:0a:fc:91:20:
cd:8a:92:67:7c:f6:18:ce:54:02:ba:59:f5:52:5d:42:9e:27:
01:81:88:d8:46:39:67:16:51:d6:e6:e9:56:09:0d:60:ab:79:
49:38:a4:92:8c:92:ad:8b:50:77:e1:c9:17:44:0a:0a:a0:3a:
11:ef:68:6c:8e:ef:59:da:67:e5:ed:80:16:a8:7e:a9:fb:c2:
f8:a6:c0:8d:f0:95:d4:16:4e:3a:98:d0:4f:fd:ca:be:f1:ad:
1d:4b:e0:aa:56:64:9c:fb:02:4e:fa:3d:f5:3d:1e:dc:12:fb:
12:f7:39:e7:f4:8d:a1:fc:dc:b2:c2:be:31:17:9a:5c:88:33:
b5:31:0d:c4:1e:12:1c:37:81:12:27:be:86:ff:a6:ab:45:1a:
8b:83:3f:2e:09:30:81:07:66:f1:69:58:7c:62:d3:09:3d:a6:
9a:ef:46:58:46:27:b1:f8:7f:59:39:3f:c3:dd:b4:a3:42:44:
73:c2:d2:74:63:0f:ea:e7:02:e8:d6:5d:44:01:62:af:7e:46:
be:bf:fb:76:d2:38:d7:43:66:eb:5e:75:5c:fb:79:e1:83:55:
df:d2:b6:d5:c2:06:d6:3f:1b:5c:1c:09:ac:b4:a6:f7:c9:07:
99:8c:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:08:02 2025 by rpki-client