Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a08cfc19-18ad-3adc-9787-87236bf1965a.roa
File: a08cfc19-18ad-3adc-9787-87236bf1965a.roa (raw, json)
Hash identifier: 78bOj2umkGfW0igCHHyAvZKN7oYKVOONQ9fQT+bVxXA=
Subject key identifier: 57:A6:8E:8E:19:3D:6D:5B:A0:8C:CD:B0:11:58:E1:89:FB:55:B8:68
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845C5A8F9491EE759DB67DAEF80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a08cfc19-18ad-3adc-9787-87236bf1965a.roa
Signing time: Sun 05 May 2024 13:00:34 +0000
ROA not before: Sun 05 May 2024 13:00:34 +0000
ROA not after: Sat 03 Aug 2024 13:00:34 +0000
asID: 15108
IP address blocks: 2001:470:1a4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:c5:a8:f9:49:1e:e7:59:db:67:da:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 5 13:00:34 2024 GMT
Not After : Aug 3 13:00:34 2024 GMT
Subject: CN=a2b7cc68-8d61-40b7-af28-100839a6b052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f4:e7:0a:aa:20:65:e9:11:e2:26:1d:b5:8c:
6c:29:60:b9:74:97:2a:07:92:6b:31:c1:3a:21:2c:
7a:b0:3d:29:4a:07:ea:5f:f4:c7:45:a7:b3:46:50:
a5:d9:06:d1:4d:2d:59:72:36:60:28:de:94:d2:36:
a4:22:61:49:70:45:38:b0:d1:56:22:7a:08:96:8b:
58:df:71:50:b4:64:06:a0:19:9d:99:ba:74:f6:e3:
8a:7e:40:b9:28:d8:c6:16:fa:3f:89:53:2b:60:a6:
e1:59:32:af:0d:cf:be:7a:c1:5d:6b:b7:7d:72:90:
3c:0d:44:18:0d:ec:21:bb:5f:b6:29:a6:1f:6f:04:
97:ff:2f:18:3a:bd:80:c7:eb:9a:61:14:a2:a9:f3:
f4:9e:a3:21:f5:ee:33:5b:00:10:28:77:b9:ad:e4:
39:2e:37:33:7b:d9:40:1e:53:0c:af:75:36:ab:f9:
ce:46:aa:ab:3b:d3:f7:9d:0e:c1:17:32:a2:35:d5:
a7:90:29:a3:db:b8:04:c0:80:8c:6b:c3:34:4f:19:
7d:47:a2:59:7c:2d:2c:f3:a3:61:12:c2:cd:4a:f6:
0e:b1:7a:24:3e:4d:05:b1:08:25:09:fd:a9:c3:11:
0b:2a:4f:d8:50:a9:69:2d:5f:a4:5b:5c:90:ef:c2:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:8E:8E:19:3D:6D:5B:A0:8C:CD:B0:11:58:E1:89:FB:55:B8:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a08cfc19-18ad-3adc-9787-87236bf1965a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1a4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:c3:35:e6:5c:85:d7:39:a0:36:d9:1f:6a:b8:b0:2b:6b:e0:
5c:bb:1b:82:12:31:0e:89:ff:30:1f:eb:95:64:11:e8:0f:32:
40:e4:5c:fb:af:7a:51:71:a6:a5:b0:d8:47:87:5e:1a:f6:76:
b9:ed:0d:9f:ad:fe:77:09:10:d4:56:09:d5:e5:13:06:d8:0f:
bf:dd:78:35:e5:63:3c:36:92:86:9e:ba:6b:7f:4b:2b:3b:3d:
60:cc:1a:a0:22:4a:98:6b:20:6d:00:b2:81:e1:12:d7:e6:cd:
3e:a3:fb:59:54:c4:5a:7a:35:e5:28:28:86:28:63:13:e9:ae:
b5:35:ab:4e:05:e0:95:3b:33:00:b7:61:d4:03:66:fa:4d:6c:
f3:15:e1:5f:1d:e3:ce:88:99:77:e6:b1:30:62:58:b8:5b:6e:
70:db:de:63:46:0d:a6:58:d2:d1:88:93:7c:db:57:50:aa:74:
e8:06:b9:d7:de:ad:90:08:54:f9:68:d2:68:50:b9:1f:3c:80:
a4:34:8e:64:c4:68:f6:ac:7e:fa:30:b4:25:c4:ed:1f:6b:47:
92:01:c0:99:d2:f7:c2:03:33:41:ae:71:0c:6b:c2:9f:e6:69:
9c:86:49:59:5c:61:68:59:11:51:cf:b3:2b:46:7a:9a:45:4d:
2f:1c:09:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:15:14 2025 by rpki-client