Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc3832ba-fb4a-3627-a54f-adb70d0146d5.roa
File: cc3832ba-fb4a-3627-a54f-adb70d0146d5.roa (raw, json)
Hash identifier: Fo+DX5KcoH3aw3nTYq4ZYDwO52Orq2XWfqF8WIzDtMk=
Subject key identifier: 91:62:F4:64:E0:99:90:32:94:A5:2B:A1:3C:BA:10:14:71:F3:53:87
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846E3DEB34009841463D45D9E20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc3832ba-fb4a-3627-a54f-adb70d0146d5.roa
Signing time: Fri 16 Aug 2024 01:30:13 +0000
ROA not before: Fri 16 Aug 2024 01:30:13 +0000
ROA not after: Thu 14 Nov 2024 02:30:13 +0000
asID: 50576
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e3:de:b3:40:09:84:14:63:d4:5d:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 16 01:30:13 2024 GMT
Not After : Nov 14 02:30:13 2024 GMT
Subject: CN=53daed26-0815-4a90-9292-f3fd564b2e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a3:75:b1:0e:51:12:4b:ab:36:2b:95:a6:14:
a8:32:ce:48:f1:51:07:fb:76:84:40:b8:f0:b7:44:
46:e7:f7:30:60:82:36:47:2c:a4:60:0c:a9:45:ac:
1c:b9:c8:d1:0f:65:ef:02:e9:d2:32:80:52:80:bc:
b6:e5:cd:cf:73:de:bb:28:33:62:3e:46:37:f8:7f:
0d:78:81:e7:09:0d:e9:e0:f7:46:ed:bf:c1:da:c4:
fa:14:76:c7:3c:7f:50:3c:9b:21:69:23:6c:02:d4:
4b:0e:90:a0:bc:15:1f:9a:7e:44:af:18:0f:09:be:
94:e9:8e:49:78:9e:c0:f7:35:d4:66:79:e5:c8:60:
b6:f8:12:0a:e1:10:3f:3d:53:b7:2a:8a:73:88:f1:
53:7c:1d:b3:21:95:df:11:73:c2:ae:7b:61:d7:1c:
13:6f:e5:c4:fc:e4:f9:e3:db:d7:ae:18:73:d0:81:
37:d9:ac:b8:23:ef:8f:99:47:c6:d2:74:4e:37:01:
4f:99:c0:c1:f0:c9:3f:e8:6e:ef:ad:4b:0e:f3:f1:
2e:1b:c4:68:b8:83:0c:dd:9d:05:80:61:94:74:94:
68:e7:49:a4:8d:3e:e9:b7:22:47:c2:1e:20:e0:a3:
15:63:23:d0:03:5c:b3:f9:22:a2:81:98:72:f6:01:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:62:F4:64:E0:99:90:32:94:A5:2B:A1:3C:BA:10:14:71:F3:53:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc3832ba-fb4a-3627-a54f-adb70d0146d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:8c:96:aa:6f:0d:4c:97:a7:b7:5d:62:02:7c:44:81:f3:0f:
74:8f:8d:bd:c0:44:24:a5:39:90:f3:6e:6b:db:19:22:bb:a1:
5a:87:df:28:46:9b:14:d3:f4:21:b7:8e:99:ef:6d:96:41:e7:
6b:c9:34:85:ff:22:b7:9d:95:ad:b0:51:01:49:9f:5f:c7:ec:
5b:de:3f:a0:78:9f:c1:d0:63:81:70:e2:82:77:a3:98:2f:25:
89:0d:f5:f5:a1:c5:ec:c3:da:e9:4d:0b:ad:a1:ab:e4:04:d3:
74:ee:b9:57:05:1e:ab:df:60:09:1e:0e:23:4d:84:e5:01:84:
30:63:00:e5:c9:07:36:34:0f:9f:6e:cf:21:0d:2a:d7:c4:f5:
8a:58:e6:ff:44:67:3c:38:65:29:94:65:75:2f:b4:82:1d:d1:
91:05:3b:aa:75:1a:6d:b8:ed:80:6d:5c:32:97:0a:e7:01:2b:
b9:7b:d5:f5:d1:46:4a:e7:5a:c5:71:23:df:4d:a7:04:f5:20:
18:19:ef:53:43:8f:c4:a5:1d:4d:73:9a:89:ec:ea:74:72:63:
ff:5a:7c:8d:66:4b:7a:e2:73:23:b9:75:36:56:6e:30:7c:51:
db:e2:7e:fc:d9:73:af:3e:6b:6c:ac:75:8f:4d:05:17:e1:31:
3a:08:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:31:59 2025 by rpki-client