Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/48bc5f12-2e00-3c35-992a-1d932ad79e10.roa
File: 48bc5f12-2e00-3c35-992a-1d932ad79e10.roa (raw, json)
Hash identifier: OwFVwE7yAGyzoMFh+UY6XVgH3pTF+2MM/426fG2FTzM=
Subject key identifier: 93:A1:81:12:CD:C7:D0:D9:6E:9F:AD:1C:41:62:7F:46:D9:1A:6F:E8
Certificate issuer: /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial: 010D0C9F43285847A5D6A2860E4FED5068F85940
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/48bc5f12-2e00-3c35-992a-1d932ad79e10.roa
Signing time: Thu 24 Oct 2024 13:00:42 +0000
ROA not before: Thu 24 Oct 2024 13:00:42 +0000
ROA not after: Wed 22 Jan 2025 14:00:42 +0000
asID: 14618
IP address blocks: 2601:9200::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a5:d6:a2:86:0e:4f:ed:50:68:f8:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
Validity
Not Before: Oct 24 13:00:42 2024 GMT
Not After : Jan 22 14:00:42 2025 GMT
Subject: CN=ce9648bc-c66a-48d3-931e-ebed60ec39be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:a7:cb:73:de:4f:87:61:12:c2:a5:1c:4e:
30:00:71:3f:ff:87:39:f2:cc:3f:f6:e7:e7:54:63:
06:a1:16:59:05:82:19:91:07:8f:12:7f:7f:c0:3d:
5f:29:81:92:54:36:7f:8f:89:00:ad:d9:a3:27:92:
87:22:1f:03:1d:b2:ed:f1:7c:2b:c7:57:89:eb:1d:
2c:0e:33:5b:37:24:29:37:2a:3e:3b:21:29:27:40:
b1:c7:ea:5a:ff:5d:4e:2a:a3:c3:a5:81:f3:17:7b:
61:f9:f9:27:27:84:20:70:3a:ef:32:17:0e:09:97:
a9:4a:a8:ca:87:83:6d:cc:01:6e:19:fa:ea:ed:65:
61:63:d5:5c:86:06:aa:ab:bd:ec:7f:d4:b1:5d:b7:
af:43:7f:77:1a:eb:2d:2e:d3:6e:74:13:3b:06:d2:
16:d6:76:40:b3:3f:de:6f:b9:ae:d5:a2:65:5b:fd:
1a:07:47:bb:ce:a2:e6:2e:53:84:d3:ac:80:c1:06:
a7:a6:62:41:4a:83:88:fe:c4:c1:d7:67:a1:00:af:
37:da:7a:ed:b1:a7:31:f5:d3:b9:1c:8c:a8:f3:a3:
0b:0c:dc:3d:4a:9c:05:a7:01:73:16:2c:61:0b:52:
74:bf:f5:80:84:3a:a2:e0:07:be:2c:34:0f:a3:9a:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A1:81:12:CD:C7:D0:D9:6E:9F:AD:1C:41:62:7F:46:D9:1A:6F:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/48bc5f12-2e00-3c35-992a-1d932ad79e10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
X509v3 Authority Key Identifier:
keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:9200::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:fd:6d:1f:c4:e7:24:a8:33:9d:4e:6e:38:58:30:12:46:4d:
0e:03:ef:cf:9a:f7:16:5d:23:9f:86:38:82:91:cf:b5:c6:7b:
fd:0f:ad:98:f2:03:eb:9b:14:e1:4b:05:41:c1:ee:6f:22:73:
a2:ec:c4:d6:30:1d:12:2f:fe:a6:43:5a:b8:72:ba:1a:69:4d:
06:7d:84:37:ee:bb:8a:56:07:22:23:88:06:ba:89:f8:02:85:
c0:0b:bb:67:b6:11:9b:db:24:b6:bf:fc:2f:5d:2c:e0:02:19:
bd:74:5f:f4:fc:a7:cd:89:78:fc:89:60:69:3b:12:6d:57:65:
1a:88:fa:7d:86:03:9e:25:9d:24:e7:b1:bf:87:04:95:4b:d6:
f2:95:90:85:13:9e:dc:22:8a:66:c6:f3:46:b9:d8:78:47:82:
4a:11:33:3d:eb:dc:44:6a:f4:92:ad:db:72:20:08:a8:d0:7f:
0f:e5:9d:09:d4:83:03:5f:09:e7:68:a2:bd:f4:4a:ad:35:2d:
16:84:13:77:ee:75:0e:c6:08:b2:8b:94:1a:c7:ba:90:a5:59:
e4:cf:f2:98:e8:c7:28:30:7b:90:48:7d:e1:e8:11:00:55:b7:
dd:ae:5d:c9:56:a5:f1:33:30:12:e1:b3:f2:21:85:cb:85:69:
7c:c7:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:21 2025 by rpki-client