Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7d1268c-f00d-330a-92ea-1e27f0b949f4.roa
File: b7d1268c-f00d-330a-92ea-1e27f0b949f4.roa (raw, json)
Hash identifier: 38NposX6KpUlj+8gJuLN6Nz4ojoyv4QTs4V3wC6eQHg=
Subject key identifier: 94:3B:76:14:B2:F6:3C:13:2A:6D:B7:D8:33:34:35:C5:3C:1B:A5:9E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B81B58ED47936F319AB080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7d1268c-f00d-330a-92ea-1e27f0b949f4.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 3848
IP address blocks: 2001:4958:1521::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b8:1b:58:ed:47:93:6f:31:9a:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=617b36e8-cbca-4e24-9f88-f01349a889df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:44:83:c9:f9:d6:65:97:f6:2a:6b:80:c4:
91:cb:07:4a:d0:21:94:4e:50:29:5f:25:19:5b:b4:
7f:c0:27:6f:99:a1:c6:13:50:cc:4c:9a:e7:4d:2d:
35:9c:a3:35:d9:03:d7:a0:8e:81:82:59:f7:9d:7a:
45:db:ad:e2:b8:80:22:26:88:2e:34:04:de:a3:89:
72:55:bc:ed:ad:22:61:21:e8:6b:e5:8d:7c:b2:04:
34:3a:b7:d4:91:29:ca:fc:87:76:a5:e0:e6:3c:33:
69:8b:7f:48:1c:38:98:dd:6e:b7:35:71:42:06:12:
f2:88:5a:3a:a4:66:99:02:c1:29:24:c7:98:14:ce:
27:a0:42:a7:6d:a4:20:71:c7:2f:16:f8:6d:87:49:
de:9a:98:65:d6:2a:11:a4:6d:f0:7b:21:93:7e:4f:
64:fc:48:ee:3c:c8:49:81:61:ef:2c:6a:c7:22:6d:
35:27:09:be:5e:7b:1b:48:4f:2f:83:12:04:12:16:
f4:72:d5:11:8c:a3:5b:5b:dd:ad:14:f8:64:76:d5:
6e:a9:09:7b:3e:7f:98:1a:ab:47:c9:e4:eb:48:07:
11:f3:a6:95:42:82:54:7b:ae:ab:28:a4:9c:3d:c4:
d4:da:ae:50:3e:fe:b8:19:7b:07:b4:1e:77:77:ef:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3B:76:14:B2:F6:3C:13:2A:6D:B7:D8:33:34:35:C5:3C:1B:A5:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7d1268c-f00d-330a-92ea-1e27f0b949f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4958:1521::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:fd:7b:0f:8a:ec:b2:56:01:3c:b4:03:26:f0:ac:07:dc:7e:
a4:82:62:bd:5d:ba:a2:43:99:c9:7e:0b:8d:ee:b5:3b:d4:15:
67:b2:82:ca:f1:2d:ef:80:d7:b6:70:25:e9:88:f4:16:11:9f:
6d:7e:55:c6:d9:b7:0f:87:ef:ae:fa:e6:b0:25:2b:48:02:7e:
45:21:e3:e1:6d:26:4d:14:d9:cf:26:66:ad:99:aa:03:3e:a2:
68:ec:b7:a2:32:17:15:37:87:a0:e8:de:fc:5b:3f:1a:38:01:
d2:4c:b9:5c:7c:18:42:02:a9:95:62:dd:2b:ec:f9:35:fb:55:
58:21:69:2e:30:5e:5e:2c:8d:a1:bb:81:76:d2:34:5b:a9:d5:
11:13:63:79:41:96:d2:3e:f8:76:28:df:a9:c5:87:b2:af:31:
c9:f8:56:f4:60:f6:b7:5f:43:37:c5:a3:63:a3:6b:d7:5a:53:
d0:90:10:83:29:8f:86:90:a9:5b:be:6c:d8:43:b7:64:b4:94:
78:3e:65:56:2c:80:df:c1:75:3f:ff:a5:87:3e:f4:89:d8:b0:
59:b3:28:3c:18:48:34:bc:b0:b6:fe:25:f9:38:cc:59:fb:19:
6a:df:b1:81:3c:d0:bf:f0:99:ba:a1:65:38:31:b8:0e:1a:ca:
a1:28:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:55 2025 by rpki-client