Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e3bce59a-b9fd-37c1-b6dc-3ed62fdc981b.roa
File: e3bce59a-b9fd-37c1-b6dc-3ed62fdc981b.roa (raw, json)
Hash identifier: VY+S/aoVv5QMQyJ5Y3qtKBdK+0wYpYhMEf2yyHdfT+U=
Subject key identifier: 34:A5:32:D9:C2:4F:27:EA:03:A2:6C:BA:BA:BE:9F:F3:AF:2D:90:21
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF76410CF2CD3F73D1F9F000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e3bce59a-b9fd-37c1-b6dc-3ed62fdc981b.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 855
IP address blocks: 2001:4c0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:76:41:0c:f2:cd:3f:73:d1:f9:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=b6939f6d-4d8f-4048-979c-4acf10df1747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:c1:ee:1d:51:70:e0:a4:06:76:4c:39:09:
c6:00:28:a3:3e:83:96:43:a0:b0:35:3b:1c:c6:e4:
43:66:be:bf:23:66:54:63:cf:fb:1c:89:c1:4a:1e:
19:25:f4:f7:cb:06:40:94:b9:c3:e5:18:a3:aa:78:
86:78:50:ef:4a:7f:12:7f:11:ad:d9:a0:a6:07:b7:
7a:ba:17:a3:c8:71:a4:94:ab:fa:e4:25:cc:fc:af:
85:0e:12:c6:dc:98:b4:0f:57:fd:eb:98:40:f7:36:
33:11:01:e0:38:bd:e2:f1:c2:0d:11:a2:79:9d:d7:
53:d6:73:89:a5:5a:80:87:c7:39:7e:4a:d4:fa:69:
7b:02:78:a5:bd:a3:a0:4b:ce:03:46:cc:1f:45:49:
97:15:91:2a:de:2c:58:3a:db:c9:27:d9:fa:23:86:
a2:6b:03:56:6d:5c:b6:d1:58:fc:dd:1f:ef:4c:86:
e8:d9:81:d5:51:c6:8a:07:6b:19:7b:aa:72:a1:a1:
76:dc:0e:49:13:b8:19:6f:83:d3:dc:bc:f9:06:52:
24:a4:a1:99:71:ca:36:c5:ab:49:4e:24:63:5f:10:
d6:48:0f:94:eb:47:6c:56:eb:f4:ec:99:7a:b3:bf:
8c:5f:78:c8:a9:ca:7a:08:36:9a:a0:8e:17:88:1b:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A5:32:D9:C2:4F:27:EA:03:A2:6C:BA:BA:BE:9F:F3:AF:2D:90:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e3bce59a-b9fd-37c1-b6dc-3ed62fdc981b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4c0:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:ae:82:22:52:61:c6:f2:91:43:93:bd:38:25:4a:ea:be:c7:
5d:f0:1b:dc:7c:c9:ec:37:90:bc:44:29:c2:43:41:9a:b3:90:
91:cd:b6:12:4a:d5:5c:5e:38:d9:02:31:48:54:c6:a1:08:89:
0f:26:9a:82:92:fe:e3:55:ec:44:36:36:e7:a2:af:d0:f6:ea:
06:af:64:45:9d:c6:9f:50:0f:73:eb:29:fc:b8:91:e6:f8:6f:
c6:b5:f0:cf:a4:32:dc:1d:5c:f3:72:09:f8:ad:e4:54:9c:4e:
8e:b4:e2:c0:69:8a:2f:dd:6c:2c:53:46:b1:73:bf:77:30:95:
1a:7e:80:4f:46:f7:f9:f6:fb:7e:94:2b:e5:50:ae:06:71:6a:
bb:31:ba:cf:c6:fa:9a:a0:86:95:d3:35:2f:39:ee:cb:9f:4c:
1e:48:f1:ca:09:ef:89:d1:d7:17:26:48:57:33:f0:28:45:ec:
25:09:b4:34:80:a4:9d:19:6b:19:77:f7:48:a9:8b:73:1f:81:
e5:a0:4a:52:5f:30:31:86:55:d4:71:da:5b:0c:11:7d:0f:e4:
32:53:43:84:53:2a:8a:19:1f:0e:4e:08:10:9f:94:57:e0:9d:
2b:81:de:e5:a6:5d:9e:2a:11:48:f5:df:35:ee:98:a4:0e:c9:
cc:40:21:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:22 2025 by rpki-client