Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/461bf57e-2716-3682-9dd2-e474c910ceda.roa
File: 461bf57e-2716-3682-9dd2-e474c910ceda.roa (raw, json)
Hash identifier: /M4MxHwV2YLGC+2POxQclK6R/iCFPNVC+EX+aeokknM=
Subject key identifier: 83:49:38:AB:16:EF:8E:34:DC:3C:28:3F:E2:2C:7C:CC:49:EE:03:90
Certificate issuer: /CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
Certificate serial: 010D0C9F43285842DC1F8C51F071909FB7651080
Authority key identifier: 55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/461bf57e-2716-3682-9dd2-e474c910ceda.roa
Signing time: Sat 12 Aug 2023 11:46:40 +0000
ROA not before: Sat 12 Aug 2023 11:46:40 +0000
ROA not after: Fri 10 Nov 2023 12:46:40 +0000
asID: 138997
IP address blocks: 2602:fada::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:dc:1f:8c:51:f0:71:90:9f:b7:65:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
Validity
Not Before: Aug 12 11:46:40 2023 GMT
Not After : Nov 10 12:46:40 2023 GMT
Subject: CN=7a64cb9c-740c-4faf-bb0b-00df983f28a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e0:ad:0f:52:ad:ea:d6:cc:ff:18:4f:7c:37:
6a:ed:b4:1c:76:1a:48:42:72:8c:f2:c0:b2:ed:6f:
12:e7:9d:dd:c8:5f:00:bd:06:40:df:43:de:72:82:
2e:16:4a:85:72:07:3f:72:1f:84:c4:b3:80:5e:82:
3c:57:b4:1d:fe:d5:ea:6e:7e:e7:15:6e:bf:3d:c1:
4e:22:cc:7f:6a:72:2d:32:f5:f3:1c:ab:e8:c9:2c:
e9:fa:a8:6c:50:0c:02:48:57:ea:32:93:7a:32:71:
76:f2:ad:df:27:0d:6f:c2:40:cf:28:c2:d3:82:75:
42:83:e1:8b:91:98:c7:a1:be:df:5d:8f:54:3f:ca:
8c:45:cd:08:3a:71:f7:0a:d5:bc:f9:ea:ca:2f:4b:
60:b5:09:82:47:26:d8:06:4a:e9:06:ca:ba:da:6e:
1c:dc:a6:53:0d:97:fa:81:de:48:a9:c0:32:c3:42:
2f:2a:42:56:5d:f4:48:40:2f:f2:64:0e:8a:b9:7c:
23:49:85:0f:70:0b:d1:59:f0:d4:df:2c:25:5f:29:
27:9e:42:58:c8:5b:d7:c9:bb:f9:34:08:b0:69:dd:
0e:48:e5:c3:7b:72:0c:c9:51:46:56:3b:9d:ef:34:
62:0b:3f:f0:23:8a:f3:b1:eb:f9:31:fb:51:33:0e:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:49:38:AB:16:EF:8E:34:DC:3C:28:3F:E2:2C:7C:CC:49:EE:03:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/461bf57e-2716-3682-9dd2-e474c910ceda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl
X509v3 Authority Key Identifier:
keyid:55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fada::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:61:bd:6d:4c:84:6b:f4:d6:4d:df:63:d7:5d:0b:b5:ed:c1:
24:51:80:35:1e:ea:07:15:25:27:5f:35:1b:89:de:d0:98:d5:
af:a4:27:40:4f:a3:af:2a:3f:d8:e7:4b:ef:d1:08:a8:30:f2:
6b:f0:52:f3:12:df:5f:60:d5:2d:45:89:26:b7:47:9b:1a:4c:
f8:bc:5b:81:e0:65:55:ac:13:13:62:02:02:51:38:34:ca:43:
d4:2a:86:0a:a1:ac:af:27:b5:bb:6a:8d:fe:f6:54:08:f6:ec:
56:a3:0e:de:a0:5a:eb:8c:0c:fd:5d:9b:9d:74:71:1c:59:fc:
72:b3:15:50:0d:af:47:c7:d3:09:31:ad:f9:2e:f1:c4:a7:27:
3a:79:7d:3b:45:b2:09:b5:b9:46:33:08:f8:bb:30:67:fa:49:
5c:55:46:d0:aa:2e:07:8a:da:19:94:bb:d2:ec:20:58:5e:43:
69:d2:fc:90:5b:d1:ac:80:b4:e1:f2:c4:81:6c:e7:7a:c0:45:
e6:2a:be:01:55:8b:d3:8d:14:fb:c5:11:dc:dc:02:72:7d:5a:
7e:75:58:71:aa:3b:41:81:e9:8e:d8:a9:de:96:d4:23:be:94:
bc:2e:e8:36:79:1c:7d:19:36:25:f2:63:0b:95:1d:83:82:3e:
fb:3d:eb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:24:51 2025 by rpki-client