Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/483c4fca-4294-360a-b0ca-8c60e1aaa98e.roa
File: 483c4fca-4294-360a-b0ca-8c60e1aaa98e.roa (raw, json)
Hash identifier: lNxamaZe1bzbgRGnrnUwlN3Ha3sQoQy48fksk9OGLd8=
Subject key identifier: 9B:97:4E:ED:7A:43:A2:1D:C3:41:E4:C8:3D:ED:EB:07:06:08:EB:78
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837D41F0743510912BCE8025D00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/483c4fca-4294-360a-b0ca-8c60e1aaa98e.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Mon 06 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 2001:569:8000::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:d4:1f:07:43:51:09:12:bc:e8:02:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 6 05:00:00 2023 GMT
Subject: CN=c5355ad0-b186-4ee9-88ae-e74323b73406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:94:b2:32:3b:08:aa:3c:63:24:f7:7a:b2:46:
a4:e0:ea:86:c8:98:23:fb:ce:c7:0d:fe:67:0a:b4:
7f:fa:a3:dc:60:e5:63:ff:3c:4c:20:c4:46:01:23:
11:8e:ab:2d:10:d6:81:65:ed:c5:aa:b2:01:28:f5:
9b:e5:79:81:0d:49:30:b8:ef:d2:b3:9c:4b:0c:68:
b2:70:0a:0d:34:79:e3:15:e2:02:6a:fe:d3:63:49:
13:b4:d4:74:7c:ee:1e:35:44:12:23:c7:6e:f0:be:
3c:0d:ce:77:f6:bc:17:2d:2f:1c:05:fc:29:b1:e6:
8d:5d:9b:3d:e8:65:05:98:cd:35:51:2b:64:a4:07:
a9:e1:ca:bd:02:c4:43:12:67:b1:02:e7:ea:a6:c2:
cd:dc:50:17:14:09:e0:5e:4a:f0:2c:be:cf:f1:bc:
6a:4a:ab:c6:08:50:c0:f0:7c:b1:a3:31:cb:3b:5e:
3c:d7:c1:7d:5b:87:47:25:14:26:2c:22:59:22:26:
11:58:38:1e:02:09:42:b4:67:1d:bc:b4:c5:47:2a:
e6:fe:31:f2:8a:fa:d5:c4:a4:3d:29:1d:67:d1:76:
2c:68:bc:88:a0:af:8e:eb:41:8d:a3:98:39:63:8c:
2c:da:60:52:75:c0:11:0b:64:1b:4b:d8:fd:30:70:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:97:4E:ED:7A:43:A2:1D:C3:41:E4:C8:3D:ED:EB:07:06:08:EB:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/483c4fca-4294-360a-b0ca-8c60e1aaa98e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:569:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:74:93:5c:01:c2:cc:6a:f1:b4:19:3b:47:9f:f8:c3:38:93:
6a:f0:b6:26:3c:9e:8d:42:af:fd:ee:dc:c2:35:fb:1d:84:48:
0f:d2:f2:82:c1:3f:c9:2d:5f:e9:dd:be:34:84:44:4f:e4:07:
fb:2e:7d:ca:f1:ca:f7:ae:79:84:3b:df:62:f4:b2:87:a2:c1:
f4:01:05:1b:16:27:0d:2f:28:b7:d5:e5:27:8d:6e:b7:a2:5b:
4b:b1:2c:5c:bc:8d:7a:5e:fa:da:60:ec:3a:7e:a0:92:93:e0:
11:2f:ab:3f:6c:3c:b9:06:0e:ec:79:48:3f:40:dd:38:1b:bf:
da:c9:69:51:e3:c4:e6:c9:98:d0:08:6c:d2:e8:5c:ad:25:43:
0a:a1:65:66:3e:1a:cd:b8:49:a6:63:f2:18:25:31:2f:a0:84:
e2:16:0e:d9:dc:d7:58:01:32:b7:1e:bf:e1:0b:b0:69:39:35:
f6:58:fa:25:b7:d9:ed:1e:10:1e:71:6f:45:6e:67:72:74:bd:
20:a0:8a:d7:5a:7e:ec:f5:b5:09:7f:de:90:16:39:6f:30:fe:
8c:55:6b:ee:c1:95:f7:be:56:cf:f3:93:25:cd:43:b9:7b:87:
c8:7d:5f:db:57:15:85:c4:01:0b:c4:6a:01:f8:03:70:39:9c:
b8:ab:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:54 2025 by rpki-client