Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/78fe7854-4d13-309b-8cb0-8bc4208f6ce2.roa
File: 78fe7854-4d13-309b-8cb0-8bc4208f6ce2.roa (raw, json)
Hash identifier: AfMl0DzcTS+apZZRPOMTjeWRItMrzm/Lywsjw8aURRs=
Subject key identifier: E4:19:20:70:EA:09:79:D4:E0:FF:80:64:11:C8:BC:96:21:BC:3A:C1
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837D4167D6F666DE7789DBAFC80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/78fe7854-4d13-309b-8cb0-8bc4208f6ce2.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Mon 06 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 2001:568:203::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:d4:16:7d:6f:66:6d:e7:78:9d:ba:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 6 05:00:00 2023 GMT
Subject: CN=a00976b9-0bd9-4d6d-b6f3-d8fc70c7a727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:da:3b:7e:c3:7b:8a:2f:cb:08:44:82:ca:
2b:72:9b:3d:3e:06:c7:2d:a7:9b:c5:bc:6d:75:d8:
3f:b9:cb:e8:2c:05:38:c3:c8:85:8a:a6:df:5c:70:
5d:a4:1d:a0:22:10:25:7c:b5:b4:aa:da:62:15:32:
b5:b8:0d:62:26:93:d6:9e:82:0b:b0:97:4f:35:3f:
79:c0:13:8a:da:95:b3:a5:e8:f6:2b:1d:bb:5b:88:
a6:a4:3f:7a:78:ec:84:ff:de:97:04:e2:dc:23:d5:
1e:f0:59:74:dd:ba:0b:f4:40:17:56:ae:8e:95:12:
86:78:34:70:52:5a:15:04:39:fe:e2:ac:55:5b:cf:
72:26:1d:e5:01:b6:48:fa:bb:dd:6b:49:76:8b:d5:
e4:c9:fa:55:11:d8:05:08:e6:4d:3f:51:79:ec:eb:
69:92:9f:e1:bf:4a:2d:2b:e5:3a:94:21:5b:99:39:
42:c1:eb:28:9b:4f:1d:59:e5:df:75:3e:bf:43:90:
9a:74:a8:89:2d:ce:02:e5:86:8e:92:78:0e:8e:a5:
01:0b:8f:d6:d3:3a:d1:07:43:1e:c5:d3:88:94:6c:
54:d9:52:a0:06:cd:c6:63:c1:5d:8c:b7:cf:f9:44:
cb:9f:bc:74:f5:83:7f:f1:da:9f:51:ee:ef:00:14:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:19:20:70:EA:09:79:D4:E0:FF:80:64:11:C8:BC:96:21:BC:3A:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/78fe7854-4d13-309b-8cb0-8bc4208f6ce2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:568:203::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:50:62:e7:72:f5:9a:a8:4c:6b:40:50:b5:7b:40:61:d9:bc:
04:e7:33:2c:34:4f:6a:03:4a:8b:ba:b2:f6:f0:4c:c2:de:cc:
d1:b6:ab:60:30:1c:89:ad:8c:3a:de:39:97:05:18:27:c1:00:
af:fa:e5:fc:9c:a2:f6:40:bd:d5:68:1d:67:db:c1:f6:26:43:
2f:23:a2:90:3d:f7:02:0e:ba:76:c1:7b:46:0e:e9:a2:07:9a:
e8:0b:11:32:ee:91:11:27:65:6d:db:e8:05:9e:f1:c4:c2:b3:
b1:78:23:9f:89:61:b9:ad:b8:cf:69:d0:c5:aa:d5:15:f9:08:
4f:cd:95:7e:3d:35:f8:76:fb:8e:d8:a7:ef:c4:d0:e1:73:08:
33:4b:66:d8:52:3c:a1:16:e1:63:f9:99:f0:4a:98:1c:e7:06:
cb:9d:cc:be:e7:67:a2:77:ba:c3:d7:24:2e:38:dc:dd:c6:2e:
59:ad:89:72:14:16:4e:4b:6b:c3:0b:54:88:79:5a:f1:57:27:
a5:0b:9b:14:6e:f3:33:93:af:5f:2c:a9:51:6c:d3:11:a6:67:
a0:81:fe:10:ed:44:32:3d:bc:91:72:77:27:75:6e:7e:7d:e4:
63:04:c6:8e:95:f9:c3:f3:5f:8d:6c:85:53:60:7b:24:29:e5:
93:07:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:13 2025 by rpki-client