Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03e168d4-e1e5-36fc-9fbc-b11cda868683.roa
File: 03e168d4-e1e5-36fc-9fbc-b11cda868683.roa (raw, json)
Hash identifier: pJ+ZC7y+U/1r2Xnsg1xeIQGpc4WkMofGDEUVvy0wwfQ=
Subject key identifier: 5B:1E:A7:A3:04:BD:9C:4C:48:30:CA:18:F0:27:14:E6:34:18:E3:9F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845D7DD6413DB041325B989BDA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03e168d4-e1e5-36fc-9fbc-b11cda868683.roa
Signing time: Sun 12 May 2024 01:30:57 +0000
ROA not before: Sun 12 May 2024 01:30:57 +0000
ROA not after: Sat 10 Aug 2024 01:30:57 +0000
asID: 16324
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:d7:dd:64:13:db:04:13:25:b9:89:bd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 12 01:30:57 2024 GMT
Not After : Aug 10 01:30:57 2024 GMT
Subject: CN=13f03d68-953d-4c4e-8146-b01478694352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bf:86:16:da:22:3a:78:83:2a:ea:96:e4:e7:
f2:5b:8d:19:49:26:9a:f7:ba:6a:5b:13:e0:a9:c1:
55:1d:90:41:1b:8b:80:5b:48:0f:71:b4:35:45:23:
da:02:ce:ae:80:d4:24:7d:82:cc:64:3a:7e:6c:77:
80:ec:1d:e2:11:19:7c:f3:60:4a:ec:a1:d0:8a:5f:
b4:13:f0:63:45:09:48:08:55:bb:b0:1e:cc:c2:0c:
be:96:b5:3d:ab:05:7a:f9:27:14:ff:b0:96:ff:4a:
dd:69:be:e5:1b:bb:02:40:1a:6f:d5:56:88:3d:7a:
a4:81:9c:b9:73:f4:34:e7:bf:30:c2:35:c1:84:bb:
db:ca:d1:e7:7b:83:5a:82:fa:78:c5:7d:74:14:bb:
30:4a:5e:7c:30:13:e8:6b:96:20:6b:04:16:a5:94:
ac:1c:55:e4:26:2b:7a:c5:23:e5:5a:85:a5:8d:47:
40:bf:50:f3:98:16:a0:e0:09:e2:f6:d1:cd:72:af:
68:bf:d7:98:f1:75:d5:d4:23:9d:48:86:97:14:a3:
f2:87:ab:9b:2f:0f:87:5c:8a:27:2a:b4:bd:00:f3:
45:4c:9b:87:d8:9c:b8:27:49:08:42:9e:ab:60:42:
8b:99:d0:41:f0:10:59:f0:3f:31:ff:e4:6f:9b:21:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1E:A7:A3:04:BD:9C:4C:48:30:CA:18:F0:27:14:E6:34:18:E3:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03e168d4-e1e5-36fc-9fbc-b11cda868683.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:90:1e:99:6f:f8:e7:e7:20:e5:91:d0:06:5a:f6:ef:bf:91:
75:46:9a:a8:4a:3a:44:50:40:18:9f:ee:ab:1b:01:5e:40:c3:
d6:01:b8:7f:7d:8e:eb:8d:56:44:dd:1a:3f:45:99:8f:8e:df:
f4:26:96:49:5c:17:87:2c:ce:a0:da:70:b9:f4:f1:f3:1c:84:
c0:09:2f:36:aa:a0:0f:6d:b7:a3:69:8e:3d:53:68:67:6a:cf:
7e:16:ba:b0:76:99:6d:87:c3:f1:f0:84:29:2a:de:83:8d:37:
1a:25:fc:a1:5c:22:ac:e3:88:48:2d:92:0e:5e:8e:5d:38:98:
1d:bc:aa:f9:83:c3:41:36:b0:43:04:d8:47:4a:d9:ec:61:40:
e7:f3:bb:f8:41:b5:ed:f9:35:85:6f:68:53:32:40:95:76:82:
b6:e3:54:e9:08:40:4e:b2:de:e6:8a:a9:ee:32:e5:4b:e0:44:
c9:09:c6:4e:2f:06:38:5f:45:06:1c:fd:41:90:ac:b4:f2:72:
8f:96:90:b4:c6:c7:57:44:0e:51:7e:ec:df:34:5b:de:b7:4e:
b1:ac:8e:98:18:c4:9c:7a:56:8c:bf:6a:23:35:33:a7:32:1b:
bd:cc:0d:e7:dd:07:e9:36:b0:4e:f3:b0:8f:09:6d:b4:7d:2c:
3c:23:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:37:22 2025 by rpki-client