Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/17a52a82-f3b9-3996-8f68-5b69658e0fb5.roa
File: 17a52a82-f3b9-3996-8f68-5b69658e0fb5.roa (raw, json)
Hash identifier: q6Kzs334/B8q/e5e4ZWs8nhz/xRBtG5oz2hWZIAD/DU=
Subject key identifier: 33:AD:15:28:7C:46:9B:8C:CF:94:47:1B:2A:36:EF:AC:9A:71:F2:3B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846434A52B9115644230C51B200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/17a52a82-f3b9-3996-8f68-5b69658e0fb5.roa
Signing time: Wed 19 Jun 2024 13:00:34 +0000
ROA not before: Wed 19 Jun 2024 13:00:34 +0000
ROA not after: Tue 17 Sep 2024 13:00:34 +0000
asID: 8851
IP address blocks: 2001:470:161::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:43:4a:52:b9:11:56:44:23:0c:51:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 19 13:00:34 2024 GMT
Not After : Sep 17 13:00:34 2024 GMT
Subject: CN=9810d4e0-5025-4554-a572-ccfaefcfe4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:00:03:09:70:24:d5:e0:b6:25:8c:ac:96:c5:
97:52:b5:59:8e:0d:ea:dc:a8:d8:2f:fe:8a:ce:0a:
eb:a5:26:fe:5f:e7:4a:a6:c0:38:4c:fb:7f:4f:ba:
15:13:7d:69:69:5c:64:54:01:60:03:48:8d:88:0f:
57:e9:ec:df:aa:1f:35:85:89:c0:c3:6b:16:a6:89:
76:17:58:dd:49:20:d5:22:c6:8c:c4:08:eb:1b:33:
d7:32:16:08:3a:6e:2a:55:48:4b:1d:0b:05:3d:7d:
f4:b2:a5:34:75:2a:57:8f:01:46:59:db:9c:cd:c0:
3a:e2:18:ff:70:f9:86:31:43:9a:69:6d:90:34:df:
f7:b2:82:9e:c9:dd:12:11:c2:3e:9b:cf:0d:d3:d7:
f3:1c:e5:fb:8a:b0:67:4a:52:a9:f2:7e:db:7d:71:
59:45:af:a9:cc:59:6a:e1:7c:16:bf:21:13:ad:7b:
79:8b:44:f3:c1:fd:d4:f9:1b:0a:b1:03:bd:0e:b7:
61:44:65:a7:4d:58:fc:47:49:e6:c6:77:9f:1d:4f:
41:61:8c:f8:9b:50:c9:9c:4b:72:75:a3:31:34:10:
1b:1f:66:df:29:85:69:d8:07:4f:1e:33:e1:6b:6b:
df:c5:48:03:6e:76:c7:9e:3b:5c:42:50:fc:3f:c7:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:15:28:7C:46:9B:8C:CF:94:47:1B:2A:36:EF:AC:9A:71:F2:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/17a52a82-f3b9-3996-8f68-5b69658e0fb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:161::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:39:bc:a3:d7:35:03:17:70:3a:4e:bc:c7:d1:45:1b:5c:6c:
9d:b8:81:01:f1:fe:dd:b3:98:1e:99:dc:ba:c8:66:60:2c:43:
b7:86:2e:ba:b3:99:57:a7:45:ad:aa:b3:46:43:c9:5d:50:14:
d7:d9:c6:76:2a:3f:56:41:b2:9e:d0:63:f1:3c:c9:67:2e:6f:
5b:f4:b8:53:62:5a:7a:e2:1c:f9:6d:49:81:29:30:b5:44:d2:
cb:0f:02:95:e4:e9:bc:d6:b3:c8:f5:bc:0d:3f:b9:2b:53:f9:
84:6b:53:64:88:cd:8b:ca:fe:7d:04:21:9d:ca:ea:9d:58:b6:
94:46:19:e6:52:1b:0a:66:d9:6a:f0:36:b6:e2:4f:6d:79:79:
20:04:c3:20:ad:b8:05:52:43:8b:36:aa:e7:83:b6:03:f0:05:
b3:ce:45:f0:1d:82:f4:94:23:b7:a9:98:93:e0:c8:ed:4c:a5:
95:d3:4e:91:42:90:9a:82:3a:81:48:68:67:fc:e3:b9:dd:2e:
cd:d7:c4:bf:a6:81:52:22:fd:e2:76:43:08:a3:74:fe:e9:90:
1b:e3:4d:2f:ce:0e:9c:9e:5c:74:e5:2d:27:a0:15:d5:6b:95:
ef:94:fb:da:58:38:c1:4d:b9:1a:8b:ec:b9:fb:f3:00:c9:c6:
e6:49:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:45:04 2025 by rpki-client