Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f3ab293-7fa6-3c80-920d-246d98f42532.roa
File: 1f3ab293-7fa6-3c80-920d-246d98f42532.roa (raw, json)
Hash identifier: Lgvk5mhYfSNSsoWvz4MblqS2aiCr8eWDE8u1bDuIZJI=
Subject key identifier: CC:17:6B:D2:3D:49:5D:85:63:FD:31:2C:85:D5:F7:F4:8C:56:F5:52
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584608A96369BFE42408CA241C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f3ab293-7fa6-3c80-920d-246d98f42532.roa
Signing time: Wed 29 May 2024 13:00:34 +0000
ROA not before: Wed 29 May 2024 13:00:34 +0000
ROA not after: Tue 27 Aug 2024 13:00:34 +0000
asID: 11255
IP address blocks: 2001:470:2f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:08:a9:63:69:bf:e4:24:08:ca:24:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 29 13:00:34 2024 GMT
Not After : Aug 27 13:00:34 2024 GMT
Subject: CN=12facf68-ea28-4ca7-b42d-8e55dd6d1882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:14:0e:a2:0a:da:d2:d4:e8:a4:f0:3d:61:
44:a7:07:f0:80:6f:53:94:89:7b:68:ee:a7:6d:35:
d8:aa:66:65:e7:be:a6:75:b1:a4:aa:23:8a:5b:dc:
dc:d6:b6:9e:62:31:f4:da:63:0d:50:3f:21:0c:8a:
96:4a:51:bc:b0:ba:8d:d2:fb:1a:ce:02:a5:42:f1:
8e:da:a2:ff:b4:1f:a6:18:56:16:1c:76:1e:35:ec:
a0:cc:19:e4:12:3b:ef:65:d3:14:c5:52:9c:e6:ab:
1f:38:06:52:f9:ce:11:aa:1a:48:e3:9d:ae:80:a8:
d3:82:71:90:04:7d:60:f6:15:b9:95:18:bf:b7:73:
12:0d:a2:bc:a0:01:9d:c0:e1:01:9c:e5:7e:8c:c4:
5f:d2:af:3c:75:22:c3:b2:06:04:79:8d:87:84:f2:
0e:2d:bc:fa:d9:e4:d1:8e:6c:f5:72:8c:c9:47:fc:
f7:ff:22:bc:45:86:9e:83:0d:9e:2d:e1:b5:24:ff:
d7:14:38:4e:80:4d:6c:32:1b:87:59:d4:a0:fd:90:
06:80:95:c3:fd:7e:34:6e:a3:e2:5c:86:6c:98:24:
f5:82:5b:b7:68:61:52:48:68:b7:4b:74:22:c9:22:
30:f5:ed:a6:a8:0e:4f:e1:3b:de:e3:05:ea:b0:dd:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:17:6B:D2:3D:49:5D:85:63:FD:31:2C:85:D5:F7:F4:8C:56:F5:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f3ab293-7fa6-3c80-920d-246d98f42532.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:79:5e:d8:31:a1:b3:41:35:87:62:84:13:4d:14:c0:b4:1f:
d0:d6:3a:28:ad:25:51:30:1b:5c:9d:85:a1:71:8b:37:2b:86:
8c:68:50:4b:da:ed:8b:14:c5:2c:77:9a:f3:0f:86:49:2d:ec:
3a:61:db:d5:56:dd:ca:ba:51:fa:a1:8e:48:d4:46:d8:d7:12:
90:80:8e:ab:c9:24:56:b9:f5:ba:db:c4:7f:fc:aa:d2:9c:65:
d8:a9:32:47:6f:36:39:1d:17:75:9b:07:8b:b1:3b:16:dd:62:
4f:22:2a:15:19:40:3e:a2:02:96:d7:de:87:30:2f:69:02:b3:
59:ab:ac:ea:4d:fa:e6:7a:cb:b4:ac:cd:69:0a:54:fe:26:7c:
4c:48:13:fb:da:07:5f:b8:fb:e8:ed:58:a4:a0:96:f4:6e:2d:
54:88:76:f4:9b:1b:04:44:c4:64:c7:e9:80:a6:67:bc:65:85:
ad:9f:3a:89:49:c2:66:20:f2:88:ea:06:e2:f1:cc:8d:21:9c:
c2:ae:d9:38:ea:b0:7d:8c:e8:fe:2b:50:58:52:92:b2:85:50:
13:79:0d:86:87:db:38:42:47:63:74:d4:88:1e:6f:4a:90:8f:
00:99:b4:af:30:98:e4:88:e0:2e:18:0e:52:ac:0a:57:22:91:
25:aa:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:35:30 2025 by rpki-client