Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23722a53-4cc5-335c-9d75-82eca30d4897.roa
File: 23722a53-4cc5-335c-9d75-82eca30d4897.roa (raw, json)
Hash identifier: sR56WuJ/w8M8pNQPKrPJfGSBIHPPB9YioZ3ucO7U92I=
Subject key identifier: 0F:21:98:1B:BE:6A:8F:20:3F:2A:78:36:6C:00:BE:3A:7D:1D:B7:9F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846B4690B84EBD90249CDED3680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23722a53-4cc5-335c-9d75-82eca30d4897.roa
Signing time: Tue 30 Jul 2024 01:30:10 +0000
ROA not before: Tue 30 Jul 2024 01:30:10 +0000
ROA not after: Mon 28 Oct 2024 01:30:10 +0000
asID: 399503
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b4:69:0b:84:eb:d9:02:49:cd:ed:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 30 01:30:10 2024 GMT
Not After : Oct 28 01:30:10 2024 GMT
Subject: CN=3bc79319-03ad-4c86-85ea-cd9e32d39a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:58:2b:26:ad:35:f1:0e:c7:80:5b:8f:f5:
f8:d1:1f:e0:d6:31:a6:8f:e4:56:62:b3:3b:68:a3:
4f:da:1f:67:13:33:3c:5f:94:65:17:0e:59:42:7f:
28:98:31:d6:96:46:c8:0d:86:33:71:9d:e3:68:a7:
82:27:f5:04:a5:e7:50:1a:57:8e:bf:f1:b7:18:be:
84:d3:60:e2:ae:99:bf:5a:95:5c:ef:4d:26:2b:6a:
a3:11:3d:d3:cf:3f:ab:5f:c8:1e:49:75:4e:00:62:
1c:31:dc:2e:9b:f9:18:89:cd:c7:79:50:d6:cf:64:
db:c6:e2:db:22:10:59:63:c5:7b:c4:c4:0c:d8:d8:
1d:fa:2a:02:67:ad:1a:e9:ba:27:f2:aa:5d:fd:5f:
21:a7:0e:94:4d:eb:8b:75:1f:a6:30:02:0b:c3:27:
08:31:40:85:e1:97:36:3b:e3:14:fb:80:84:e8:00:
25:8a:b9:9d:04:53:46:ef:14:e6:1d:d8:3e:52:26:
53:c6:7b:20:b2:a8:5b:de:e7:70:3c:d1:f2:70:98:
61:86:8c:6c:fa:5b:23:2c:fa:90:c8:f8:f2:80:6e:
d9:a0:78:fe:a9:1a:d1:02:5d:35:de:01:51:57:a5:
35:f9:4d:04:2c:d5:19:f7:16:aa:45:02:4c:9d:11:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:21:98:1B:BE:6A:8F:20:3F:2A:78:36:6C:00:BE:3A:7D:1D:B7:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23722a53-4cc5-335c-9d75-82eca30d4897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:1f:6d:23:56:bc:1f:85:09:95:ef:64:7f:b1:68:31:13:64:
d6:99:da:aa:60:d2:49:56:6e:4f:8a:b9:53:5d:99:53:0e:46:
44:aa:9b:6b:06:01:1d:b4:f4:73:3e:5a:7f:4e:39:2d:2a:54:
96:0a:e7:74:02:5e:da:f2:fc:2f:23:7e:0d:dc:9a:58:e5:f2:
2a:5a:9d:6c:41:54:66:ad:ca:7d:d7:1a:3b:b7:d0:db:ee:fb:
b9:29:af:26:71:5c:7c:27:bb:97:1a:02:dd:90:24:0d:54:b6:
50:1d:9d:e1:7f:ab:c8:25:9f:72:a0:bc:91:3e:7a:d2:11:ae:
21:25:68:92:7d:51:b8:5f:70:d1:c2:c4:13:7e:0d:87:92:31:
85:0a:1d:ef:18:62:fe:1a:d0:36:04:0f:e4:1b:18:53:5c:f4:
ec:c4:7e:db:ed:4a:73:85:90:bc:50:c6:09:cc:75:7a:3a:08:
ab:30:7f:1a:dc:f7:51:5b:d5:bb:8c:ee:f9:ad:56:a4:14:3b:
3a:d4:9d:2f:6c:ab:c4:0a:a2:8e:ec:f4:8f:e9:4f:25:a5:a7:
01:e2:a9:b7:18:5c:5e:12:5c:e1:df:41:8f:a0:b5:85:77:d0:
fd:f0:d6:ed:0d:f4:ba:fb:45:cb:52:92:98:ce:d0:2d:6b:61:
0e:63:67:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:40:29 2025 by rpki-client