Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28188379-7be7-3c32-a640-a7cd4f719eec.roa
File: 28188379-7be7-3c32-a640-a7cd4f719eec.roa (raw, json)
Hash identifier: eWGGz+lW2P9HWha/012qiRj01pt5v6XF82b+VFuREVI=
Subject key identifier: 38:77:E1:D9:C8:50:A7:B3:FC:52:F8:F0:FB:41:1B:98:43:D6:79:5D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285844CEB508FC950E247321F27F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28188379-7be7-3c32-a640-a7cd4f719eec.roa
Signing time: Wed 07 Feb 2024 02:00:24 +0000
ROA not before: Wed 07 Feb 2024 02:00:24 +0000
ROA not after: Tue 07 May 2024 01:00:24 +0000
asID: 63145
IP address blocks: 2001:470:1da::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:ce:b5:08:fc:95:0e:24:73:21:f2:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 7 02:00:24 2024 GMT
Not After : May 7 01:00:24 2024 GMT
Subject: CN=e9393acd-a4cf-41ee-ad12-32e37990c94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:08:7d:cb:52:55:bb:a0:24:a7:42:cf:f6:
ba:8f:7a:ec:aa:fc:b8:e3:ad:4b:d5:12:b3:70:d6:
83:8a:35:f4:d7:d0:16:b5:15:22:91:f4:e8:62:f1:
ab:5c:fd:ce:26:b6:e3:2c:6b:8b:ba:34:cd:54:f9:
22:b1:82:f2:60:19:9c:c3:c0:32:87:a9:9c:7f:f0:
7e:c2:02:43:d6:33:fd:92:79:6e:9d:cd:9d:68:46:
4b:00:2f:4a:4b:87:12:5e:ef:0f:fd:bf:c4:9a:0c:
f9:48:35:13:68:26:86:ed:81:8f:86:f2:c4:09:c2:
aa:dc:39:73:2e:88:7e:9c:6a:48:15:2d:49:ec:06:
06:8d:2f:16:cb:d2:fc:b8:b3:31:36:33:c9:31:6e:
f9:78:a4:cc:d1:1e:8b:d9:d1:4c:d1:3e:b5:23:14:
64:ec:d5:8f:fc:f5:55:9a:9e:66:a5:79:db:1a:04:
4f:8b:71:e6:42:c0:ae:54:df:b2:89:94:37:1f:20:
3a:c3:bd:ac:52:af:02:38:b9:a5:1a:0b:ac:ec:05:
f4:ad:fe:db:49:07:07:bf:05:be:d8:be:43:ae:0d:
fb:73:da:48:ed:30:a4:78:6e:c9:69:a3:2d:79:0d:
7e:fa:eb:e0:df:38:da:82:5c:17:d3:2c:7a:b0:5e:
b3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:77:E1:D9:C8:50:A7:B3:FC:52:F8:F0:FB:41:1B:98:43:D6:79:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28188379-7be7-3c32-a640-a7cd4f719eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1da::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:8d:82:13:50:d0:34:eb:cd:b8:19:2c:58:be:d7:cd:90:ac:
0d:4e:c3:64:ef:b3:bb:f3:af:93:37:22:20:58:48:91:5b:c5:
51:ad:27:e0:2c:45:63:c4:8a:7f:35:18:3b:d6:b5:4b:c5:28:
45:d8:4a:e7:be:de:94:b2:6f:36:60:3a:bc:b4:4a:81:c9:3b:
87:8b:bb:ef:b7:6c:bc:e9:eb:c7:ee:f7:19:43:58:40:19:14:
73:41:81:a2:96:f7:3c:bd:ab:ae:38:6a:c1:fc:ba:6f:28:9c:
0a:43:3b:4d:19:94:45:fa:07:d7:78:9f:ea:9f:c6:64:13:c6:
fe:84:60:09:53:1e:c3:02:ac:af:1e:e0:b2:b8:fd:f4:ef:de:
fa:6d:58:dd:30:2d:4c:ea:2c:ef:e3:a6:be:8a:df:c5:57:eb:
4c:a5:a8:32:dc:1d:7d:e4:e0:69:6c:53:2e:bd:fa:1f:47:f2:
93:19:36:56:fa:4c:68:a7:39:83:4e:4e:b0:78:8d:2b:be:8b:
14:ee:58:26:b4:e7:37:f4:ec:9c:98:31:48:f0:42:a1:9e:bd:
7f:04:9e:9b:41:1f:ee:1a:59:cf:92:1b:cf:3f:d7:dc:a2:f2:
bc:4c:a5:02:df:9c:38:c5:74:f5:52:c4:9f:8c:f7:33:c9:ba:
0a:69:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:49 2025 by rpki-client