Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28571291-3a88-37a7-a2a4-ab6239eeca3c.roa
File: 28571291-3a88-37a7-a2a4-ab6239eeca3c.roa (raw, json)
Hash identifier: HEL8Ea933MnXjIBs6FMi4rsuGS+VWrFn+LHVd6sY5kQ=
Subject key identifier: E1:DC:33:AF:7F:E9:80:7D:59:BC:90:AE:71:3D:3B:7C:22:20:EC:CA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A77490B37D334D300AE8EB0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28571291-3a88-37a7-a2a4-ab6239eeca3c.roa
Signing time: Thu 27 Jun 2024 20:16:07 +0000
ROA not before: Thu 27 Jun 2024 20:16:07 +0000
ROA not after: Wed 25 Sep 2024 20:16:07 +0000
asID: 200020
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:49:0b:37:d3:34:d3:00:ae:8e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:16:07 2024 GMT
Not After : Sep 25 20:16:07 2024 GMT
Subject: CN=62025fdf-f4b6-449c-bc79-43081a8fed2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:68:bf:12:a6:d5:1b:f7:c2:b8:69:0d:3a:
eb:a7:08:5f:95:72:c0:ee:b6:aa:10:8b:51:76:79:
a4:ec:77:da:87:a1:2f:75:7e:d8:7c:f8:fd:23:9a:
4f:81:ea:f4:f5:fd:53:0e:97:d2:4c:33:b8:37:71:
8b:5c:d1:f8:6f:17:10:61:6e:bd:f0:42:ae:8f:21:
7a:69:56:e0:c8:c4:79:62:e8:1b:a8:5d:0f:9f:b3:
5f:67:62:e4:11:02:32:52:ae:21:03:ed:52:fd:8a:
2b:63:6d:ab:1f:6c:9f:59:76:02:7f:d1:76:0b:66:
f4:4c:41:8e:dd:40:f7:3e:a5:7f:fa:7d:28:1e:2c:
2f:c9:8e:16:f8:f0:50:d0:32:26:d0:4d:43:6d:72:
24:d5:ca:0d:a9:45:9e:50:90:07:bd:8c:f0:30:5d:
11:7d:45:86:24:70:cb:12:d3:5a:75:c4:1b:56:4b:
8e:08:5f:e5:9c:04:d5:ec:14:3d:f2:71:ee:52:6d:
79:70:0b:59:64:16:e1:ec:8c:ad:05:3d:e7:07:87:
11:6a:a8:e8:0e:86:60:2c:de:bf:31:90:7e:6c:f9:
d4:ca:4a:b4:1b:32:d8:8f:2a:d6:76:aa:07:7a:46:
d7:2f:d0:aa:da:5c:fd:0c:82:bb:33:5e:25:87:15:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:33:AF:7F:E9:80:7D:59:BC:90:AE:71:3D:3B:7C:22:20:EC:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28571291-3a88-37a7-a2a4-ab6239eeca3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:72:75:42:81:f4:60:49:62:22:41:7a:ef:87:94:da:04:28:
8c:06:c2:5f:61:61:2c:fc:7b:28:dc:e6:28:da:eb:f7:0c:24:
9b:d4:45:4c:e2:8c:a5:5f:cc:1a:23:c1:2a:74:2b:52:24:7d:
09:f8:c8:5e:34:1d:f2:63:ae:68:db:6a:17:f0:1e:78:89:22:
8c:6e:13:a1:8e:3f:11:f5:0b:de:79:21:9e:1c:f5:2c:f3:c9:
d9:4a:e6:1f:cb:2c:3b:0b:d7:f4:ae:d3:30:4a:96:f5:ef:f1:
3a:25:49:b9:a0:da:01:79:bf:a8:d5:58:5f:ad:8d:54:ba:46:
15:f6:7c:74:f4:ed:08:30:d1:96:21:2a:f5:c6:46:1b:9a:a6:
c9:0a:31:9b:92:92:9a:be:d6:aa:3c:b6:09:75:5e:bf:bd:94:
c1:e7:42:9f:36:a7:af:ef:51:b3:24:c3:fa:80:2c:5c:7d:9f:
27:3d:8b:86:f7:2d:ca:5f:e2:b0:16:0c:68:92:ab:81:86:87:
5f:4d:7f:c5:bb:74:6e:24:2b:84:ac:5b:e9:1a:59:38:59:f0:
7e:e6:f6:bf:c3:1e:5c:df:7b:f7:7d:d3:77:bb:6f:85:82:2d:
94:7b:c4:9b:8e:77:e9:fe:26:1a:8f:ce:68:29:d4:75:57:86:
4a:7e:28:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:32:59 2025 by rpki-client