Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2af5fc85-98e8-3353-968c-36ec3aeaf3c0.roa
File: 2af5fc85-98e8-3353-968c-36ec3aeaf3c0.roa (raw, json)
Hash identifier: Riz93cKBJs5JYJgrfTgOojWxbRs/P90GLxH3OagsbNs=
Subject key identifier: 81:BB:32:5C:94:5A:7D:77:8C:A4:5A:C9:C6:DC:F4:72:C0:D1:72:C3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858463133438F1E41EAA3066527C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2af5fc85-98e8-3353-968c-36ec3aeaf3c0.roa
Signing time: Thu 13 Jun 2024 01:30:55 +0000
ROA not before: Thu 13 Jun 2024 01:30:55 +0000
ROA not after: Wed 11 Sep 2024 01:30:55 +0000
asID: 394450
IP address blocks: 2001:470:313::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:31:33:43:8f:1e:41:ea:a3:06:65:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 13 01:30:55 2024 GMT
Not After : Sep 11 01:30:55 2024 GMT
Subject: CN=031f5830-1fa6-46d2-b427-e945d2d87735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:c8:80:24:4d:a6:82:fa:b3:6d:03:9f:fd:
e4:ed:cd:15:a2:e9:36:a9:34:73:d9:91:77:5c:e6:
07:5c:2c:76:dd:ec:03:1b:93:0c:40:d4:a3:84:dd:
66:60:0e:03:c6:44:19:72:87:e2:6a:1c:13:65:a8:
24:e1:5c:b9:3b:c9:4b:02:7e:d0:c7:c8:e0:fe:38:
1e:10:14:b3:a4:10:46:26:9e:b4:1a:04:c2:aa:74:
21:dd:b4:53:99:ff:97:a1:c8:1d:da:ff:38:ef:bb:
f0:ab:9b:f7:c6:8a:dd:c6:b0:cf:1a:eb:d1:75:67:
cf:fd:00:e5:39:d1:58:e0:38:b8:9c:45:6e:d3:41:
99:56:52:e5:99:25:36:3e:50:c3:45:a8:04:5b:60:
16:36:b5:2d:e1:ce:84:f0:89:4a:88:c4:bf:be:db:
3a:6f:50:e8:4d:4f:2c:c5:fe:7f:41:1a:1a:54:cf:
37:99:aa:a7:f9:87:8a:82:0f:9a:ef:36:3a:a0:9b:
e7:77:2d:9f:19:f6:05:98:c8:50:d6:6e:07:2c:f3:
25:7f:e2:b3:88:6b:da:e0:16:83:9d:fa:63:ce:c6:
0d:bf:a8:8e:88:67:c5:70:a7:2c:85:1f:21:5d:a6:
ef:59:ce:20:d0:48:a9:4e:a4:08:7f:34:68:c8:89:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BB:32:5C:94:5A:7D:77:8C:A4:5A:C9:C6:DC:F4:72:C0:D1:72:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2af5fc85-98e8-3353-968c-36ec3aeaf3c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:313::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:a8:ac:83:c8:87:9a:7a:1a:b3:28:0f:0f:03:9a:f9:c1:d1:
2c:9d:92:3f:c7:39:15:79:f1:6c:38:40:2f:73:71:a0:45:64:
7a:af:fd:b1:60:18:c3:7e:ae:4f:e3:9b:3b:10:5e:ad:fa:ed:
38:93:ac:37:b5:69:b7:5a:c3:c1:90:22:80:ba:45:00:fa:16:
16:f0:70:47:45:0c:7b:86:e0:07:ac:e2:9d:66:ba:78:d4:a9:
1e:9a:ca:c4:60:34:76:4b:2f:a6:d4:ec:ff:d1:45:4f:55:d8:
b7:ad:e5:58:ff:8b:1b:1a:4f:07:24:22:65:30:52:f7:aa:18:
5e:db:f3:21:d6:85:bc:b5:d7:c7:2a:d6:80:a0:10:6d:b1:88:
5a:bd:26:e0:7e:35:2b:b1:ea:56:96:9b:72:41:23:d4:d7:2d:
ce:ec:49:74:72:f2:65:a2:c7:36:e0:69:00:99:28:d7:99:ba:
78:a1:ae:23:6c:9b:4a:57:22:10:7a:7e:70:78:e2:56:10:83:
9e:8c:a8:ca:ea:87:1f:4d:eb:2d:35:4b:0c:e1:f7:04:63:59:
3d:b2:de:59:f6:e9:6b:3e:a9:32:e0:82:b3:bc:5a:f0:19:5b:
4e:55:a9:b2:a9:73:48:d3:4f:59:e5:9a:94:92:41:1d:c6:9f:
06:65:a3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:41:56 2025 by rpki-client