Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32c97b87-898e-38f9-8827-1f2db89a0cee.roa
File: 32c97b87-898e-38f9-8827-1f2db89a0cee.roa (raw, json)
Hash identifier: aYJIIc1UWn6hGuYO6PMwqYWpQh24Y6UX69Y3thpRl14=
Subject key identifier: 9C:F4:4C:8C:A6:BD:BB:C5:13:CE:5B:85:FA:63:D5:45:F4:B7:22:00
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A514E7F2364F9B4EDC1DF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32c97b87-898e-38f9-8827-1f2db89a0cee.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 398273
IP address blocks: 2001:470:cd::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:4e:7f:23:64:f9:b4:ed:c1:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=c4daf42b-7ddf-40cf-8f5c-297563812baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:a1:9e:c3:40:b9:6a:10:b6:5f:f0:73:af:
ca:3a:4b:b3:b1:25:42:49:c1:db:09:c8:7f:e1:3a:
6b:f9:f8:63:de:18:07:e5:50:f5:2b:15:b0:f8:ad:
2d:45:66:3d:92:27:8b:c5:8e:67:b1:20:01:c7:2e:
65:9b:d0:c0:e1:03:53:18:50:42:9d:f4:33:a7:62:
9a:74:18:47:41:e9:c9:7e:7f:e5:ae:f8:98:18:4c:
d4:a5:86:58:fb:0b:f8:d7:18:75:89:e4:7e:49:a9:
e6:f8:31:b4:59:49:f3:45:8a:1f:3f:36:ec:7d:90:
f3:7b:ea:e1:26:86:14:3d:5f:f2:d0:bd:fa:23:d6:
96:e8:65:d8:4a:c3:15:7c:83:a1:8f:a0:bf:26:92:
08:9a:a6:3e:17:e6:9a:33:42:c4:01:c2:97:06:01:
02:a2:e8:a2:e8:f1:44:91:2e:5d:d1:dc:45:fa:41:
69:d1:10:bd:90:29:18:11:48:5c:3d:7c:d0:18:54:
dd:74:d6:ea:8f:e5:d4:fe:5d:48:04:56:04:61:e8:
58:5a:50:85:13:a4:47:4a:e7:d2:3d:99:c8:60:93:
b7:01:74:09:4f:80:6d:dc:3f:89:d9:d9:0e:27:e8:
49:b0:62:fd:64:09:69:5b:40:16:47:ee:f7:ea:c2:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F4:4C:8C:A6:BD:BB:C5:13:CE:5B:85:FA:63:D5:45:F4:B7:22:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32c97b87-898e-38f9-8827-1f2db89a0cee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:cd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:75:d0:24:5e:ad:db:a1:3b:d3:94:1e:e0:b9:db:54:3d:f3:
b7:17:2c:cb:37:6d:09:5f:ee:6a:17:46:6b:d4:09:33:7e:2f:
9a:79:ab:16:2d:c3:7a:35:4f:6c:33:76:a8:b1:46:8c:07:30:
96:89:15:c4:59:c1:5d:10:65:48:d7:73:cd:bc:b7:b9:ba:c5:
ed:48:b8:a5:34:c2:b8:c3:e3:b6:14:94:79:80:31:0f:25:fb:
70:e6:11:bc:e4:1f:44:dc:53:4e:96:39:89:4a:b8:24:f7:7a:
ad:c1:92:f5:ea:51:19:5a:42:7c:c8:6e:20:20:30:9b:5f:b4:
70:a6:3a:9e:38:af:e9:15:0c:d8:73:d3:c1:0c:68:1e:6a:94:
3d:05:e3:b7:d1:a4:e0:3a:c6:78:90:d2:b0:f7:9b:36:b0:f1:
49:da:bd:fe:38:25:81:cc:3a:a4:63:f3:da:ce:60:f2:d1:10:
17:be:b6:fb:0f:ab:14:c1:a7:fe:a4:0a:45:e1:3b:4b:ef:21:
8a:97:ca:95:3f:3d:65:e3:01:00:e2:0b:78:73:aa:46:34:14:
81:2e:c4:64:ae:c7:d3:d9:7d:c0:4c:99:ca:0f:36:6f:a0:b9:
e5:47:52:f3:35:ad:f5:4a:d3:c5:c7:5d:36:ee:59:09:c3:bb:
47:79:be:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:09 2025 by rpki-client