Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37f07e28-5883-30da-a761-a90c9e88ac50.roa
File: 37f07e28-5883-30da-a761-a90c9e88ac50.roa (raw, json)
Hash identifier: ZQQlGQhbskuMIdwh7ttIMgIVWWxelCAo13V7Ai7dj8s=
Subject key identifier: 20:A8:37:2B:B0:08:16:5C:4F:50:DF:9A:AF:2F:A7:37:F2:64:8A:DF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846B733B310C2BA57BA655BF180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37f07e28-5883-30da-a761-a90c9e88ac50.roa
Signing time: Wed 31 Jul 2024 01:30:06 +0000
ROA not before: Wed 31 Jul 2024 01:30:06 +0000
ROA not after: Tue 29 Oct 2024 01:30:06 +0000
asID: 204992
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b7:33:b3:10:c2:ba:57:ba:65:5b:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 31 01:30:06 2024 GMT
Not After : Oct 29 01:30:06 2024 GMT
Subject: CN=8af22291-1fa5-46a2-921e-e0b9a5520eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:68:9c:ff:f3:bb:e7:87:ef:6e:8b:73:c0:
c0:1e:25:6f:e8:8b:46:94:4a:0c:a2:71:b1:e0:81:
23:fa:76:f2:76:10:1b:6b:25:5c:6d:8a:1a:3a:7d:
b8:f0:c5:8f:4b:ae:ff:bb:d8:1c:6e:ca:00:e1:40:
17:43:28:f5:62:82:d3:39:32:29:c0:a3:dc:6b:ec:
5b:2d:49:db:15:fa:fc:ad:57:db:ec:9b:14:5c:3a:
42:30:bf:6d:00:b5:34:7c:9a:36:61:90:d8:48:73:
e9:2f:2e:08:1d:57:cc:8a:62:7d:8c:8b:d4:f6:27:
b3:f1:7d:a1:bb:86:ab:36:71:31:79:0e:c4:b5:4d:
91:50:94:cf:ce:42:b7:2c:6a:e6:f2:87:cd:69:2f:
7c:6b:44:94:dc:a2:59:2d:91:f2:07:2f:1d:cb:ad:
85:44:8a:1f:2f:7a:07:f8:40:a8:8f:57:65:1d:61:
74:e9:e9:0c:f3:af:bb:77:9d:e0:e4:dd:a3:3c:75:
98:8b:e4:fa:42:fe:a0:b0:1a:6d:18:18:61:72:de:
95:9d:3d:2a:64:ec:0e:35:f5:eb:fe:8e:26:5b:95:
62:de:b9:65:5b:50:15:02:85:22:f3:c7:c1:d6:db:
49:a7:07:a6:d7:7e:e5:d9:ff:33:1c:9c:a1:00:b2:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A8:37:2B:B0:08:16:5C:4F:50:DF:9A:AF:2F:A7:37:F2:64:8A:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37f07e28-5883-30da-a761-a90c9e88ac50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:ba:20:0c:ba:db:6f:4b:a8:68:7f:7b:b2:cd:91:71:af:80:
ed:d6:de:1a:03:0c:b7:b5:a6:81:c9:48:f6:15:60:f0:63:86:
f4:25:dc:25:60:7b:b6:1f:9f:d7:c7:cb:a8:81:66:92:6e:49:
dd:9b:2d:10:5f:ce:9c:31:0d:dc:c9:88:f9:30:29:c2:be:a7:
fe:8f:88:c9:9f:38:c9:3b:96:4d:05:5a:a1:0b:02:dd:80:74:
22:29:16:3c:8f:2b:79:4e:97:b4:f4:e8:32:9d:fd:9a:64:84:
6e:4c:03:d3:74:6e:f3:9c:ec:c6:53:04:99:f5:35:99:3d:87:
93:a4:8f:cf:77:16:07:21:07:67:4f:74:a0:2e:59:04:fc:53:
54:b4:8a:82:04:0d:1c:26:03:2f:05:b3:ea:8d:8b:f6:0f:f0:
b7:a3:dd:38:5f:e7:cf:56:8d:6b:47:33:ff:a9:b8:ed:d7:ed:
7c:6a:5d:03:81:5d:03:44:53:88:58:91:69:aa:6e:52:38:bb:
3d:10:13:b1:bd:93:3c:b3:68:6c:a1:86:81:95:17:53:5e:48:
6c:0e:70:e5:2e:e5:c8:72:7c:1d:c6:f2:e2:e7:ce:ae:81:ea:
e7:8f:e3:53:03:41:a5:63:a5:12:21:ca:58:a4:b9:44:55:9c:
99:1b:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:42:13 2025 by rpki-client