Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/389a4ea2-b2af-3ad4-b57a-8add5c16a703.roa
File: 389a4ea2-b2af-3ad4-b57a-8add5c16a703.roa (raw, json)
Hash identifier: aI1yMhL8EbVliiJfuNAw6qRHKo7w3QfZkU0f6V/I6SY=
Subject key identifier: B9:88:18:4A:B9:11:2B:C1:94:E0:07:04:90:AD:E9:F6:04:34:31:35
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858462B8ECBDB6F8F731846C7D680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/389a4ea2-b2af-3ad4-b57a-8add5c16a703.roa
Signing time: Tue 11 Jun 2024 01:00:24 +0000
ROA not before: Tue 11 Jun 2024 01:00:24 +0000
ROA not after: Mon 09 Sep 2024 01:00:24 +0000
asID: 25198
IP address blocks: 2001:470:1d8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2b:8e:cb:db:6f:8f:73:18:46:c7:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 11 01:00:24 2024 GMT
Not After : Sep 9 01:00:24 2024 GMT
Subject: CN=3b40164b-777e-4a88-9d0b-411c1fe2023b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:4a:89:8a:eb:96:8f:e5:4f:39:62:c4:61:
6b:68:34:9b:c0:c2:3f:23:72:c9:e6:11:5a:cd:10:
94:c1:30:20:d7:7f:ab:45:3a:f5:c3:36:92:ab:ad:
88:09:d8:23:53:fe:cb:11:04:4a:6f:b2:5d:cd:a4:
71:e3:f5:fe:df:84:c5:5c:15:a2:cc:ca:01:24:3e:
f9:a9:7f:60:a6:77:04:80:cf:a7:d1:ac:a4:1b:56:
d6:5d:b0:64:2b:42:4e:38:98:c1:b7:15:f8:81:53:
c2:fb:48:19:bb:4c:b8:0d:9e:6c:c9:2d:45:a7:82:
f3:50:70:d3:9a:d9:35:f0:99:d9:d0:7e:c0:59:5f:
69:de:28:2c:70:6e:4d:49:08:e9:7a:56:7b:8e:df:
aa:34:ca:6d:dd:9a:8d:3c:7e:9e:a0:a8:e7:fb:9e:
0c:b5:dd:2a:33:0c:16:ad:55:47:06:de:2e:be:9b:
11:0e:4a:40:7c:27:d9:2b:70:d3:4d:45:b5:f5:d7:
b3:d6:ed:f7:e1:92:b7:1c:24:5c:f2:45:c6:88:05:
ea:fb:2a:f8:65:4d:a2:a5:0e:2c:77:0e:83:90:9a:
c4:80:c6:33:44:4f:73:72:85:d5:60:79:67:5e:7e:
7f:c9:79:c7:9b:34:d0:f4:65:d6:72:35:cf:4a:48:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:88:18:4A:B9:11:2B:C1:94:E0:07:04:90:AD:E9:F6:04:34:31:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/389a4ea2-b2af-3ad4-b57a-8add5c16a703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1d8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:8a:bf:6d:78:a9:cc:ed:4e:9f:2c:9a:4c:bc:fe:77:9e:3d:
2e:51:89:49:3e:1c:ce:cb:58:05:3a:0c:29:35:f1:2e:f0:7b:
38:42:c4:34:31:d1:12:58:29:8f:7c:2c:4b:18:5f:dc:a1:90:
5d:2e:20:65:13:f1:dc:2b:9c:77:31:ee:d6:2d:dd:99:b8:d8:
d9:15:f8:c6:9f:ab:1c:22:ef:a4:0e:d9:34:6b:ca:ff:7d:c4:
e9:c1:fb:a8:29:4f:12:4c:bf:f7:c8:cc:4c:2d:ef:2b:00:73:
85:70:b5:a2:50:5a:4c:96:a1:f1:eb:a5:5f:7e:75:a2:84:b4:
fe:25:0f:d3:df:fe:12:dd:20:df:16:1c:67:80:b8:47:40:42:
29:23:f3:53:e2:00:c7:a9:51:51:00:3a:d3:d6:5d:e2:f1:8f:
99:6c:06:db:24:90:94:f4:14:5e:3b:c4:5b:5c:93:fb:61:00:
cd:59:4a:72:73:f4:5e:01:8e:44:27:f3:6c:14:f0:b9:c6:83:
af:00:cc:b6:4a:e5:b8:25:a0:6c:0d:63:f1:28:68:c0:52:44:
69:06:c6:b2:db:4d:78:36:27:e1:a3:39:94:59:ec:49:29:19:
e8:98:a7:38:eb:56:93:14:8a:05:bf:70:29:c7:21:8d:58:97:
60:d1:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:40:34 2025 by rpki-client