Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3c856f12-27fb-3447-b28b-34b95f204ac4.roa
File: 3c856f12-27fb-3447-b28b-34b95f204ac4.roa (raw, json)
Hash identifier: pmVmrcwHlUekJLmB/C0zszMGbTR/2MY093keP1FndRs=
Subject key identifier: 38:EB:C6:26:44:09:C8:E9:C4:01:F1:96:FB:D6:DC:48:18:64:41:BC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584613D40AD7E886EBFB81065700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3c856f12-27fb-3447-b28b-34b95f204ac4.roa
Signing time: Sun 02 Jun 2024 13:00:36 +0000
ROA not before: Sun 02 Jun 2024 13:00:36 +0000
ROA not after: Sat 31 Aug 2024 13:00:36 +0000
asID: 17806
IP address blocks: 2001:470:2b7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:13:d4:0a:d7:e8:86:eb:fb:81:06:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 2 13:00:36 2024 GMT
Not After : Aug 31 13:00:36 2024 GMT
Subject: CN=407f3bf6-f091-4b86-a995-79880cc5f528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:8a:2d:2a:41:fb:b5:f1:a9:49:af:65:d5:
68:30:85:74:f7:a7:ce:45:fc:dc:0f:cd:8d:cb:7f:
04:c4:8c:43:f1:f3:ac:d7:00:12:52:e8:54:73:ae:
be:8e:6e:fd:b2:01:09:f0:04:39:53:1b:e4:15:c9:
c3:44:03:60:41:a8:a3:c5:be:ce:d5:f4:b0:be:c8:
7b:29:e2:90:7f:f6:cd:40:04:d1:14:38:63:4c:27:
95:e0:a1:bf:b2:f0:bb:d9:2a:b6:3c:6f:52:b6:d6:
38:9a:f3:49:e8:8d:e7:7e:33:2b:c6:8d:53:36:48:
d0:28:2a:e6:d8:0c:54:c4:57:95:18:07:5c:e1:28:
ed:21:cf:66:75:ce:eb:19:ab:68:88:21:11:0a:b1:
a4:f7:a1:c3:f2:1f:72:81:81:75:a5:4a:ba:d8:37:
40:85:73:08:1c:20:dd:99:9f:0e:84:ef:02:c8:8c:
c6:0c:44:97:09:dd:1b:79:28:5b:93:a6:ea:b9:7c:
fe:6c:fd:ad:55:57:37:c4:1c:55:bd:cb:8b:a2:63:
f1:01:e2:93:e3:13:c7:2f:1c:db:08:22:e8:16:a1:
7a:81:47:f8:2a:b9:92:ab:4c:6e:db:91:36:f5:5a:
82:f3:be:1b:57:5e:7c:7f:9c:34:72:f9:e7:07:1f:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EB:C6:26:44:09:C8:E9:C4:01:F1:96:FB:D6:DC:48:18:64:41:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3c856f12-27fb-3447-b28b-34b95f204ac4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2b7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:82:34:08:c7:5a:7b:b9:34:d7:7a:7b:41:3d:5a:8d:28:e5:
87:12:09:9b:82:27:53:04:f5:a0:ca:b9:c3:a1:4a:7d:49:1f:
9e:32:da:33:0f:4a:2c:e6:d0:35:3f:6a:c1:bf:c0:4d:f6:29:
61:3c:d2:97:03:59:1a:3d:0f:6d:f0:87:7d:00:61:c7:20:c2:
96:55:b2:34:3a:dd:c0:13:8d:6a:73:aa:4a:72:50:3b:0a:c8:
ed:1c:67:69:f2:9e:07:8f:7f:96:8c:73:33:41:07:d1:61:09:
3d:88:bb:3c:43:eb:5a:30:d7:95:19:9e:e9:6e:c1:6b:63:c9:
d1:a6:59:5d:8a:9b:a5:26:d2:5f:29:3e:d4:48:d6:e7:de:d8:
8b:cb:8f:12:e8:46:d6:e9:d4:23:4b:e9:04:35:b2:40:f4:ad:
5d:95:e2:df:0a:22:2e:77:35:2c:8b:31:f1:a9:ff:0b:06:bf:
a4:42:5d:49:6e:cb:02:cb:29:6c:fb:fe:92:08:12:68:a7:d6:
dd:43:2a:48:22:a1:1c:68:51:96:fc:8e:8f:20:e6:19:79:60:
06:cf:a4:56:a7:0b:09:e6:b1:00:6a:07:07:5e:e7:0e:fe:c0:
c1:c8:65:b0:5a:c3:41:a5:e1:e4:57:90:41:75:16:f2:49:81:
1d:52:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:30 2025 by rpki-client