Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f44c09a-0ee1-3306-b19b-5bfc1342bdee.roa
File: 3f44c09a-0ee1-3306-b19b-5bfc1342bdee.roa (raw, json)
Hash identifier: oywFg+G9TGx17/gClhXCQZUzQOULD7X1GUxaJUYKuws=
Subject key identifier: 15:C4:BC:40:F6:6A:10:93:01:A8:7D:94:1A:D9:61:0C:AD:0C:19:3E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858475BEA203D4EBD480BF2D8A540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f44c09a-0ee1-3306-b19b-5bfc1342bdee.roa
Signing time: Sat 28 Sep 2024 01:30:15 +0000
ROA not before: Sat 28 Sep 2024 01:30:15 +0000
ROA not after: Fri 27 Dec 2024 02:30:15 +0000
asID: 51259
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:5b:ea:20:3d:4e:bd:48:0b:f2:d8:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 28 01:30:15 2024 GMT
Not After : Dec 27 02:30:15 2024 GMT
Subject: CN=c992d1c7-3887-4f61-9d6a-0c4db4104727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c4:d5:12:61:89:8b:d9:58:e9:e6:b7:72:80:
44:f7:74:b5:77:dc:63:f3:ac:f4:aa:b9:3d:0a:a3:
b3:43:48:dd:35:14:84:e1:92:06:54:2e:e8:a6:89:
13:ec:e5:43:ad:4c:d3:48:cc:91:83:a1:e4:b6:36:
f1:2f:96:a5:74:7c:e8:fc:aa:44:43:57:d2:a4:01:
39:ae:36:87:5e:aa:cf:27:bb:2a:52:96:4f:aa:d0:
38:47:0d:74:ec:f6:40:95:11:0d:a7:d4:c6:b7:a2:
54:86:cd:3f:29:c2:26:24:70:3d:7b:d8:f7:98:29:
05:ad:1c:b6:92:35:cb:3e:1c:96:73:55:22:31:5b:
05:5c:8c:7f:60:0f:49:ff:68:6c:80:8e:88:2a:74:
62:62:70:d8:02:c6:b7:e4:99:fd:af:5c:43:41:2c:
e0:8d:50:87:a6:c8:d9:85:b4:22:88:0b:5b:35:81:
5f:93:1d:38:16:69:4c:b8:38:ba:a5:f9:76:3f:e3:
5c:11:7e:20:b2:54:7d:60:30:68:aa:ad:2c:79:0c:
04:58:27:55:e6:32:eb:46:86:8a:0a:c8:d4:92:36:
6c:fb:0c:ba:83:f0:e1:bd:79:78:9f:fa:ba:57:c0:
d8:f0:2f:13:65:bd:fc:07:89:42:af:48:20:cb:23:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:BC:40:F6:6A:10:93:01:A8:7D:94:1A:D9:61:0C:AD:0C:19:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f44c09a-0ee1-3306-b19b-5bfc1342bdee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:23:22:70:96:94:97:37:cc:ef:c4:68:94:1e:0c:7b:34:e2:
11:25:db:71:f3:28:4e:1d:49:06:69:2e:47:04:2a:5e:21:2a:
12:20:9a:dd:98:da:28:02:9f:41:b0:42:12:50:84:e7:e7:0a:
30:6b:98:e5:03:5e:1a:63:5b:28:40:79:4f:13:21:af:e6:6d:
43:65:2f:57:26:a3:06:62:f7:00:ac:f5:48:5e:c5:31:7d:ca:
d1:03:37:4a:28:dc:60:d8:5a:28:4d:63:ad:2c:31:25:e5:98:
f3:c8:f3:cb:54:ef:f4:ac:45:67:05:86:10:84:36:93:ee:f8:
01:d6:58:f2:c3:f7:3a:a4:7e:c6:06:84:53:6a:18:c4:8f:2b:
e1:45:10:51:10:71:38:83:1f:d4:ca:bb:3f:37:76:c6:c5:3a:
9b:95:9c:0a:d2:07:18:8e:04:e9:82:7d:b8:d8:1f:f5:89:81:
2e:f7:9a:cb:c7:e7:11:18:12:93:c1:3e:6a:49:ce:ef:df:67:
ec:88:71:02:6e:1e:81:90:3d:79:39:48:7a:e5:63:b5:cf:ef:
e2:64:de:8b:12:e6:fd:9b:2e:43:c2:f5:33:fd:3f:31:2a:88:
1e:28:6d:d0:48:a1:c8:ee:3e:04:cb:62:e0:a4:1b:00:4d:81:
94:42:e9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:20:35 2025 by rpki-client