Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4049308b-fd49-3f24-881a-b2d7b05505f1.roa
File: 4049308b-fd49-3f24-881a-b2d7b05505f1.roa (raw, json)
Hash identifier: Fz6IuYkCztRMWWMSpC+TM3kxZ5xsXsJZHezaTZJR0DY=
Subject key identifier: ED:AF:FC:0A:E8:19:59:71:1F:EB:B7:86:F6:EB:7C:9D:BF:8F:50:66
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845FC1932F7D884046D26A48A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4049308b-fd49-3f24-881a-b2d7b05505f1.roa
Signing time: Sat 25 May 2024 01:00:27 +0000
ROA not before: Sat 25 May 2024 01:00:27 +0000
ROA not after: Fri 23 Aug 2024 01:00:27 +0000
asID: 7782
IP address blocks: 2001:470:b6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:fc:19:32:f7:d8:84:04:6d:26:a4:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 25 01:00:27 2024 GMT
Not After : Aug 23 01:00:27 2024 GMT
Subject: CN=92074e5c-ae5b-4d80-86cc-14fcd219a171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:db:01:35:32:aa:76:73:a8:9e:f9:a4:43:
b4:b9:7f:e2:be:2e:c1:02:11:23:f6:b0:05:a2:8f:
6c:b0:5c:52:63:15:2c:52:af:5b:d1:37:70:fd:6c:
40:4a:05:3f:88:12:5f:cd:6d:35:36:e7:d2:fd:1a:
16:35:57:0f:a6:10:98:31:e6:16:78:d7:11:75:c4:
28:fd:83:dd:00:2a:e7:74:7a:10:6a:e0:49:c7:45:
f6:22:a7:7c:20:3a:8d:f0:60:d9:0e:bb:b7:c8:b6:
8e:38:3a:12:3f:8c:96:a7:d1:23:1d:2e:d3:07:85:
6e:4a:f6:a3:1b:d8:93:32:11:84:04:6f:2b:d4:0d:
f5:4f:d5:d9:dc:ed:f2:56:8e:e7:9a:79:57:8e:1f:
5d:44:d1:26:0d:88:8f:3b:a8:52:7a:26:d6:72:ef:
fc:c7:30:d6:23:48:32:12:49:aa:20:01:39:1e:56:
3c:c3:c5:4c:bb:76:aa:0c:40:f3:53:3b:17:68:58:
32:07:3a:c7:ce:64:f3:ad:ea:fd:bc:c0:b9:c3:50:
07:5a:6c:2c:c9:f4:f2:c9:ef:53:44:1b:c1:86:92:
76:04:e9:e5:01:1c:7c:14:77:16:d9:df:cd:7e:53:
1a:a8:03:96:3f:9e:27:ac:88:ff:55:8d:cb:f9:af:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AF:FC:0A:E8:19:59:71:1F:EB:B7:86:F6:EB:7C:9D:BF:8F:50:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4049308b-fd49-3f24-881a-b2d7b05505f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:b6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:ef:64:7f:c4:93:93:a6:b8:6f:cf:79:fe:05:6e:bf:4e:e1:
04:0d:db:c8:8c:f8:d1:67:82:56:03:93:52:2b:9b:2b:70:84:
98:67:7e:d5:49:48:7b:44:bc:c5:64:7d:03:22:7c:04:fc:0d:
8f:94:d7:37:ef:92:f5:19:19:99:2a:55:23:12:31:16:b4:d0:
8a:10:2b:6e:f1:53:ed:bd:8a:89:e3:ec:a1:1c:ad:77:2f:cd:
6e:f6:69:68:c4:f1:a7:0c:f8:33:3a:2f:ea:8b:77:5c:1a:6d:
ad:2b:d1:56:5f:90:ac:b9:76:51:c4:a2:64:0e:ba:af:5e:bc:
b6:a0:2d:61:08:e0:62:86:27:91:38:51:e7:78:1d:f6:3a:08:
1c:21:9a:e8:8f:e9:a2:2e:4e:2f:fb:a9:48:af:82:35:40:6b:
44:b6:33:99:aa:51:45:1e:5b:35:c5:91:6e:21:c9:a2:d5:aa:
f7:e7:01:62:f8:09:ed:e9:43:fd:d5:a7:c0:99:7d:bd:d7:95:
65:e3:07:66:a6:42:d0:9b:7d:7b:d9:bf:ad:bd:e8:ad:d7:20:
5a:79:e6:22:07:0a:d9:61:db:35:25:fd:2b:04:46:a2:00:1e:
5e:e0:c5:e2:58:72:46:0c:6a:77:ef:2d:90:23:09:1c:70:e8:
44:08:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:31:27 2025 by rpki-client