Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/432dd05c-35e0-3485-8df2-ab585c061e22.roa
File: 432dd05c-35e0-3485-8df2-ab585c061e22.roa (raw, json)
Hash identifier: kczdWguVOslTBIPgrHAVfasTFJotG4DSfxhMC6BA2r0=
Subject key identifier: E1:63:18:D8:15:DD:52:E2:4F:3A:48:20:4B:20:13:60:F2:47:88:96
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858475BEA1B6EBEDC34200BCA20C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/432dd05c-35e0-3485-8df2-ab585c061e22.roa
Signing time: Sat 28 Sep 2024 01:30:12 +0000
ROA not before: Sat 28 Sep 2024 01:30:12 +0000
ROA not after: Fri 27 Dec 2024 02:30:12 +0000
asID: 48347
IP address blocks: 2001:470:398::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:5b:ea:1b:6e:be:dc:34:20:0b:ca:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 28 01:30:12 2024 GMT
Not After : Dec 27 02:30:12 2024 GMT
Subject: CN=3eea99de-9ce1-4946-a970-f4c9f07f420d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:db:40:3f:65:fe:81:66:33:4c:25:2f:a4:
da:b7:08:ed:fa:98:8c:57:62:08:08:40:8c:82:eb:
00:b7:af:22:5a:b3:b7:3b:c3:9f:64:6a:ba:4d:96:
00:9c:b4:85:f7:56:f4:8e:09:55:26:1d:40:7f:20:
9a:32:5e:ce:90:98:fd:0f:3a:8e:ce:65:bf:78:4d:
a6:b3:aa:f5:91:e5:e5:16:c5:96:fe:4d:ec:3d:e3:
d7:f0:1e:2c:3b:c7:94:ec:2b:1e:9e:8f:b6:09:be:
b3:85:3f:3a:13:1f:fd:a5:e9:c1:f5:1b:85:84:ea:
ec:91:40:95:59:03:95:2a:26:28:d9:8e:8c:87:5a:
f9:12:10:27:01:34:cf:e3:82:8e:02:c7:0f:40:c4:
69:35:0a:6a:b7:d4:5a:34:15:18:24:95:70:8d:d7:
42:da:e5:8a:73:78:fd:a0:96:f1:d2:04:00:1d:8b:
87:a1:a4:89:12:f1:03:12:4e:8e:f7:8b:21:50:c6:
16:af:19:b8:9f:48:73:c5:71:08:56:fb:ae:c5:75:
e2:b3:90:2f:3b:04:66:72:d4:1e:1a:f3:61:4d:9e:
6c:8d:bb:0e:5e:a5:c8:08:cc:43:66:54:e6:21:bc:
da:0c:57:a8:75:10:34:cf:4f:3e:0c:f1:b6:8e:b3:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:63:18:D8:15:DD:52:E2:4F:3A:48:20:4B:20:13:60:F2:47:88:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/432dd05c-35e0-3485-8df2-ab585c061e22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:398::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:42:be:09:0d:98:4c:b7:50:ef:b9:f6:77:68:ae:71:3f:da:
4f:75:c3:26:e9:ab:7d:c4:81:38:8a:91:06:dd:77:54:f2:43:
a1:f7:af:88:13:95:9b:b8:aa:f7:7b:4d:b2:78:85:d7:9f:4c:
8c:d0:06:40:c4:0d:dd:99:00:3c:23:b8:8c:5f:48:5d:8c:5e:
ad:fa:f2:8b:07:42:e3:86:02:e3:81:53:89:5a:27:63:eb:33:
d3:7e:ca:e4:40:64:db:72:79:5e:bf:2b:c9:d9:aa:62:ec:16:
44:8d:80:66:de:44:82:9b:2a:c6:e7:ec:5d:4f:56:9a:f1:fa:
1e:36:8c:2c:9a:1e:2f:e6:90:5d:30:3b:96:68:c4:a8:9f:d5:
c4:ff:d7:c3:5a:55:62:4c:6f:cb:78:3a:0a:25:08:fe:9b:03:
4a:97:6b:1b:b8:95:33:e4:27:76:23:83:3e:70:d9:a2:fc:17:
a2:83:2a:63:eb:df:ce:d4:fb:dd:a1:fc:78:e3:aa:dc:c9:e3:
90:be:47:26:93:83:37:38:3e:47:02:33:d4:ce:e8:64:64:bc:
ef:03:7c:2f:5a:1f:c8:eb:3d:7b:73:e5:37:08:a0:36:1b:35:
d6:b1:20:ce:ac:9d:89:df:19:89:3a:07:0e:11:4b:c6:c1:09:
64:57:3e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:18:20 2025 by rpki-client