Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45ef40f2-c47c-3690-9a63-a6a1b3b37a1f.roa
File: 45ef40f2-c47c-3690-9a63-a6a1b3b37a1f.roa (raw, json)
Hash identifier: 8Ryl9ghoKrc7RonQt6HNEI8wivKzrBhI6kF5FA2ZiH8=
Subject key identifier: 7C:8B:75:31:9F:A5:0D:FF:C9:B2:5D:F3:DB:54:C0:22:93:C2:8D:7C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846C7F3D8E632D23356369C4FD0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45ef40f2-c47c-3690-9a63-a6a1b3b37a1f.roa
Signing time: Tue 06 Aug 2024 01:30:12 +0000
ROA not before: Tue 06 Aug 2024 01:30:12 +0000
ROA not after: Mon 04 Nov 2024 02:30:12 +0000
asID: 17473
IP address blocks: 2001:470:353::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:f3:d8:e6:32:d2:33:56:36:9c:4f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 01:30:12 2024 GMT
Not After : Nov 4 02:30:12 2024 GMT
Subject: CN=0dde704d-57e3-40c3-bf90-8c49e4e41be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:50:f1:28:e4:8f:de:e0:68:63:e1:6f:ab:
24:a4:39:f6:b4:d6:05:1b:3e:5f:18:f5:22:a5:a1:
d7:18:d4:63:8c:46:3d:96:ca:62:87:43:4c:ea:62:
58:68:3c:81:fe:54:f0:0c:cb:5d:d1:9c:75:b6:50:
1c:79:9e:63:4f:b7:83:45:d7:b5:e4:ce:3b:c8:36:
80:4f:8d:b3:59:51:56:c6:b1:3f:13:52:13:04:92:
4c:4c:ee:36:42:3d:51:7d:32:61:4b:b3:c3:38:37:
5d:29:2d:d7:6d:04:27:30:ed:34:85:62:6d:f2:41:
f2:50:14:00:ec:4e:f4:16:dd:b5:1c:bb:8e:28:e6:
29:54:ce:8b:ef:9c:86:eb:1b:f9:25:a3:76:6e:1b:
79:cd:af:ca:62:36:ed:f8:6d:dd:b2:20:e8:66:f5:
c4:38:94:23:bb:c3:d1:ec:01:7e:ca:1e:fc:97:a6:
07:2e:97:a7:c1:80:94:16:46:19:b9:01:eb:17:a4:
80:97:fe:50:8f:4e:b2:c3:a3:cc:26:21:53:cf:e3:
7d:7f:f0:ab:56:52:3d:65:84:2d:89:c7:24:5f:d5:
f5:84:a9:0d:ef:1c:b9:f5:c3:81:01:64:b7:ad:bd:
5b:15:03:23:ed:c6:19:b2:83:7f:1e:30:5c:ce:1a:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:75:31:9F:A5:0D:FF:C9:B2:5D:F3:DB:54:C0:22:93:C2:8D:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/45ef40f2-c47c-3690-9a63-a6a1b3b37a1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:353::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:30:8d:da:6e:5c:89:24:df:e0:e0:b1:52:02:58:1f:81:85:
2e:1e:f3:02:2d:60:f3:2b:70:9d:20:ab:ed:d8:00:3d:1c:ca:
9b:98:5d:79:c1:0e:73:2f:56:5c:6a:0a:17:ad:a3:3e:2e:80:
e2:10:11:23:60:85:4a:ce:9f:05:1b:c2:01:6c:6a:bf:78:58:
9a:ad:51:b2:6f:c4:d4:5d:87:5a:78:7f:0f:1f:73:72:57:19:
29:f5:b1:6b:a9:b7:b2:92:a8:be:76:9f:66:d9:53:f9:da:a4:
f5:79:71:37:5e:96:44:0c:7c:77:ce:11:5d:b8:28:63:cd:d9:
d5:c8:18:9e:83:8a:5c:04:17:5b:89:9f:f1:89:b6:ac:97:3a:
e0:0a:51:10:ea:87:36:09:27:d8:1d:e9:87:a2:78:43:c8:73:
15:93:b8:d3:d2:50:cd:6f:cb:66:c9:bd:34:05:1d:72:01:b7:
bb:1a:a4:e9:2c:84:18:9e:9f:f5:04:59:ff:85:39:8c:f9:1e:
62:ab:6f:c1:c7:50:2a:14:ec:b5:0e:91:5d:74:12:63:9c:34:
05:f7:45:01:ff:20:f1:85:65:0a:aa:b8:85:27:6c:05:01:41:
00:5c:71:bc:e1:7b:7c:ef:33:c9:41:5e:75:cf:b9:88:c9:b6:
70:ce:ed:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:42:07 2025 by rpki-client