Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/536e84b7-06c6-37c1-a0d3-81ca5330404a.roa
File: 536e84b7-06c6-37c1-a0d3-81ca5330404a.roa (raw, json)
Hash identifier: V18XfopfCPLcxvpmvRZFrzvX6yAWHkoI3+buQ2QJqgw=
Subject key identifier: B8:4F:F0:54:C2:28:88:CD:6B:D1:0B:EF:CB:3B:76:A3:D5:D1:24:07
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858464779B8C6ED25E4690C6E4180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/536e84b7-06c6-37c1-a0d3-81ca5330404a.roa
Signing time: Fri 21 Jun 2024 01:00:26 +0000
ROA not before: Fri 21 Jun 2024 01:00:26 +0000
ROA not after: Thu 19 Sep 2024 01:00:26 +0000
asID: 10352
IP address blocks: 2001:470:1e5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:47:79:b8:c6:ed:25:e4:69:0c:6e:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 21 01:00:26 2024 GMT
Not After : Sep 19 01:00:26 2024 GMT
Subject: CN=bd1d54ac-58b3-47ed-a477-cf450dfa443a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:cd:86:5c:f1:9a:b2:f5:41:ae:d6:fe:ae:
12:02:6f:31:67:bc:ec:6a:d2:26:ed:8d:10:ff:60:
17:3d:9c:f9:94:08:bc:e7:0b:ec:62:16:6a:bb:b9:
21:f4:f5:4f:aa:f7:10:23:0d:05:2d:4a:62:71:44:
36:81:09:a2:d2:82:59:97:a2:b7:33:13:33:8d:b3:
7a:0e:a5:ac:27:db:7a:fa:31:c4:ec:0a:0b:3d:8c:
3f:4b:16:d5:58:97:b9:e7:47:89:a5:9b:74:cb:78:
df:5d:e1:a0:00:1e:9c:b1:99:4d:9a:a5:7a:59:38:
28:c9:92:54:42:51:90:05:75:2a:32:98:73:c5:36:
ab:5f:59:f1:41:da:59:de:b1:cd:dc:29:5b:36:b6:
0e:c7:95:56:88:e8:e8:f0:43:04:4a:62:a0:d2:77:
59:52:8e:6f:f1:1e:60:8f:50:4a:3d:a0:8c:fb:ad:
5c:da:3c:33:17:95:e2:5d:be:c7:32:0c:5d:83:a1:
fc:8c:51:c8:6c:b2:ca:1f:52:cc:34:33:50:95:c0:
ad:ab:58:47:f4:92:5f:85:5a:06:35:8c:a6:c8:b2:
30:ea:f9:ba:6c:f2:9b:14:b3:81:69:5a:d5:e8:f7:
b9:29:c3:a4:38:c0:35:56:d4:d5:1f:37:95:5d:e8:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:F0:54:C2:28:88:CD:6B:D1:0B:EF:CB:3B:76:A3:D5:D1:24:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/536e84b7-06c6-37c1-a0d3-81ca5330404a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1e5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:17:61:6e:24:a5:f7:c4:ef:a5:36:0b:f2:ea:e8:08:d1:54:
65:e6:ea:8f:e2:6b:c5:ef:16:41:d9:1f:e2:3c:9e:91:09:f7:
89:e4:c1:bb:ce:98:ee:c0:2f:27:02:30:79:7b:95:8b:23:3f:
0e:28:69:ec:5b:1d:c4:1f:26:c7:bf:bf:4d:dd:35:1e:9a:8d:
a8:db:57:1a:7a:a2:0d:9d:c3:d6:1f:0d:b9:09:5b:a9:d2:51:
f1:2a:19:f4:eb:bd:5f:cd:e6:03:88:f1:16:07:d4:06:d4:a4:
db:c3:e6:85:3a:d1:49:0b:ce:d1:b4:c0:03:f5:53:01:38:e3:
ed:d9:ad:62:52:0e:2a:bd:83:b0:a6:6e:b3:21:a9:f6:09:b5:
5e:69:b5:b0:b2:bb:90:36:a5:23:87:1e:d2:c3:e5:16:a0:58:
27:cf:04:c8:07:78:55:34:0a:1a:dc:a1:a9:c1:6a:8d:0c:eb:
b4:85:73:50:bb:b0:d6:d6:d0:ab:88:6f:cb:cb:ca:68:88:72:
33:d5:70:33:48:44:52:11:05:39:63:77:75:20:87:5a:e0:40:
bc:a3:6e:28:10:5c:e7:9e:48:bc:73:5b:c5:f6:83:92:ed:51:
9e:fb:22:fd:24:50:90:48:78:ac:9c:56:0e:dc:52:9a:b6:eb:
16:6d:ac:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:37:18 2025 by rpki-client