Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5dc6bf41-f0a0-3946-bbc2-a62c54af2fcf.roa
File: 5dc6bf41-f0a0-3946-bbc2-a62c54af2fcf.roa (raw, json)
Hash identifier: 8mBQT1RSwOnRfZ16SKUDyfuWjj08NEamclybotKJ/cA=
Subject key identifier: 91:26:B7:AA:2F:55:4B:4C:82:1E:36:F8:A9:23:7F:68:0E:1F:C6:D3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B3285151F898B22C77D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5dc6bf41-f0a0-3946-bbc2-a62c54af2fcf.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 63949
IP address blocks: 65.49.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:32:85:15:1f:89:8b:22:c7:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=bd71cd67-f173-4f9a-9973-e2bdf708858a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:25:9a:61:01:9b:e3:8d:79:cd:e5:29:51:
70:ee:73:e7:61:0a:cd:50:95:a0:90:c6:e1:97:6d:
bd:bd:60:3f:46:7f:36:d1:13:5d:e9:2e:c2:07:e9:
0b:ef:54:6a:e3:4b:c4:f5:4f:20:e0:08:ad:75:44:
e0:8d:ab:92:cc:d3:41:bc:d3:f6:7e:53:5b:d0:5d:
e8:96:d3:8f:23:9d:2a:d1:bb:f7:84:e2:9e:5f:11:
9c:eb:28:a1:2b:a3:6f:c2:85:bb:3f:29:20:89:d9:
c1:73:43:fb:09:5f:7d:2b:bb:5f:4c:92:42:cb:19:
57:6d:a2:56:3c:40:e3:7a:87:be:48:32:98:31:90:
44:83:14:6b:d8:7e:a8:d4:44:66:86:68:2a:c4:8c:
73:25:f7:a3:b7:7b:7c:fc:fe:74:2d:de:c4:9b:17:
92:e4:dd:a6:0c:6e:0e:81:48:c0:db:bc:13:d4:62:
ad:cf:26:f7:45:df:da:25:cb:31:e6:7c:9a:21:b5:
26:6f:69:cd:d6:83:8d:df:de:3e:91:93:1a:56:e1:
f1:29:28:fc:e6:96:5e:d2:0d:38:ea:84:0a:8c:81:
8d:72:ec:eb:4b:1a:d8:32:f3:6a:dd:53:5f:7a:1f:
3d:7c:76:3f:a1:1d:b1:fb:0d:04:83:a6:59:3e:4f:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:26:B7:AA:2F:55:4B:4C:82:1E:36:F8:A9:23:7F:68:0E:1F:C6:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5dc6bf41-f0a0-3946-bbc2-a62c54af2fcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:e8:a0:c8:55:5b:60:4f:71:ea:2c:d2:ff:27:28:87:de:cd:
ae:ea:00:92:79:e3:b3:b1:c6:e0:2f:34:c1:aa:75:8a:7a:57:
44:fc:b9:5e:0d:ef:98:d3:88:be:14:36:49:b4:9f:02:d7:58:
c0:05:b9:ab:29:3d:ff:a1:53:d6:71:31:80:b1:02:7b:bb:9e:
e9:fa:da:7c:f8:5f:8f:85:a7:57:61:52:bf:2b:be:55:75:ab:
57:10:6b:7e:86:9d:d1:9b:a4:f6:0a:15:ab:e4:f5:0b:59:0d:
ab:72:17:b7:8d:9d:b3:91:fc:4f:98:2d:98:72:a1:87:58:dc:
90:94:be:7f:bd:cd:09:42:88:f3:7a:97:f4:88:3d:d5:ac:83:
b4:52:79:c9:eb:75:41:ac:19:45:9a:d6:61:3d:02:93:68:0d:
71:0d:ca:6e:24:60:46:c5:66:09:19:65:d4:55:85:31:95:c6:
c2:07:d1:01:0d:ed:5d:ab:21:db:9a:62:b1:ce:2f:d3:1e:6b:
f0:0a:44:ea:12:4f:42:f8:0f:ec:1c:15:db:ea:b4:75:4b:b0:
77:64:32:eb:be:8f:e5:9f:4d:71:17:b6:93:28:44:03:76:c0:
31:fe:bb:df:72:46:aa:52:57:2a:8f:9d:88:5c:7c:db:6d:3e:
cd:f9:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:26:25 2025 by rpki-client