Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/608cc139-9eb9-34a0-8a07-f7121c1693fc.roa
File: 608cc139-9eb9-34a0-8a07-f7121c1693fc.roa (raw, json)
Hash identifier: P2FLPBBNofsWTIgee5n7Z31u11L+WhS9OuYJDbEtJ5I=
Subject key identifier: 82:C1:62:98:82:FB:E0:EA:63:C7:21:D3:0B:52:94:2D:70:A7:2B:A3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846D5E93C68FD2E0AF03F5D5F40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/608cc139-9eb9-34a0-8a07-f7121c1693fc.roa
Signing time: Sun 11 Aug 2024 01:30:08 +0000
ROA not before: Sun 11 Aug 2024 01:30:08 +0000
ROA not after: Sat 09 Nov 2024 02:30:08 +0000
asID: 17473
IP address blocks: 2001:470:354::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d5:e9:3c:68:fd:2e:0a:f0:3f:5d:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 11 01:30:08 2024 GMT
Not After : Nov 9 02:30:08 2024 GMT
Subject: CN=408deda5-da1b-421a-b7ef-0986270a18f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:19:5f:21:a6:f8:48:a9:31:93:78:0f:aa:5c:
c0:82:25:9a:6d:f7:38:4b:f1:4f:7a:eb:47:3b:3b:
a0:ec:bd:01:df:e4:6f:e5:30:b4:92:b1:6f:69:b7:
f9:ee:26:6d:3b:62:8c:86:b1:48:60:13:86:28:e4:
7f:7c:d0:51:46:37:2d:65:9e:8f:d2:2b:78:1f:f3:
6c:e3:1d:e4:73:a9:9b:5e:30:18:11:d2:54:63:b5:
3d:89:90:c7:43:c1:35:a1:16:1e:0d:d3:41:a8:1d:
ef:e2:61:02:0c:62:09:cf:2d:73:d2:a6:8c:57:fd:
9c:96:06:a1:98:4e:f6:ff:6d:93:fa:35:ea:b6:89:
64:81:33:b9:c1:f5:bc:c5:3f:50:ab:e8:23:e4:1d:
a4:6f:78:f8:6d:33:a1:4b:aa:a5:cc:e2:40:f7:33:
75:ac:f8:77:80:f9:11:46:4c:f1:5d:a7:c8:5c:45:
e0:c5:2c:6c:59:ea:3d:f7:65:12:3e:a6:44:7a:2d:
63:98:1e:0f:e7:db:83:67:87:c6:a8:41:3e:cb:31:
78:77:e5:b9:17:36:44:c9:f7:69:8f:06:0d:7c:b4:
73:1b:f6:44:74:01:f8:e0:c8:cf:fd:ab:de:12:1d:
b0:8e:48:ba:aa:e1:ff:da:ff:0d:a5:67:98:22:54:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C1:62:98:82:FB:E0:EA:63:C7:21:D3:0B:52:94:2D:70:A7:2B:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/608cc139-9eb9-34a0-8a07-f7121c1693fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:b5:78:af:6e:ac:7f:62:d1:56:61:2f:bf:0f:42:c4:e5:19:
a1:00:6f:c3:6c:c9:75:f7:e6:f4:e7:7a:fa:0f:a1:cc:8a:37:
08:f0:f3:8d:b5:2b:25:2c:f6:23:7f:6b:e0:36:46:76:0b:2e:
ba:2f:23:a5:ad:25:aa:36:81:f9:04:cd:2c:b0:e7:e9:be:d2:
7b:36:db:37:a0:37:a1:20:d6:e0:2c:ce:26:26:b7:d3:a7:3c:
b5:3f:fa:53:b1:ef:fd:91:be:aa:c4:8f:81:ef:8d:f8:b8:59:
d3:f5:16:bd:b9:f4:28:6b:99:36:5c:e0:5e:13:6e:c7:83:30:
fb:ea:52:ef:8e:10:f1:59:20:4e:9f:58:e1:c2:4c:46:36:f6:
b2:4e:c2:72:ec:ae:9a:56:ba:f2:79:3d:8a:3b:ed:1b:02:0d:
b4:38:8a:12:93:96:9b:d2:99:8c:ea:11:58:81:55:0c:1b:3a:
9a:53:b4:c9:29:f2:db:b1:b6:4a:b1:69:64:37:20:ca:97:4d:
b6:19:2f:68:5f:c6:75:c8:d0:f0:46:92:9a:6a:a2:06:c6:7c:
c3:61:e0:19:63:04:a0:90:96:1c:eb:49:da:b2:60:76:7d:36:
7a:07:91:e0:12:aa:20:3f:51:8f:99:36:92:d0:35:10:e6:a2:
88:db:cf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:32:54 2025 by rpki-client