Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65a48765-4afd-38e2-8ae1-0db0e87efddb.roa
File: 65a48765-4afd-38e2-8ae1-0db0e87efddb.roa (raw, json)
Hash identifier: Dij6ekwtEQQU/1SGrn1uavICPjBgTR0ralg4Nt4cJ4I=
Subject key identifier: 15:97:12:19:CA:C3:B3:98:C4:0C:F4:ED:DE:FD:E6:90:B3:3B:E3:84
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858476F74DC1FC708605B1170D080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65a48765-4afd-38e2-8ae1-0db0e87efddb.roa
Signing time: Sat 05 Oct 2024 01:30:08 +0000
ROA not before: Sat 05 Oct 2024 01:30:08 +0000
ROA not after: Fri 03 Jan 2025 02:30:08 +0000
asID: 51259
IP address blocks: 2001:470:3a1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6f:74:dc:1f:c7:08:60:5b:11:70:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 5 01:30:08 2024 GMT
Not After : Jan 3 02:30:08 2025 GMT
Subject: CN=23416afe-1c23-4475-9aef-5540a11a8658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:43:83:6e:f3:a6:df:d8:bb:2a:2e:d1:cf:64:
55:59:61:83:03:12:29:ab:95:fb:2e:db:05:d8:e9:
43:d5:ad:3d:48:9f:27:90:d8:fd:99:87:4c:b9:7e:
28:a0:ab:35:3b:36:07:8f:3f:71:47:ce:1a:73:8b:
fe:5a:d8:8b:d4:3b:ce:29:71:ff:ac:f9:bd:cb:da:
9a:3d:24:4d:69:3a:6e:3a:43:75:54:36:bc:ee:b6:
10:67:cf:74:e8:8e:22:20:d4:13:52:c7:16:cf:96:
8b:54:bf:10:24:85:b0:d6:60:23:91:21:eb:48:3f:
e6:fe:9c:1f:a8:24:9a:bf:40:60:8a:b8:20:a9:3e:
fd:73:62:be:41:c9:6f:af:32:5d:3b:18:5b:69:93:
58:c2:fa:32:76:86:1a:79:a7:91:62:d1:18:71:01:
8a:16:48:c8:b1:fb:85:2e:aa:2a:95:78:de:bc:16:
20:8f:b2:26:a6:b6:85:a1:5f:21:db:9c:ae:94:19:
a5:be:35:6b:9c:c8:9b:66:0a:a4:65:9b:6c:0f:39:
2c:63:a6:ee:b7:6e:85:bc:44:4f:78:88:eb:80:d2:
92:57:46:0d:b2:05:0f:79:31:51:a0:98:5b:d8:72:
2b:69:d2:1b:3b:e4:0d:a1:6b:d5:0e:ac:43:08:6d:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:12:19:CA:C3:B3:98:C4:0C:F4:ED:DE:FD:E6:90:B3:3B:E3:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65a48765-4afd-38e2-8ae1-0db0e87efddb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:b8:6e:c1:39:0c:75:d3:c2:96:4e:32:71:1b:02:14:c6:0d:
d9:6e:ba:8c:3f:61:d6:39:5b:07:f6:df:95:5f:a4:69:77:12:
a2:69:29:01:60:48:75:4d:24:70:bf:8c:4f:23:7f:e1:35:f0:
ca:55:e5:8f:69:65:c8:83:41:95:76:53:9e:29:f1:f0:44:61:
80:56:bc:77:5b:05:55:72:78:09:c0:3c:9a:08:1a:bf:2a:1f:
37:b8:13:d4:de:48:9f:23:5b:3a:12:0f:27:67:07:1a:f9:30:
9a:49:b3:3c:31:4e:69:55:15:b1:95:61:c2:71:6d:a2:cc:04:
7a:5f:83:53:d7:64:d5:a8:31:f2:29:a9:23:e0:cd:d0:90:7b:
57:66:d8:1c:2f:98:a0:d7:e6:96:5e:55:f1:9b:6e:6e:90:c2:
5a:fb:80:b1:57:9e:c8:ad:a0:85:d8:8e:93:7f:10:53:17:b4:
50:31:98:47:77:ac:42:a1:51:d0:6b:28:85:d5:5a:6b:e9:9b:
38:21:77:f7:0b:9e:99:53:44:25:8b:22:e2:6b:ca:4a:c0:c1:
c2:e1:80:bc:c6:f2:9f:f9:c7:7e:b3:33:b6:f9:86:85:10:7a:
e0:25:27:78:33:22:a0:97:33:c6:52:07:c7:19:c4:f1:da:21:
b2:2e:7a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:00:54 2025 by rpki-client