Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6865947a-7ce2-3dfc-8a92-56a812546267.roa
File: 6865947a-7ce2-3dfc-8a92-56a812546267.roa (raw, json)
Hash identifier: aoWGMlg1rK83rne38IxG90zr3rCBbRt+4g5T69i/rvc=
Subject key identifier: A6:46:FD:29:FF:5B:9A:6D:F4:9C:D9:FE:A0:B5:02:6B:2A:5D:A4:51
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858476F74E5CC222B5A64EECB8680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6865947a-7ce2-3dfc-8a92-56a812546267.roa
Signing time: Sat 05 Oct 2024 01:30:13 +0000
ROA not before: Sat 05 Oct 2024 01:30:13 +0000
ROA not after: Fri 03 Jan 2025 02:30:13 +0000
asID: 36902
IP address blocks: 2001:470:3a1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6f:74:e5:cc:22:2b:5a:64:ee:cb:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 5 01:30:13 2024 GMT
Not After : Jan 3 02:30:13 2025 GMT
Subject: CN=34dd6dcd-ecc7-4652-8e47-9b39446a1599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:71:d5:d5:04:7c:81:c2:4a:53:20:ec:23:
7b:ab:7f:4e:19:e5:b6:bc:5e:15:55:ea:33:b3:42:
d8:16:fa:0d:82:26:1b:b7:ba:63:54:14:1c:19:94:
54:7d:19:3c:46:91:f3:c9:41:4a:41:45:c2:4b:1d:
05:93:e5:e4:2d:73:1f:5b:f8:d9:6b:8a:21:67:83:
27:02:71:e4:2d:4b:d6:ad:f2:c6:ed:6a:a7:a0:b1:
26:1b:90:10:b9:8d:08:92:15:5c:3a:a3:2f:1d:96:
2f:95:e3:38:a2:4f:ea:9d:5e:3d:9c:d0:1b:59:34:
d4:97:0c:1d:dc:33:3a:43:4c:98:4d:35:c5:6d:e8:
6b:3c:9b:70:50:e9:71:1b:b7:c5:99:7b:91:69:bb:
ae:18:b8:00:1c:17:ef:cd:88:3f:16:18:f3:04:cc:
e5:77:93:00:b3:3e:ab:a9:2f:11:38:4c:a6:2b:2b:
90:11:62:f5:7c:9d:5d:45:80:ee:c2:43:5c:b1:9d:
98:d5:ac:92:1f:5a:60:f7:c2:5f:7a:40:c1:c9:27:
e8:49:06:d7:d5:ec:47:c7:b2:69:3c:3a:32:b7:02:
35:fa:89:a9:dd:6b:50:26:d6:83:98:38:43:a0:06:
b9:16:bd:72:cd:8c:23:2b:f2:86:d4:84:fa:2f:d3:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:46:FD:29:FF:5B:9A:6D:F4:9C:D9:FE:A0:B5:02:6B:2A:5D:A4:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6865947a-7ce2-3dfc-8a92-56a812546267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:b0:8d:0f:e3:73:f3:81:5f:91:cd:31:e5:ed:1d:e1:79:84:
78:9f:01:10:2c:b4:ff:c4:97:b0:d0:7f:3f:a1:90:3f:15:17:
2f:50:55:4a:46:33:d5:db:ce:6d:29:52:26:b5:9c:08:c7:c4:
d4:60:a6:f6:0c:f2:0e:46:0b:7a:de:8e:87:ce:3b:c1:c5:2a:
cc:9d:96:48:21:ab:c9:7e:09:64:6b:5a:4c:93:4d:db:3e:6b:
72:5a:fc:de:6d:9f:7d:6d:78:ef:8f:e4:e0:e0:ed:7d:b1:9a:
ab:cd:d5:14:6c:64:ef:89:5f:d2:05:26:2f:36:5c:e9:ce:79:
87:a2:66:3a:63:4a:50:11:7e:79:d6:f9:c4:18:c3:85:91:04:
c4:cd:e7:65:1d:ec:dd:69:9d:c5:db:23:a9:f6:d9:6c:07:80:
71:8b:a1:40:11:30:6a:e6:bf:db:21:0f:02:f1:52:aa:66:70:
79:a6:f9:da:f1:7a:dd:ad:af:7d:ae:92:78:b1:43:ca:60:aa:
11:c0:1d:c4:cb:64:dc:66:06:9c:c1:dc:4b:2b:8b:4a:69:6d:
d2:c2:6d:02:f9:a7:9e:65:18:fd:17:6d:01:68:69:2c:19:e5:
d5:ee:64:33:43:92:d2:96:da:6b:5d:e8:5e:61:4f:b8:2d:73:
06:24:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:22 2025 by rpki-client