Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/689ff4cf-f327-361f-b572-a1726143c94e.roa
File: 689ff4cf-f327-361f-b572-a1726143c94e.roa (raw, json)
Hash identifier: zs0oqTPnCgPLr6ViYULapTamaaGkAvnbtnmg+IeZUpM=
Subject key identifier: 63:56:BE:A8:21:53:DB:72:F7:D4:5D:11:CC:68:95:1D:25:EF:FC:64
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846312428E079CF35456B46CF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/689ff4cf-f327-361f-b572-a1726143c94e.roa
Signing time: Thu 13 Jun 2024 01:00:25 +0000
ROA not before: Thu 13 Jun 2024 01:00:25 +0000
ROA not after: Wed 11 Sep 2024 01:00:25 +0000
asID: 135069
IP address blocks: 2001:470:1d9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:31:24:28:e0:79:cf:35:45:6b:46:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 13 01:00:25 2024 GMT
Not After : Sep 11 01:00:25 2024 GMT
Subject: CN=80ce9cca-7e70-4a73-ac77-defc93c7d973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:4c:2e:dc:05:e7:ca:9c:db:4f:53:42:58:
29:00:2f:69:2d:e4:37:78:aa:04:ec:b2:62:3a:a3:
1e:bd:32:f2:ce:be:95:39:10:7b:d2:bb:ef:96:d7:
96:07:0e:71:69:59:4d:ae:ec:30:68:f7:ce:16:62:
3d:f8:dc:61:1c:6c:8e:36:01:d9:c9:84:ae:bb:89:
92:1d:18:c9:8e:ab:7d:e5:44:ce:f6:cd:f3:8e:a3:
a2:8c:06:ab:21:a9:7d:7d:69:74:c6:a4:b2:08:74:
8c:e2:ab:48:c3:8a:19:ff:37:53:07:b9:48:32:14:
90:dc:79:44:79:e2:38:66:1f:cf:d7:9b:a0:19:0f:
df:3a:05:82:cf:9d:77:b5:b5:16:4d:48:70:31:62:
28:11:35:9c:56:ef:21:09:48:d8:b2:6e:18:0b:0a:
4c:45:70:3b:b4:92:f4:7f:b3:cf:3f:16:c0:b2:10:
fa:7e:f9:89:b7:8f:b0:94:0f:6b:bf:8b:2b:f7:5c:
19:22:1f:52:71:0f:ff:b8:6d:71:10:23:69:f0:b1:
c6:8f:05:6f:7d:d2:59:34:0d:18:ed:75:c2:79:f6:
e8:79:61:cb:bc:7e:6d:c3:68:69:b6:0a:67:90:b2:
06:ec:68:68:29:0e:21:b2:7d:73:d5:06:32:c1:ef:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:56:BE:A8:21:53:DB:72:F7:D4:5D:11:CC:68:95:1D:25:EF:FC:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/689ff4cf-f327-361f-b572-a1726143c94e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1d9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:e8:be:91:25:03:13:66:58:4d:6c:5f:38:ce:fe:e1:f0:32:
f4:e6:19:77:62:4d:07:db:df:14:b4:e0:3a:df:f3:8e:70:9c:
45:be:54:98:6f:86:5a:69:e6:c7:41:0d:ad:39:88:7c:73:5c:
50:cb:e9:77:ad:82:4f:9b:7c:33:f2:c0:c7:67:43:64:89:89:
d5:0c:6a:7e:28:13:0f:f5:74:e1:49:59:d9:80:dc:8b:80:51:
02:52:e6:34:cb:9f:8e:1c:9f:eb:58:c9:54:61:d5:ff:0b:cf:
38:e3:03:f2:fe:a8:f5:a4:9d:1b:45:0a:cd:73:16:08:21:70:
a2:af:04:57:1f:5e:e9:28:40:e6:9d:1a:5f:7e:02:55:e9:dd:
f5:70:03:1e:95:49:50:27:8c:50:c4:19:e8:d6:c2:2d:3d:38:
69:7b:28:07:a3:0f:4b:98:98:7c:cb:b7:ed:95:3f:d4:06:70:
2e:cf:fb:41:32:1c:71:3d:8d:77:1c:77:46:b4:90:0c:ff:93:
55:32:ef:3f:4f:01:60:62:d2:25:32:18:a6:04:57:c9:f2:ef:
a6:6c:92:ac:87:6d:db:64:3f:e2:4a:7a:ec:1e:de:06:dd:7b:
6e:75:0f:7a:a9:e0:7b:f5:57:66:91:d7:f8:60:34:25:73:39:
aa:f8:73:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:44:55 2025 by rpki-client