Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75c5a379-c80f-3a8e-b7c3-36385c13163b.roa
File: 75c5a379-c80f-3a8e-b7c3-36385c13163b.roa (raw, json)
Hash identifier: 6woeiIEqAOkUDdTEjpTeorjGLULHZ9O0jS2UAMnFQe8=
Subject key identifier: 5B:7E:E7:64:CE:E9:6B:51:50:1E:44:BE:B3:2E:1B:90:7E:48:BB:CD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858462B8ECC2BA6BF864D2735E000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75c5a379-c80f-3a8e-b7c3-36385c13163b.roa
Signing time: Tue 11 Jun 2024 01:00:24 +0000
ROA not before: Tue 11 Jun 2024 01:00:24 +0000
ROA not after: Mon 09 Sep 2024 01:00:24 +0000
asID: 6204
IP address blocks: 2001:470:1d8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2b:8e:cc:2b:a6:bf:86:4d:27:35:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 11 01:00:24 2024 GMT
Not After : Sep 9 01:00:24 2024 GMT
Subject: CN=a0cd9439-385b-488c-b8b5-a209ace067d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:99:94:c5:5a:95:2e:99:ee:88:cb:1b:f3:
64:3f:a9:f0:e2:11:4b:9e:6b:e4:05:03:33:44:7e:
a2:50:18:6e:35:5f:36:ba:36:5b:60:62:00:e6:dd:
09:e1:80:24:30:c4:c0:c9:77:fa:ba:8b:fb:e7:d7:
a0:82:24:39:01:52:42:f8:49:58:2f:2d:e9:23:25:
c5:f8:30:68:e6:c4:45:f0:1b:e4:ec:30:5c:9a:82:
91:8a:4f:c9:2c:43:f9:78:e0:48:19:c3:cb:e7:62:
57:cf:19:b5:d9:c4:49:a8:47:44:2e:18:70:bf:58:
57:bc:3c:d6:c5:b7:62:67:f5:79:c2:d2:54:71:41:
c7:d3:a5:e1:7f:02:33:34:57:d4:4a:40:0a:84:d9:
2e:8c:23:04:3b:1e:ea:e4:9c:c7:b2:22:94:02:98:
c9:95:02:62:7b:b1:d6:ae:08:47:2c:b0:de:c5:78:
e4:1e:75:9e:fe:94:d3:e1:5d:08:66:b6:0c:b5:2d:
86:76:cc:75:06:05:ab:04:42:61:c2:ec:dd:e6:02:
f6:5f:02:e5:4c:28:6a:c1:a2:fc:0a:14:d2:f7:08:
75:7c:0d:fa:d5:ed:e9:8f:e6:c2:ec:55:5d:65:2b:
8b:b8:58:26:cd:c4:26:d1:21:57:a6:bd:8c:c3:9c:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7E:E7:64:CE:E9:6B:51:50:1E:44:BE:B3:2E:1B:90:7E:48:BB:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75c5a379-c80f-3a8e-b7c3-36385c13163b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1d8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:f4:f6:ae:06:63:8b:6a:ce:eb:73:bd:c7:13:3a:8e:5b:a9:
46:e5:25:aa:f0:de:0c:d4:8a:0b:20:92:a5:59:e6:d3:ab:e5:
98:89:46:fa:7b:3c:a8:bd:55:ee:77:be:51:98:6d:31:4a:74:
5f:f9:dd:58:32:7b:c2:75:34:c2:e1:d8:27:48:91:50:74:19:
6f:45:58:10:9e:ff:88:c4:bb:51:b5:0c:77:6c:93:c0:b2:3d:
c4:db:41:f0:b6:6c:46:aa:de:b4:5c:7d:d3:79:c9:84:61:7c:
de:2a:c6:61:1b:7f:71:3d:96:6d:fa:31:b9:ce:d9:04:a9:9d:
8c:91:26:0e:18:bd:09:c6:a3:e8:c6:ed:0e:1b:38:b5:47:dd:
a5:5b:bc:cf:6f:78:88:ca:9f:81:f2:54:a9:00:07:50:e0:7d:
82:01:48:00:fa:b1:05:6c:af:9f:37:e0:fc:af:cc:54:25:fa:
df:b3:6d:4c:84:db:f2:05:1a:0b:d0:af:a5:08:c0:b5:fc:1d:
18:83:b9:ef:14:1d:f3:05:8a:27:74:f5:7f:b9:06:b2:61:8d:
f3:cb:1d:62:1f:47:f6:f0:e2:9a:b7:3c:bd:14:0b:01:ed:3a:
0e:26:5b:94:98:91:56:5b:6a:76:7c:84:6c:10:8a:7b:83:ad:
90:55:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:42:09 2025 by rpki-client