Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82f14a9c-f938-3522-b1e9-703b0337c7e9.roa
File: 82f14a9c-f938-3522-b1e9-703b0337c7e9.roa (raw, json)
Hash identifier: OFzU3msa2akBvVJO/CmdsFwQk3RzucVh2OeaLPW4yP0=
Subject key identifier: 9A:09:C6:CB:28:C4:4B:5F:B6:43:7B:92:30:BA:2D:F7:F3:7A:E1:4F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846C7F3DDE9ED5FA52B5E9AA980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82f14a9c-f938-3522-b1e9-703b0337c7e9.roa
Signing time: Tue 06 Aug 2024 01:30:14 +0000
ROA not before: Tue 06 Aug 2024 01:30:14 +0000
ROA not after: Mon 04 Nov 2024 02:30:14 +0000
asID: 202673
IP address blocks: 2001:470:353::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:f3:dd:e9:ed:5f:a5:2b:5e:9a:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 01:30:14 2024 GMT
Not After : Nov 4 02:30:14 2024 GMT
Subject: CN=b31a9b14-8cad-4516-a19b-aee9b73a9f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:46:c4:c9:63:34:90:6a:2a:f5:19:63:17:d8:
3e:33:b4:c6:49:d3:f9:c4:e7:70:79:a2:c5:9a:e7:
14:d3:86:06:37:56:3d:2f:e6:a8:5a:82:90:0b:61:
90:55:9d:92:bc:11:50:57:fa:5c:da:87:fa:c3:af:
60:f7:7a:aa:a1:46:d0:66:eb:b4:0c:e2:68:11:9d:
d6:d2:61:99:d1:65:08:34:3e:eb:88:3d:27:88:d2:
51:41:46:33:6e:56:7d:8a:62:ec:ea:8f:ba:cc:bc:
52:41:5e:47:e2:8f:3a:1f:be:6a:56:cd:fd:b3:2a:
0b:79:f1:e8:bc:77:99:c0:93:5a:18:c8:33:e9:54:
79:19:7a:e2:79:53:0d:e2:0e:56:de:c9:0d:c9:50:
e0:35:76:73:f4:ee:14:88:9a:ab:20:10:4e:c4:09:
80:d2:18:d8:26:f2:05:4d:2c:a6:68:5b:90:b7:60:
e5:33:2a:91:f0:eb:99:56:a3:9c:ca:37:1b:33:29:
66:6e:f6:8f:10:ad:2a:9e:8b:ee:d8:b4:1b:dd:0c:
76:af:69:40:23:ed:d3:95:6f:1b:22:3a:07:54:29:
d7:3b:f2:b9:d9:de:c7:1a:17:e5:3a:db:65:45:0c:
62:01:ac:00:b9:ee:81:24:92:ea:d2:8f:6c:3d:bc:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:09:C6:CB:28:C4:4B:5F:B6:43:7B:92:30:BA:2D:F7:F3:7A:E1:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82f14a9c-f938-3522-b1e9-703b0337c7e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:353::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:28:ed:5b:f7:7b:f2:2b:4f:2d:19:c6:48:dc:e0:8a:dd:f2:
b9:56:cf:4f:8a:66:79:e5:57:d6:61:bc:c1:af:fb:c3:83:f0:
45:ad:70:38:08:a8:52:b6:d7:6c:c3:5b:e1:d0:f1:8c:9f:c9:
0a:35:7e:08:c1:5c:94:59:35:0d:24:2b:d5:e2:4d:cc:2f:bc:
de:f1:86:dc:12:3a:b3:1a:d1:b5:1c:1b:90:4b:5b:b7:9c:4e:
f1:f3:ac:9c:34:bc:1c:0f:c9:99:9a:8f:9a:d4:da:d3:01:21:
f3:f5:62:6a:21:a7:31:92:98:03:5b:37:b6:01:1c:37:61:45:
b1:da:77:b8:bb:f6:54:d6:00:e3:a2:d6:95:a5:35:18:30:93:
34:3f:57:ba:f8:58:be:c6:a0:43:12:fd:5d:2d:b6:e6:03:73:
f1:2b:fc:b5:69:26:39:13:be:75:8d:99:dc:00:f5:e5:86:b7:
8a:dd:2a:c4:e8:4e:c3:4f:15:8a:41:93:97:1d:b2:43:b7:40:
48:11:2f:c7:63:2b:63:0e:2e:1e:8c:a2:25:aa:fb:5f:92:af:
41:9a:72:c9:be:40:ee:3c:fb:dc:69:c8:48:2e:af:e9:ba:c6:
d3:f3:90:02:eb:bb:14:b7:0d:aa:0b:b9:6d:db:28:3e:ba:9d:
1b:d6:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:29:37 2025 by rpki-client