Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8539375b-43fe-31f3-a2e8-eac04fce7d3a.roa
File: 8539375b-43fe-31f3-a2e8-eac04fce7d3a.roa (raw, json)
Hash identifier: A3IAqrzhAoZHk4KwdwxFMMcuK4NSLI4F1IHCs8uebgI=
Subject key identifier: 4D:CD:7A:6B:A1:DA:89:DF:D7:70:3C:A1:2C:47:DB:A8:C1:B3:5A:C0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846E3DEB1B2ADFDCA35C9F44640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8539375b-43fe-31f3-a2e8-eac04fce7d3a.roa
Signing time: Fri 16 Aug 2024 01:30:13 +0000
ROA not before: Fri 16 Aug 2024 01:30:13 +0000
ROA not after: Thu 14 Nov 2024 02:30:13 +0000
asID: 399503
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e3:de:b1:b2:ad:fd:ca:35:c9:f4:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 16 01:30:13 2024 GMT
Not After : Nov 14 02:30:13 2024 GMT
Subject: CN=a330b9c0-3d9d-40f0-a89b-bfd11bed00bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a6:b3:06:3f:2f:f2:dc:c7:f0:fa:06:15:44:
ec:20:f6:e7:ec:96:15:e9:8c:d0:53:03:9a:1e:6a:
84:74:59:73:38:db:a6:6f:12:d5:ce:2f:03:10:7a:
44:8b:3b:70:db:bb:0c:3a:5a:83:87:f4:7e:1d:00:
4e:46:1a:68:4b:7d:cb:9b:09:0b:a1:2e:f4:31:56:
0d:72:76:e1:f7:7a:df:fa:ee:4d:2d:f3:c6:57:e2:
6a:05:e8:d9:0b:ae:71:33:2d:b2:8f:48:a7:33:46:
e4:92:cd:97:c6:22:7e:3c:4d:ef:c3:9f:d0:92:03:
d4:b0:22:01:56:2c:70:47:65:a7:8b:0d:4b:5c:e0:
19:8e:ab:ce:23:04:72:97:7a:1e:2a:fe:f9:76:b1:
6e:65:6f:74:33:1a:4a:59:f5:14:9e:bc:22:53:44:
6d:ab:db:d7:e6:24:be:bf:ba:58:71:75:b6:8a:fd:
6f:60:49:cc:d2:91:53:50:27:ae:89:93:79:4f:d4:
02:99:0e:96:89:07:87:e0:46:6f:73:a1:8f:44:bc:
d1:90:c4:7b:f5:3a:75:cf:cc:c0:2d:8d:9c:d5:9e:
88:f9:76:3e:96:7e:0d:bf:e5:3f:0b:5c:e3:82:4a:
a6:ad:95:43:b0:7d:d5:76:94:b1:2f:83:86:ec:25:
38:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:7A:6B:A1:DA:89:DF:D7:70:3C:A1:2C:47:DB:A8:C1:B3:5A:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8539375b-43fe-31f3-a2e8-eac04fce7d3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:8a:35:df:d6:ca:f2:5d:85:bd:b4:61:a7:21:3b:a0:7e:a0:
21:3b:d3:b5:af:6e:13:5e:d7:60:70:02:04:bf:e7:62:22:90:
74:4d:0f:07:82:39:ce:ae:73:68:b5:79:2f:13:ee:de:72:a3:
dc:71:eb:97:65:46:2e:9d:38:aa:2e:97:95:7e:9f:a3:03:3b:
83:e6:bc:b4:b6:93:7d:8a:f3:58:3a:82:cd:62:0e:ea:04:6f:
aa:71:85:2a:4a:5b:e8:22:33:d4:56:af:26:3d:d4:f4:a2:e0:
0a:4b:c3:ce:07:b5:60:49:de:49:a7:9d:b4:13:13:4d:e8:c9:
7c:54:36:bc:48:8e:e0:8d:0f:f8:4e:26:6e:34:f5:fc:1b:eb:
33:b7:2c:02:ec:36:0b:98:c4:62:5c:42:93:6e:9c:67:03:d9:
83:83:b9:65:43:e7:07:4b:e6:e4:7e:50:fd:06:30:95:58:a9:
55:e5:8b:36:28:2b:7e:84:8c:d3:16:0c:92:f4:7e:a8:f7:ab:
87:31:1c:ad:1d:b8:b7:3a:d3:b5:75:c3:d1:c8:a1:2e:84:ff:
be:db:53:3d:08:37:f5:40:3b:ca:bb:40:3e:d9:a1:b0:d8:90:
85:d1:a5:db:95:a4:49:98:84:5a:59:7f:20:7c:ca:85:3c:23:
59:37:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:40:27 2025 by rpki-client