Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87413465-1c6c-3310-8c45-63edd6e0c439.roa
File: 87413465-1c6c-3310-8c45-63edd6e0c439.roa (raw, json)
Hash identifier: LBg56FeLVE6Ra8ZVKNQ2/dsxkP8pPHIsEpiBXyaaGsg=
Subject key identifier: 20:3E:1E:32:C7:87:0A:04:51:AB:DC:8F:55:A8:7D:71:2C:6C:FE:F2
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D014E2D82AEE19714136C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87413465-1c6c-3310-8c45-63edd6e0c439.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 45735
IP address blocks: 2001:470:1f5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:14:e2:d8:2a:ee:19:71:41:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=d1509141-7b6b-44f7-8610-b456606fca74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:52:17:8d:e7:09:a3:c3:8e:db:0b:11:e9:
9b:19:ab:5e:76:24:7c:6b:d3:a4:23:ae:ce:41:9f:
5f:37:af:61:0c:c2:5d:75:be:03:d3:1c:18:00:c1:
71:01:84:91:f8:39:20:10:b2:3b:0f:8f:c0:fd:05:
cc:ba:70:06:3a:d7:b7:c3:34:a4:a6:77:4a:21:0c:
ec:05:38:b1:3a:d2:2a:0f:b0:dc:d6:d6:7c:13:c6:
e0:57:97:b4:06:fb:e1:43:ab:d4:dc:eb:2e:5d:27:
54:49:5a:ea:14:de:ab:6b:5a:09:20:a4:94:ac:f9:
db:dc:40:02:75:a7:93:83:77:e2:f8:8f:fe:0d:4b:
af:ae:4b:74:1e:83:31:b4:31:1c:0e:43:9c:b8:cf:
fa:02:91:81:9b:f8:d3:90:c0:be:11:43:55:2a:96:
26:b0:56:10:8f:12:21:40:55:65:5b:e5:bc:fb:b8:
f5:fe:bc:8c:42:b4:8f:b5:9d:34:06:b4:5e:0f:eb:
55:12:56:ee:f6:2c:3e:dc:31:87:55:8e:a9:4d:44:
03:d8:84:ef:2d:a9:d4:ad:87:41:00:dc:d8:bd:87:
89:27:77:02:8d:08:c9:14:91:87:53:61:76:0d:57:
02:4f:56:e9:86:4e:8f:45:f2:29:64:2a:83:da:d2:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3E:1E:32:C7:87:0A:04:51:AB:DC:8F:55:A8:7D:71:2C:6C:FE:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87413465-1c6c-3310-8c45-63edd6e0c439.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1f5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:03:fd:32:e3:d8:ac:ca:19:e7:95:a4:f8:1e:be:9b:43:dd:
20:74:8b:b3:ed:cb:6e:b9:87:09:38:c6:4c:52:b7:35:96:24:
3f:7a:9f:96:de:72:77:81:21:7a:bd:5a:bb:27:23:4a:42:60:
8f:12:8b:f6:2c:91:89:57:a6:b5:05:1e:1f:32:5b:55:62:9c:
95:2f:5b:48:3a:1f:8d:b1:91:e3:c1:9c:f4:89:00:85:70:c2:
b7:0c:1b:6e:69:2d:2f:5c:bc:b0:ad:51:99:5e:a1:27:2a:10:
47:0c:f3:f1:7f:45:1c:bc:7d:b3:80:af:22:3d:02:38:7b:02:
8d:74:df:c3:e9:23:1e:31:08:d1:34:3f:9f:d2:14:a7:f4:a2:
ce:80:a2:eb:17:2c:90:9f:a6:b0:82:00:4d:d2:83:d1:ff:44:
5a:d0:42:15:c0:71:99:34:31:69:d4:99:2c:44:92:ac:13:3a:
7d:f8:1f:a2:25:d5:89:66:ac:bd:70:2f:c0:fc:3f:fa:fb:7f:
63:27:c8:5f:2d:6e:1a:f9:4a:b3:22:1a:02:17:63:5a:d1:06:
4b:68:18:a4:93:fd:b9:b0:7e:8d:be:a8:8b:16:d3:93:86:c0:
96:d3:1f:39:06:4e:cb:5f:eb:73:cf:9a:8d:fd:54:8a:0e:aa:
13:2a:9e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:44:02 2025 by rpki-client