Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cfe5fb4-15b0-37a0-b3ae-2cfa3f1ac668.roa
File: 8cfe5fb4-15b0-37a0-b3ae-2cfa3f1ac668.roa (raw, json)
Hash identifier: YxNI1mCnLJSIyPiBOzPtDJCk9hfcCMAodFvCGZLPF9U=
Subject key identifier: 54:89:D1:02:C6:C4:97:D7:46:B3:DD:E4:B2:1C:FC:61:FF:5B:67:C9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285842B53D81230444B55C08E65180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cfe5fb4-15b0-37a0-b3ae-2cfa3f1ac668.roa
Signing time: Fri 28 Jul 2023 12:00:00 +0000
ROA not before: Fri 28 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jan 2024 05:00:00 +0000
asID: 399889
IP address blocks: 2001:470:d2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b5:3d:81:23:04:44:b5:5c:08:e6:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 28 12:00:00 2023 GMT
Not After : Jan 29 05:00:00 2024 GMT
Subject: CN=37c3277f-7822-4402-b067-1dac3fb77528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:40:57:22:5a:75:3e:11:3a:bc:39:89:bf:ee:
78:71:01:61:3b:39:a5:bf:7a:45:89:06:b1:7e:f9:
a8:56:d5:e0:e2:d7:74:3c:2e:2c:b0:5f:0b:53:0d:
f6:8d:18:ab:b7:ae:be:bf:93:0d:52:03:e6:8c:17:
c0:d8:6f:64:08:06:e4:7a:f4:b0:02:4c:ba:ea:fb:
c6:e0:70:11:92:2d:bd:c8:be:5c:84:d1:59:0a:f7:
15:0a:e7:57:3b:f9:66:26:a6:bc:63:4f:13:d7:59:
11:a4:54:38:86:2a:47:6c:b2:09:6b:20:89:7b:03:
0c:b5:d8:b9:c5:3d:3f:f2:04:b8:90:d8:3e:b6:9c:
31:61:3c:23:ee:80:bd:6a:3e:5c:0b:14:56:eb:5e:
6f:3f:7d:2e:1c:28:08:2b:18:dd:25:93:2c:d8:a6:
a3:78:40:f9:c1:a6:8d:56:5c:86:1b:56:d0:28:c9:
54:eb:d4:86:36:c7:ad:f8:58:b3:ef:50:02:bb:4a:
60:20:79:8b:41:23:00:4a:50:20:1b:5e:0a:4e:03:
51:55:12:92:e1:3f:1c:c3:70:73:68:b3:87:2e:08:
bf:f9:9b:11:6e:9e:95:ff:9d:5b:0d:41:5e:33:f8:
67:45:60:c8:f7:45:64:12:9b:b8:62:32:f2:bf:51:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:D1:02:C6:C4:97:D7:46:B3:DD:E4:B2:1C:FC:61:FF:5B:67:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cfe5fb4-15b0-37a0-b3ae-2cfa3f1ac668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:d2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:53:3a:aa:9f:18:10:4a:f8:de:e9:dc:d4:8d:a3:3f:21:0d:
93:41:2c:bc:cf:83:24:9d:3c:e4:33:98:0b:a0:9d:ab:0e:93:
39:a4:a5:b5:06:b9:b3:e3:a2:65:87:32:59:ae:33:8e:fd:32:
66:87:db:11:e3:34:e6:e7:64:7b:de:b0:72:0f:89:a4:51:cc:
cf:44:b3:84:d5:ad:02:48:0c:b7:bf:55:cf:51:c3:12:6a:3b:
72:c7:65:36:db:d2:d0:cd:ed:3f:9c:1e:5b:e4:04:b9:da:fa:
49:2a:4b:61:ab:db:d9:a3:36:c7:a4:aa:3b:92:63:5c:22:2f:
4b:74:0f:60:26:2c:e3:c7:e4:fb:af:4d:21:23:11:b9:61:04:
c5:c8:58:59:9b:e4:c5:0b:ec:96:61:d9:88:59:43:0a:50:3d:
26:9c:13:06:e2:0b:16:cf:98:b5:f4:fe:32:db:e6:fc:07:f3:
f3:1e:09:3c:b8:72:5b:0f:85:56:f3:b3:98:eb:27:af:1f:3d:
a6:f3:c2:17:94:52:ba:48:41:c5:54:46:6f:74:8c:16:82:d4:
e0:11:a3:d6:02:ec:db:b2:a5:0a:46:12:2a:91:7f:e2:a5:1d:
1a:58:eb:e0:e6:f2:a5:ca:c8:aa:7d:3b:54:ff:26:c3:c3:18:
68:47:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:46:40 2025 by rpki-client