Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a072c37a-f00a-3158-89b2-6ba6b0178792.roa
File: a072c37a-f00a-3158-89b2-6ba6b0178792.roa (raw, json)
Hash identifier: 5JMgFo6GfQKQriIQhnwVw27dPyIwMH+XdANgTFmiSg0=
Subject key identifier: 73:1E:96:BF:DF:CC:27:32:B6:F2:20:50:15:4F:D2:3C:AA:90:04:68
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285844193E8B985043C9662D202140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a072c37a-f00a-3158-89b2-6ba6b0178792.roa
Signing time: Mon 04 Dec 2023 02:00:15 +0000
ROA not before: Mon 04 Dec 2023 02:00:15 +0000
ROA not after: Sun 03 Mar 2024 02:00:15 +0000
asID: 12041
IP address blocks: 2001:470:13b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:19:3e:8b:98:50:43:c9:66:2d:20:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 4 02:00:15 2023 GMT
Not After : Mar 3 02:00:15 2024 GMT
Subject: CN=4c923b16-a0fc-46d9-9128-ecea0c5c6c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:98:ef:a8:fa:a5:0b:5f:da:3c:db:fd:e7:
b8:b1:04:ad:55:fd:6a:ad:a9:fa:8b:43:e2:9b:75:
25:3b:f3:e5:51:be:9f:1e:dc:83:bd:07:d9:f5:1d:
5a:ab:13:67:9a:ff:7e:2b:95:b2:0f:8d:64:4b:8a:
cc:45:5b:e5:6e:a4:32:c1:fd:f4:bf:8b:e1:75:67:
22:62:c8:25:ca:f0:46:51:ff:0b:34:24:3d:93:9c:
2c:2f:e8:f5:bf:28:f9:e3:89:e5:1e:bc:d1:b8:f5:
7f:f8:75:12:87:e7:82:53:9d:68:51:b2:e6:47:d2:
f1:ce:60:5a:29:3e:f4:5b:07:94:92:5b:fc:e2:62:
82:e6:c0:e7:68:01:72:57:49:ba:cb:b8:b8:5f:ed:
c6:41:22:23:93:8b:53:ae:0b:27:37:ad:66:af:3a:
74:76:d0:2c:df:6b:c9:45:30:01:f3:09:46:7f:dd:
cc:94:fd:af:87:76:32:37:9e:38:b5:6b:e7:07:bc:
fa:cb:1d:c8:68:ec:6c:5f:e6:54:35:1c:d7:33:fb:
43:bc:af:49:2d:d9:2a:a0:67:02:19:53:cc:86:98:
fb:33:af:cd:28:d5:a2:16:ed:0c:30:34:5d:d5:71:
7e:df:6c:d4:cd:55:17:54:3d:d8:ea:f3:a1:68:7e:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1E:96:BF:DF:CC:27:32:B6:F2:20:50:15:4F:D2:3C:AA:90:04:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a072c37a-f00a-3158-89b2-6ba6b0178792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:13b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:ae:e8:d1:2d:27:fb:83:58:24:c3:ff:7b:d2:95:b8:6e:cf:
39:b0:08:90:a0:66:4c:16:ef:8c:78:50:23:ee:ed:a8:25:52:
d3:0c:12:ff:0c:f0:2c:6c:f9:23:99:00:ad:e7:83:46:73:22:
5e:d3:d5:da:8f:20:1a:a5:8d:e2:fb:a0:82:ef:f8:ec:1a:30:
d2:81:48:cb:51:d9:d1:79:a5:47:d3:bc:09:a7:53:87:ab:78:
fc:74:c6:4c:71:d8:38:f5:83:dd:22:83:61:55:f1:1a:4f:98:
cc:0f:0e:5b:39:bc:8d:85:4e:ef:80:3b:ea:7f:c5:6e:2a:ae:
ba:e5:b7:2f:49:8c:86:a3:40:b3:a7:f9:e0:b6:c2:e8:6c:20:
0a:b8:d9:da:a1:3b:d9:00:e4:9f:95:27:ab:bf:a0:7e:80:ae:
d3:7e:a4:c9:b2:37:27:e3:da:13:14:54:57:a1:96:93:71:ed:
51:95:b2:8f:9c:f3:a5:de:fd:fd:a4:7a:16:60:02:21:10:98:
96:40:39:e3:ae:a9:90:2b:a3:9a:cc:5d:ac:a9:9d:41:ce:6b:
f9:99:37:61:49:e7:cd:e3:bf:41:07:84:31:1d:84:fe:bd:02:
50:c8:6f:7b:1e:32:69:a0:80:58:33:39:f1:98:9f:94:2b:46:
38:67:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:45:04 2025 by rpki-client