Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0eee20b-ce4f-38ab-9812-e0b02aa0b971.roa
File: a0eee20b-ce4f-38ab-9812-e0b02aa0b971.roa (raw, json)
Hash identifier: t2qMORSBEtV8hvtWBTCx35o1RtRHHiBUCPQ2FuXSz0Q=
Subject key identifier: 13:2C:11:75:77:1F:CB:90:B5:94:B2:12:11:9C:2D:C2:BB:50:07:23
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858463133427535DA1D149014C120
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0eee20b-ce4f-38ab-9812-e0b02aa0b971.roa
Signing time: Thu 13 Jun 2024 01:30:54 +0000
ROA not before: Thu 13 Jun 2024 01:30:54 +0000
ROA not after: Wed 11 Sep 2024 01:30:54 +0000
asID: 31547
IP address blocks: 2001:470:313::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:31:33:42:75:35:da:1d:14:90:14:c1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 13 01:30:54 2024 GMT
Not After : Sep 11 01:30:54 2024 GMT
Subject: CN=b841a42e-6f27-4bc9-911c-ea1a74fc4015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:58:19:8c:5f:8d:6d:3d:63:ef:a7:02:5d:f2:
65:a6:79:5f:9e:1d:81:4c:19:e2:78:cf:e9:2d:c0:
19:c6:38:3b:d1:d1:2b:f9:85:5c:66:24:53:5b:eb:
df:68:65:6e:ce:c6:89:9e:ea:ec:d8:e9:88:77:20:
ec:09:36:fd:bb:72:0e:91:5c:79:41:9f:99:15:ed:
e3:c9:07:0a:fc:c4:36:7d:88:54:71:4b:cb:e3:5e:
7a:ce:05:b2:b2:80:c9:b6:81:ef:2a:c6:85:43:fd:
6d:44:9d:98:b3:be:89:7c:d9:07:79:15:3b:d4:1c:
9a:c8:f0:12:ca:66:3b:62:7b:9f:00:6f:5a:a2:9b:
09:c0:a3:da:f8:f2:66:92:73:ff:5b:25:a6:d0:d4:
fa:e6:c2:63:00:8a:00:c0:c7:51:25:9b:aa:76:a0:
ea:a5:b8:17:35:28:fe:0b:39:94:cb:e9:aa:f4:66:
9a:d5:c6:9e:09:d1:db:8b:c1:0f:88:de:0e:73:99:
6e:b8:04:f6:79:07:72:b8:d4:0e:a7:63:8b:22:18:
34:c4:12:81:69:05:ec:36:bc:7f:a1:f0:9a:4d:b3:
37:25:c5:5c:e0:58:b6:64:b4:4d:57:86:87:ee:b4:
0f:58:c4:65:86:11:af:d3:44:63:98:a5:e7:e6:88:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2C:11:75:77:1F:CB:90:B5:94:B2:12:11:9C:2D:C2:BB:50:07:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0eee20b-ce4f-38ab-9812-e0b02aa0b971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:313::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:dd:1c:9a:1d:0f:0f:68:8f:07:84:83:40:bf:04:7e:9e:47:
0c:34:70:77:d5:cb:9d:7f:90:4e:3d:83:5a:fb:80:f7:1f:f6:
dc:60:cd:f0:98:4d:39:df:57:62:17:2a:e9:21:64:38:f0:a3:
fa:f9:be:7f:ab:66:7f:55:5d:b9:39:c3:39:5b:b0:c6:9b:5b:
a3:56:be:d6:35:46:80:bb:cc:7e:ff:e7:78:83:93:37:ad:65:
20:c5:2b:32:67:01:91:9d:62:55:1e:5b:70:ad:f1:71:ea:76:
13:24:df:bd:d4:c7:e7:d3:92:e6:3f:87:08:d1:a7:97:0c:07:
b3:7f:23:5d:1d:24:3e:45:02:5a:3d:a9:27:74:9b:0d:d4:84:
9d:35:39:da:43:86:ba:e0:5c:33:cc:be:f5:cf:93:42:39:53:
a0:35:f1:5f:77:0a:2c:9a:ed:31:89:63:fc:3e:33:a1:66:c0:
ce:26:6b:b1:17:37:9c:e9:55:b9:b6:12:20:10:29:47:32:8f:
10:f3:06:46:60:e4:41:67:61:82:6e:49:a2:cb:90:25:57:16:
ef:4f:f6:5b:aa:99:09:99:2b:6d:b8:43:f8:8e:f9:06:43:f0:
14:c3:fe:4a:30:be:c5:ae:ae:4e:5e:ed:42:ec:5a:e8:bd:98:
bd:d4:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:35:45 2025 by rpki-client