Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae28b9d6-304d-3502-9bee-59a220e52029.roa
File: ae28b9d6-304d-3502-9bee-59a220e52029.roa (raw, json)
Hash identifier: tAUxbIEFpxKl4QaXWcHTNKVbNA9FAcDHTnkdOkAjr8s=
Subject key identifier: 6F:C1:A4:3C:38:B3:0E:44:C5:D2:82:80:AB:47:BA:D6:8A:4E:49:F8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B7862A185C0C18FD49880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae28b9d6-304d-3502-9bee-59a220e52029.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 202673
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:78:62:a1:85:c0:c1:8f:d4:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=973d7ce7-557b-4c98-8553-79a805c27174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:72:27:0b:b0:a9:9b:e4:e1:7b:25:7e:29:
fa:6f:cf:a1:25:ba:95:4e:65:4d:0c:89:15:6c:79:
2a:35:14:35:57:46:81:35:b8:3c:99:22:e6:c8:6c:
e2:42:99:24:92:c8:43:30:a1:c8:75:f0:68:68:5f:
c8:1c:fb:2c:c6:9c:91:d4:a0:36:e2:22:18:91:88:
f7:80:8f:53:f6:c7:0f:0e:a6:7a:56:ce:5e:03:00:
30:61:01:df:6f:27:e0:75:a3:25:e3:86:25:f0:5a:
57:34:72:19:17:52:98:cb:c9:b0:31:03:67:7f:a2:
78:78:47:8c:a2:08:b3:a6:8d:0d:1a:2a:c6:69:02:
48:3e:d0:60:fb:0e:50:01:d0:ac:e1:18:6b:fc:01:
c5:80:35:9d:7a:80:40:ab:e3:a3:96:0d:1e:00:3f:
bd:34:91:a1:0f:83:e5:a1:c6:4b:19:ba:4d:70:aa:
c4:dc:6b:8a:7a:e6:6d:9d:d7:55:c7:24:6b:85:50:
78:05:4b:cf:0f:64:cd:90:61:e5:a3:73:21:71:c3:
35:f0:33:9c:1f:cd:1d:5b:73:d7:48:61:6e:d7:f3:
31:70:cb:5e:e8:a5:4e:6c:35:0c:03:6b:eb:91:5e:
98:4b:0b:76:52:bd:9d:d7:da:87:54:a4:05:6e:33:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C1:A4:3C:38:B3:0E:44:C5:D2:82:80:AB:47:BA:D6:8A:4E:49:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae28b9d6-304d-3502-9bee-59a220e52029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:28:a6:ce:41:04:9d:33:32:51:41:74:4f:9f:a5:66:3b:11:
71:53:aa:de:b1:2c:7f:18:99:a2:c7:88:79:ad:e6:2c:e7:27:
a9:69:65:92:5f:f6:02:2b:83:4c:12:54:c8:17:18:fe:06:6a:
f5:7f:cd:94:33:90:88:91:5a:66:40:69:8d:a8:51:0b:71:4b:
9d:0f:fe:cc:27:5f:e7:7a:99:f1:32:97:dd:07:34:2c:78:52:
e1:79:ee:0b:8e:ee:12:f1:48:f5:ff:1c:f5:f5:e5:87:91:78:
35:40:0f:d3:d6:4f:17:64:4d:2f:09:4f:89:ea:7f:d3:10:db:
36:f7:67:f2:1d:d8:22:b9:72:0a:8e:9b:ae:bb:c1:08:5a:91:
fe:cd:5c:a2:ea:3d:c8:ba:e4:4d:46:4b:90:64:20:bc:dc:00:
16:e7:ac:fd:dc:ca:59:fd:4b:11:ce:49:53:96:88:dc:ef:ac:
1b:53:42:f1:0c:8f:63:16:56:c3:30:78:84:f6:ef:70:be:4d:
bb:10:bf:d0:55:0f:f8:5a:1d:c6:18:7f:93:ef:da:77:15:7c:
a8:d3:a9:fb:e2:a1:6a:82:8a:34:b6:4f:12:61:31:14:22:8d:
91:96:40:09:96:0a:58:d5:e4:52:c1:fd:9e:9b:2f:bb:71:d6:
d1:12:11:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:20:17 2025 by rpki-client