Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b25749d7-9a8c-3b51-b8f7-1df91be9dc30.roa
File: b25749d7-9a8c-3b51-b8f7-1df91be9dc30.roa (raw, json)
Hash identifier: 280cPXYefwFpewqY3/Lhe3heI+0YX/LGVnYCjaWyMTo=
Subject key identifier: A9:00:50:98:B5:05:F7:25:A9:6D:79:DC:F4:83:5C:29:6E:CC:96:B4
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648E0C3854A7CCFA6A718580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b25749d7-9a8c-3b51-b8f7-1df91be9dc30.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 26110
IP address blocks: 2001:470:83::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:0c:38:54:a7:cc:fa:6a:71:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=4db211a0-328c-45cd-b710-2135a3a3ca7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:7d:f3:28:53:4d:6d:de:be:cb:64:bf:fa:
2a:9f:ce:eb:a5:94:52:07:22:8d:29:6c:b1:d4:56:
c4:96:e5:3c:78:2c:cb:07:3b:0b:c9:6a:b7:19:18:
10:69:7f:ca:52:3e:50:1e:e9:98:ef:b3:73:28:10:
77:26:7e:fe:41:7e:cf:1d:c0:b7:cd:ba:48:25:4b:
d3:10:6d:29:65:d5:26:91:88:2d:85:07:af:27:19:
2f:56:9a:c0:f8:67:af:d7:99:7a:46:a6:d7:3a:03:
2b:99:bd:d7:29:97:97:75:c3:c8:93:71:c7:af:8e:
3b:63:2d:c1:82:54:a3:de:84:d3:fe:21:ff:16:ba:
07:25:58:e4:f0:40:eb:94:d6:d3:53:a1:28:86:17:
bc:dc:ae:6f:13:8e:61:5a:f1:be:93:49:c9:ff:56:
8f:d2:33:01:13:f4:84:51:5d:bc:dd:94:4a:05:79:
17:95:06:8f:88:47:0b:35:61:cc:dc:47:c6:ce:2d:
e8:ba:32:3b:d3:2f:8c:68:c2:5a:a7:88:02:e0:a3:
30:3e:53:b7:d9:6b:fd:ed:6b:7c:8a:a1:8c:38:88:
6e:77:d4:3d:f1:17:90:86:a2:b6:3c:50:da:81:ad:
e2:9d:02:43:89:60:6f:6e:42:cb:bf:bb:9c:9b:10:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:00:50:98:B5:05:F7:25:A9:6D:79:DC:F4:83:5C:29:6E:CC:96:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b25749d7-9a8c-3b51-b8f7-1df91be9dc30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:83::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:91:46:d2:e6:47:c7:05:23:3c:bb:14:83:4e:f6:ca:ec:58:
5b:27:7f:7b:b6:29:96:cd:a8:68:e2:8a:ff:e8:df:ec:66:8d:
d3:aa:28:3a:66:26:04:b8:c7:3a:c7:85:cb:ce:9e:f5:80:4f:
44:3f:1c:d5:27:df:6a:53:33:0c:bc:a2:c7:2e:05:51:e4:ec:
9e:a6:4f:df:98:29:76:f0:56:08:1c:89:52:c5:70:b5:5f:e6:
a5:d4:50:9e:c0:26:43:b2:6b:a7:90:a3:f6:6d:48:db:b1:ce:
d3:52:7f:f8:a4:2d:ae:ce:98:ea:56:cc:d1:71:84:59:ff:5c:
46:4e:5c:a9:54:bf:54:7a:03:ef:78:71:43:03:70:28:22:f0:
02:a1:7c:94:10:62:fc:31:cf:c6:4a:ba:18:f8:b1:4f:37:1a:
f7:af:5d:f4:79:eb:53:45:4e:cb:89:19:45:bb:b8:37:fb:71:
f1:10:f4:50:38:fa:84:ca:76:a8:8c:cb:c4:1a:0a:e9:25:aa:
9d:99:b0:6c:e4:f0:d0:8b:65:c4:56:71:26:9f:1f:50:a2:b9:
f5:23:83:2e:13:8a:14:9d:cc:19:6f:8e:b9:67:09:3c:0a:37:
ed:b5:55:17:38:4c:73:09:55:f5:93:ff:9c:f6:13:ab:27:f4:
52:1d:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:32:56 2025 by rpki-client