Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bcec4666-c210-31f4-adbe-8fdd5de0eb5d.roa
File: bcec4666-c210-31f4-adbe-8fdd5de0eb5d.roa (raw, json)
Hash identifier: fguRWMfCB6mTIOGLoRm8t4hmx49lzGUVD1no2mCQ4aM=
Subject key identifier: CD:2B:A6:D7:1A:A5:AC:7F:68:2F:36:F2:92:78:C1:32:7C:56:7F:E9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01A949184E0F21B890DC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bcec4666-c210-31f4-adbe-8fdd5de0eb5d.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 197155
IP address blocks: 2001:470:23d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1a:94:91:84:e0:f2:1b:89:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=d0ddc230-37a3-4515-a28c-16b977abbe53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:d5:10:20:28:35:80:a9:16:cc:d2:88:30:
19:50:b7:45:2c:23:3c:86:df:6c:84:fa:48:6d:16:
b8:61:1f:9c:fa:83:42:98:a7:e0:23:0f:32:62:a8:
cd:99:f0:b7:d3:f1:fb:97:c4:a7:36:34:12:56:5a:
45:60:a0:13:5b:2a:f8:39:9e:a6:bb:0b:7f:0d:27:
22:de:f7:c3:c6:5e:19:75:bc:96:4a:24:2e:a2:f5:
19:f2:a2:ea:1b:8a:17:ea:ef:9d:1b:61:94:aa:e9:
e4:c5:30:5c:fe:78:ca:bb:22:63:01:67:6b:12:ab:
fc:1d:ae:25:da:4c:3d:f5:28:9e:96:43:c6:2c:ba:
36:fd:95:1d:e9:22:5a:1a:5b:75:c9:df:33:aa:03:
9c:ff:e2:5e:4e:38:ea:3d:79:76:36:55:05:66:3f:
66:ff:8d:a2:86:80:cb:6c:4d:c5:68:c0:6e:f3:06:
3d:04:3e:e1:29:80:66:46:ec:38:28:20:66:f1:9b:
7b:ca:d5:9e:63:eb:6f:27:1e:eb:27:3a:dd:f4:75:
ee:fe:a7:fd:17:61:bd:f6:df:0d:a2:9d:ed:d7:72:
34:ed:7f:70:3e:e8:5e:45:3e:01:bc:16:1c:3e:11:
09:76:a9:4f:95:49:80:0a:5f:7b:54:4d:45:9e:23:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2B:A6:D7:1A:A5:AC:7F:68:2F:36:F2:92:78:C1:32:7C:56:7F:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bcec4666-c210-31f4-adbe-8fdd5de0eb5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:23d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:18:1e:14:0a:6e:de:e1:8c:3b:a8:ef:a7:fa:d0:05:ea:45:
a2:c0:02:d2:df:80:26:4f:51:81:d9:90:34:7c:bb:45:76:11:
8c:1e:d4:1b:70:48:59:42:11:77:7f:a7:ab:5d:b4:f1:f8:b3:
db:5e:00:d1:06:01:de:82:21:a5:19:76:b2:94:dc:e3:3c:33:
24:88:4b:9f:fd:3e:34:e3:1b:d7:db:dc:9b:18:97:23:35:67:
72:f5:a5:96:31:cb:19:d6:ad:ab:9c:ea:6e:ba:6a:a3:3e:0e:
3e:22:97:1a:6b:ea:4a:3c:22:e6:7d:20:27:c8:a6:d4:e1:c7:
c8:6e:41:85:0c:dc:d4:0d:d7:92:a8:ac:b0:a7:07:31:8f:c2:
3a:aa:4f:6d:9a:6d:1f:97:a2:f3:ed:fe:52:d6:b2:cd:6b:a6:
01:8d:e4:de:2e:6e:91:e5:9b:fb:a8:7a:99:6e:ed:3a:77:7d:
a0:df:97:fa:1d:7c:ec:af:18:7d:de:f8:d1:85:da:d3:b6:91:
4d:12:62:bc:e3:f5:09:c1:7d:b7:6d:58:c5:09:be:89:ba:97:
86:13:ed:c0:80:b8:2f:34:22:d8:4a:6f:47:bd:f0:92:59:00:
14:3e:4c:4d:cd:51:86:66:8c:80:41:00:03:d0:8d:33:7b:74:
57:87:17:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:29:34 2025 by rpki-client