Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c45b1d3c-0946-3d67-ba1d-f4d78826ce27.roa
File: c45b1d3c-0946-3d67-ba1d-f4d78826ce27.roa (raw, json)
Hash identifier: wfld9mAHbT0g5TeMYJ0ZbkRO6Ji8uoSe23FH+OL0XPc=
Subject key identifier: 3C:B7:11:74:B3:49:FF:71:86:E2:4F:08:85:04:CB:7E:E1:C9:84:A7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285845DBFE6AA3C514F7612526EFC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c45b1d3c-0946-3d67-ba1d-f4d78826ce27.roa
Signing time: Mon 13 May 2024 13:00:34 +0000
ROA not before: Mon 13 May 2024 13:00:34 +0000
ROA not after: Sun 11 Aug 2024 13:00:34 +0000
asID: 46997
IP address blocks: 2001:470:139::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:db:fe:6a:a3:c5:14:f7:61:25:26:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 13 13:00:34 2024 GMT
Not After : Aug 11 13:00:34 2024 GMT
Subject: CN=d0b6a481-f3db-43b5-9d7a-af55a1d76b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:e2:c0:3e:52:fb:62:5a:4c:59:57:de:69:
06:a2:90:40:69:d7:57:3c:bf:a2:7e:a4:8d:6a:d9:
2c:00:24:97:95:78:27:0d:06:3e:3e:a6:2b:26:fe:
35:ae:7e:9d:2c:b4:37:d7:83:0a:b8:ad:5b:e5:36:
05:53:3b:f5:58:e7:50:97:6b:7b:12:69:2b:26:f2:
19:11:3b:1d:96:22:2c:13:78:80:c7:28:c2:0c:47:
ef:40:12:04:01:3a:aa:50:18:04:1f:90:63:d1:1f:
d0:f9:ad:6d:01:12:7d:4f:1d:87:ff:4f:7e:03:b0:
38:8d:a9:ec:95:75:72:53:6f:b4:d6:9c:ca:25:6d:
76:f2:84:18:fb:f7:6a:f6:24:23:05:88:a5:ee:0c:
ce:e4:52:68:8a:fe:3d:70:83:44:1c:6f:20:77:3e:
e0:59:1c:5d:6c:be:be:6b:00:ec:14:9e:8c:de:b2:
97:07:1c:d7:e4:ee:69:5d:46:b3:05:ac:fb:94:eb:
e1:10:e5:e6:8c:2f:a7:fe:87:3c:ed:f8:d3:a2:70:
5a:fd:6f:1e:46:8f:03:a7:94:d7:e3:81:e2:07:25:
38:e9:f8:25:af:83:68:cd:27:39:f6:92:97:68:17:
e4:91:87:7b:7c:be:b5:f0:a1:31:ac:bb:72:86:72:
b8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:11:74:B3:49:FF:71:86:E2:4F:08:85:04:CB:7E:E1:C9:84:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c45b1d3c-0946-3d67-ba1d-f4d78826ce27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:139::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:94:45:aa:3c:a9:7e:c6:73:db:17:a6:e2:d6:fe:1f:3a:35:
01:37:9c:7b:ca:8f:e8:65:1e:9d:e3:27:55:db:b5:b0:4c:ad:
57:4c:fb:38:0f:07:40:73:c4:09:50:26:2a:2a:c5:1e:20:89:
bb:c7:71:fb:46:8e:5a:80:4a:61:cc:32:37:ab:c6:f4:7e:9a:
59:38:47:25:01:e7:87:a3:ee:1d:c3:42:30:6d:9a:7f:04:82:
eb:98:6c:56:60:3f:ab:af:2c:07:2f:40:87:b5:8c:c2:be:c9:
16:7c:aa:04:03:e0:6d:e0:44:59:35:8d:3b:d5:d8:1a:b6:3a:
8a:83:f2:e6:35:01:2d:8e:36:8f:a9:f3:4c:7e:cb:22:02:6f:
5c:24:f7:61:39:24:6d:e3:4d:d0:7c:4d:70:5b:66:19:bc:b8:
22:0d:6c:4b:49:1d:8b:83:28:f1:a7:15:16:76:39:dc:00:4b:
3f:bb:29:f1:ea:59:f0:5e:11:5a:e0:94:71:9b:90:44:9d:11:
73:df:29:3a:db:a5:a1:b6:f4:a0:4d:69:9e:30:5c:22:83:2a:
e3:06:f1:20:15:3f:06:43:df:3d:be:36:66:8b:a4:02:6b:1c:
75:a6:b2:9a:33:59:c2:3d:ae:d7:81:10:95:b1:56:00:28:1e:
f9:12:36:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:23 2025 by rpki-client