Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5b33619-9398-31ea-8ba8-8f5759781551.roa
File: c5b33619-9398-31ea-8ba8-8f5759781551.roa (raw, json)
Hash identifier: dGjl26EelsXp2+aJDKkeIlF8Eg8rSXO38Ftcs4jTIIU=
Subject key identifier: CF:A3:39:0D:24:00:A9:BC:B8:CA:E8:A1:F0:F9:BF:95:DB:94:D5:85
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50DE42224D525109A33A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5b33619-9398-31ea-8ba8-8f5759781551.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 26679
IP address blocks: 2001:470:60::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:de:42:22:4d:52:51:09:a3:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=39437e23-4418-42aa-8275-b43f43449d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fd:6f:2f:9f:43:15:24:3f:8e:fd:77:35:1e:
7a:04:2f:14:df:df:58:10:85:3b:a7:4f:7a:38:99:
ee:6b:6f:84:03:3d:6a:8c:70:64:ca:17:90:c8:9e:
0e:41:1f:dd:52:26:54:f4:35:b3:7b:e4:e8:7b:1d:
7a:fd:3f:a3:29:c8:60:7a:75:77:5b:c5:c2:ef:b3:
03:21:4e:92:3d:e9:d0:2b:b4:33:0c:12:00:92:ec:
48:19:a4:b5:e7:34:67:ff:45:e3:a8:3e:ce:de:7c:
f1:a2:7c:3c:a1:04:10:2a:ef:58:84:aa:63:4d:ff:
7d:a5:55:2d:31:34:9c:98:13:59:2b:48:98:7f:53:
0e:23:45:b6:33:bd:c0:a2:b1:05:ee:a6:1b:30:b4:
2d:5e:db:5b:f2:c0:d8:b3:fe:b4:f7:91:1a:3e:7c:
60:ba:b7:50:b1:71:b0:9f:4c:2a:75:d9:60:24:d1:
96:a0:49:94:03:a2:7b:3c:a3:ec:84:4e:10:87:0e:
6f:b8:23:78:f1:3f:4e:e6:da:ca:01:f2:fd:0b:99:
bc:f2:01:a4:42:e7:30:18:ce:f7:e7:fe:b0:58:22:
a8:0d:fa:69:12:58:4f:1b:ce:bd:d7:6a:c3:63:18:
d6:67:d1:70:31:13:90:a6:3e:50:81:d5:ff:01:c9:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A3:39:0D:24:00:A9:BC:B8:CA:E8:A1:F0:F9:BF:95:DB:94:D5:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5b33619-9398-31ea-8ba8-8f5759781551.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:60::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:d1:91:16:ff:a6:cd:54:12:25:0c:fd:6b:e1:1b:70:e9:60:
b3:9b:68:f8:3e:c1:6d:59:0a:e0:2a:2a:2e:16:9c:8b:15:6c:
77:56:38:29:eb:2f:b5:4c:c1:5f:47:7f:74:8e:ea:6e:71:3c:
fa:04:ee:70:7c:7e:05:bd:40:52:f1:8d:2d:99:6d:5c:32:72:
02:5b:43:ac:1b:0f:32:43:c7:f2:0e:fd:26:a5:75:9f:25:23:
48:64:e6:49:20:c0:71:1b:35:98:cb:b2:ea:df:08:1e:4c:c9:
f2:db:8a:89:a2:8e:9f:e1:4d:13:64:27:44:8b:51:3c:52:13:
6a:6f:13:e7:ec:93:75:5d:b7:4e:50:ae:77:79:9d:61:41:dd:
5e:2b:c9:9c:63:2b:74:65:ec:fd:d0:6d:13:79:cc:c1:be:be:
38:e6:60:d7:39:54:8d:30:22:2a:63:42:ea:37:b6:84:b0:06:
c1:f6:e1:1a:ec:5e:59:3d:e3:71:86:f6:5f:d9:0e:66:85:39:
7b:5c:42:b5:97:47:b6:9f:a0:93:66:b4:35:c3:f4:5a:7b:a7:
a2:a2:68:dc:7c:26:f3:d0:4e:d2:1e:05:6b:7b:5b:93:3d:25:
30:64:ad:61:90:9e:bd:41:12:be:94:fa:32:3f:db:bf:d3:a6:
63:be:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:38 2025 by rpki-client