Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d367f962-fe21-3c74-8fee-2f9267a0f52d.roa
File: d367f962-fe21-3c74-8fee-2f9267a0f52d.roa (raw, json)
Hash identifier: zJyBhh3BPq8rL6GXKeS/vNQT1R/GdUclM5H8ZqQJOIw=
Subject key identifier: 1D:89:A8:9D:69:CC:DA:78:82:2F:61:FE:30:42:FA:09:A3:BC:A7:A9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858461DA881F4705C4A1ADD82E080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d367f962-fe21-3c74-8fee-2f9267a0f52d.roa
Signing time: Thu 06 Jun 2024 01:30:59 +0000
ROA not before: Thu 06 Jun 2024 01:30:59 +0000
ROA not after: Wed 04 Sep 2024 01:30:59 +0000
asID: 35075
IP address blocks: 2001:470:30d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:1d:a8:81:f4:70:5c:4a:1a:dd:82:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 6 01:30:59 2024 GMT
Not After : Sep 4 01:30:59 2024 GMT
Subject: CN=4aab9f2a-37ea-4aad-9ae7-c49afee716a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:3c:c7:5c:4e:b3:e2:f8:60:7d:a3:dc:91:
95:5a:03:80:9b:ee:a6:40:fa:34:db:aa:2b:a5:d6:
44:b5:96:4c:14:87:57:dc:93:8f:3d:8a:66:29:61:
c7:6b:15:56:f6:f1:57:70:0a:29:92:38:c1:0a:68:
68:ba:6f:df:65:9d:4a:37:7c:94:09:69:2a:da:67:
ee:d2:27:62:28:da:9d:31:5a:f2:49:60:e7:61:fb:
8a:31:ef:b4:c1:7f:ba:0e:fc:c4:1c:47:e0:d2:06:
bd:de:5f:17:a6:0b:5b:fc:92:85:cf:91:32:7c:96:
d1:03:e7:73:76:71:bc:a2:91:db:df:07:7b:f7:65:
f6:16:68:b7:1b:69:3a:d3:31:18:43:90:ba:76:f8:
d9:0f:ce:21:97:19:c0:d6:1c:e5:6f:0b:9e:32:2a:
02:fd:b2:9c:36:2b:3a:c7:e3:c8:d0:e7:a9:99:51:
5e:69:9c:6e:e7:d5:38:81:72:e1:51:02:bf:08:77:
c5:84:c3:31:32:4c:71:81:0f:0c:6c:43:2d:91:f6:
2c:2a:35:72:1d:c0:01:21:52:c0:af:8b:d0:ad:4c:
21:70:af:de:2c:0c:04:74:9b:59:ce:2e:50:1c:05:
1b:68:d7:6c:63:09:3e:cb:5b:e2:63:9a:35:11:be:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:89:A8:9D:69:CC:DA:78:82:2F:61:FE:30:42:FA:09:A3:BC:A7:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d367f962-fe21-3c74-8fee-2f9267a0f52d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:30d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:71:af:2e:32:3c:c1:48:d4:b6:ba:4f:5e:7a:11:8c:94:96:
ab:a9:69:95:78:2a:3b:e9:10:20:ac:d6:7e:a9:1e:f3:d4:28:
92:3d:ca:a4:21:9d:76:ef:88:0d:ed:f6:3c:30:51:cb:4e:3e:
66:14:a0:68:a4:49:6b:f6:79:9d:88:98:59:b0:06:1a:89:96:
6f:34:96:93:02:8e:ca:43:63:54:85:54:13:d7:a6:4a:33:33:
b9:0b:9a:ca:7b:6f:53:b5:f4:d0:ee:66:0c:eb:4c:a8:19:8d:
38:68:35:3d:99:fc:d3:ec:3b:61:a6:41:ba:08:de:50:03:56:
2e:7b:e8:32:ae:d7:3c:2b:54:fd:2e:88:af:a9:2a:f3:df:17:
0d:24:de:3b:76:34:de:c3:1a:09:f1:f2:4f:64:08:28:f6:3d:
11:fe:62:bc:bd:ca:01:f3:aa:01:9e:a2:90:2f:47:81:ee:36:
57:bd:d4:54:b4:d5:64:4c:dc:73:69:c0:03:e7:89:06:7a:ea:
18:29:03:d6:77:a4:89:31:24:18:38:38:0b:13:39:b3:87:d2:
b7:e0:71:be:c8:a1:c5:5f:ed:ae:c7:0b:a2:02:85:c0:50:42:
69:d1:2e:59:25:31:f3:ff:d1:b4:1f:29:93:67:0e:c5:96:22:
86:92:e0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:20:22 2025 by rpki-client