Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3bbbfa9-08d6-35bb-b838-697a0846487d.roa
File: d3bbbfa9-08d6-35bb-b838-697a0846487d.roa (raw, json)
Hash identifier: fhca9xcd8kcfd3LW8nCUbgzk1fRtEDQ1ufc91FwHA/g=
Subject key identifier: D8:61:88:13:12:42:DF:BA:70:B5:55:97:80:99:3C:54:22:4F:97:B7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584046CC980805509501EB01BB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3bbbfa9-08d6-35bb-b838-697a0846487d.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 18 Jun 2023 04:00:00 +0000
asID: 46997
IP address blocks: 2001:470:139::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:cc:98:08:05:50:95:01:eb:01:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jun 18 04:00:00 2023 GMT
Subject: CN=ffad137f-4a21-4a6f-b780-86ecc2f395e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:28:20:46:97:9c:c1:97:71:da:3b:e2:5f:
32:1d:2b:75:c2:09:68:2d:d2:cc:7f:61:30:9d:8f:
84:ee:32:31:48:b3:0f:34:cc:80:73:5e:ee:93:34:
aa:8a:87:49:d0:04:6e:0f:f8:c8:7a:4b:bf:8d:5d:
09:e7:f1:6c:58:80:f6:75:de:59:7a:86:18:c9:e6:
1a:24:c3:66:a1:b7:c0:46:49:eb:23:25:26:fe:3c:
e3:d0:5b:92:ea:3f:12:32:84:d4:43:88:95:0b:c9:
0a:50:ab:ca:e9:41:a3:f6:a8:57:92:16:61:77:67:
c9:9f:31:64:c5:29:6c:30:9a:5f:9b:77:a2:f5:10:
c9:d8:f9:7d:a0:d2:aa:7d:83:aa:37:56:62:3f:a5:
e9:bb:5c:91:1e:13:7d:a2:a6:6a:05:d3:b8:2e:5b:
c3:25:93:5d:5e:16:08:e8:31:03:d2:02:14:e3:fb:
46:70:e9:d4:b9:66:63:3d:ca:ae:6c:07:65:6b:52:
8e:dd:31:85:83:7f:7e:b2:65:26:19:c8:87:d5:ed:
14:aa:ec:a3:90:e2:0e:46:d0:d7:9a:9b:b7:78:0c:
34:04:b6:7d:69:ed:ae:b9:62:58:34:d8:17:24:19:
77:db:86:24:f1:3f:a3:a9:4e:e5:ec:38:60:93:8f:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:61:88:13:12:42:DF:BA:70:B5:55:97:80:99:3C:54:22:4F:97:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3bbbfa9-08d6-35bb-b838-697a0846487d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:139::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:c1:37:f9:dd:1b:67:b4:8e:a7:27:6b:4e:b9:ec:01:6a:dd:
00:b5:2a:b3:18:4c:d4:a8:6c:ef:23:26:89:95:38:7d:7c:69:
fb:de:5a:25:fc:9d:f1:0b:66:cf:09:c8:1a:6d:64:c8:fd:6e:
63:c6:58:2a:99:a6:22:99:e1:e0:ef:89:5b:f1:87:bc:96:36:
74:5b:1a:7e:1e:de:ee:35:66:f7:81:01:69:ab:04:2a:9f:21:
b7:9b:54:21:44:5a:2d:89:8b:f5:70:70:8d:66:f2:73:d1:d6:
55:5f:59:dd:ef:48:aa:09:c0:86:49:d4:be:fa:65:84:44:c3:
a9:f6:b6:07:a3:6b:5c:7a:c2:e3:60:53:e8:10:5e:b9:f7:ca:
6b:09:37:18:7d:57:23:88:fb:46:97:78:17:e5:10:28:03:b4:
ed:ba:e3:92:ca:9d:c7:e9:c4:a8:99:1b:ed:31:3f:5b:69:92:
83:18:97:20:3b:f5:01:3e:09:ab:e5:2f:17:e3:14:7e:1f:bc:
e7:d7:62:83:89:e8:8e:b1:84:e1:5b:ad:f3:f7:d6:2c:1e:ba:
7d:d9:d9:41:a8:9f:eb:3b:13:96:6b:33:13:f5:ec:c8:27:47:
a5:f3:29:75:67:5d:41:00:0a:8c:07:14:31:39:12:f0:ca:b2:
69:cb:df:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:21:50 2025 by rpki-client