Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d44a641e-23b7-3772-a5b0-e31ce757b6f3.roa
File: d44a641e-23b7-3772-a5b0-e31ce757b6f3.roa (raw, json)
Hash identifier: kqNLvLiZgYIF6dNYti+Swk/arJ7YiSwMV2k3n4XA9gE=
Subject key identifier: 1B:D5:5D:79:91:85:5A:59:0E:E3:EB:BF:D4:31:60:6C:34:36:D6:6E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A7783B59E64B97BAE166480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d44a641e-23b7-3772-a5b0-e31ce757b6f3.roa
Signing time: Thu 27 Jun 2024 20:16:34 +0000
ROA not before: Thu 27 Jun 2024 20:16:34 +0000
ROA not after: Wed 25 Sep 2024 20:16:34 +0000
asID: 142271
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:83:b5:9e:64:b9:7b:ae:16:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:16:34 2024 GMT
Not After : Sep 25 20:16:34 2024 GMT
Subject: CN=ebfbc068-83d8-43b2-b357-052cd1aedc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:93:7c:93:c7:c9:73:15:75:7f:34:c1:d1:
4d:ab:61:eb:8b:c9:89:b6:e8:78:ec:8a:e7:b3:5c:
f4:8d:90:63:9a:63:92:d1:87:5d:15:1c:a6:d7:85:
dd:fd:41:fb:8c:a4:bd:c7:78:2a:07:48:fb:51:c5:
a8:b9:71:6e:bc:6b:f7:89:cf:e5:77:20:b4:19:58:
32:7b:ce:68:09:04:e1:d7:5a:31:92:12:66:40:cd:
dc:53:88:8e:2f:67:21:1c:3a:7b:5a:96:a9:34:e8:
86:e3:42:96:75:cc:84:5d:67:4a:5d:2f:cc:1b:cc:
80:2c:62:83:38:cd:e5:d1:79:89:93:8f:69:41:c0:
9b:f6:25:25:d4:0c:16:1c:6f:64:72:75:ba:66:80:
ec:7f:eb:45:66:ef:fa:12:f6:bc:30:88:e3:0e:1b:
72:10:76:94:a6:f6:92:5e:b6:fb:ec:e5:a7:ea:0b:
73:99:34:9a:7b:09:04:5c:46:6c:48:22:fb:52:21:
44:a9:b1:ea:4e:27:88:f0:d8:01:81:e6:97:e9:10:
fa:8e:a8:ab:29:32:41:97:1c:47:d4:40:cd:47:ad:
bc:2f:50:89:4a:ce:8a:2d:14:c7:48:9e:5d:19:9a:
70:b0:dd:25:90:07:c6:91:64:42:08:59:6d:ad:c7:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D5:5D:79:91:85:5A:59:0E:E3:EB:BF:D4:31:60:6C:34:36:D6:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d44a641e-23b7-3772-a5b0-e31ce757b6f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:6f:73:9f:80:1e:b5:a1:3f:1b:6f:83:bf:37:cd:9c:11:26:
9a:43:04:67:08:b8:18:c7:ef:0a:d8:15:36:b9:a0:1a:13:09:
52:a5:03:4a:2c:7b:d5:d9:28:a9:52:a9:7c:42:a0:d3:a3:d7:
37:dc:9e:47:4d:a5:4c:22:18:34:99:b3:54:72:b3:21:73:d9:
9c:30:a0:7a:e6:33:de:ba:c1:b5:fb:e5:0d:31:74:d8:77:c2:
5b:f9:5a:53:ae:82:e4:cd:9b:e6:73:1b:aa:c4:2c:d2:47:de:
6e:cf:02:6c:13:02:55:98:7a:01:20:ec:dd:f2:76:35:c8:d9:
48:2d:51:f0:b6:09:59:8f:7c:69:37:d3:7f:35:42:16:cc:04:
e4:a1:03:b3:59:e7:e1:74:fa:d0:ab:ec:e1:f9:de:e6:d4:cb:
08:18:c6:44:b1:0c:cc:96:67:a2:ba:fc:39:e7:0d:16:07:24:
72:1a:3f:2f:29:53:61:5e:f2:0c:51:84:95:55:c2:f5:aa:89:
43:ec:db:22:67:6c:81:cf:42:9e:d4:64:ac:7e:33:06:00:14:
d8:80:12:08:16:df:00:40:6e:18:fc:f9:49:78:fd:a6:b5:86:
e6:dd:bc:56:95:f4:3d:34:f5:f5:84:03:ae:b4:f3:f2:36:85:
33:c7:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:27 2025 by rpki-client