Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d522d13a-79c4-3218-98cc-377b5578b6ba.roa
File: d522d13a-79c4-3218-98cc-377b5578b6ba.roa (raw, json)
Hash identifier: dui1GJMSeXAEW/03iCxOrqkV4vgeOvZEOGnsuUcrJ78=
Subject key identifier: F1:22:C4:EC:21:9D:A3:46:DD:A0:88:CA:CF:F7:15:59:6C:B7:58:7E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583F648E6BC259799CFABCC2AA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d522d13a-79c4-3218-98cc-377b5578b6ba.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Tue 28 Mar 2023 04:00:00 +0000
asID: 396841
IP address blocks: 2001:470:d9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:64:8e:6b:c2:59:79:9c:fa:bc:c2:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Mar 28 04:00:00 2023 GMT
Subject: CN=3ffd431d-15b8-430d-8ef8-883f1995adaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3c:12:95:4f:5a:d3:89:42:ac:98:59:7b:a3:
11:2e:c6:df:6e:31:99:7c:aa:45:cd:5e:96:26:4a:
9b:52:0d:51:38:c5:e8:b4:60:5d:1d:1b:ec:c5:26:
f0:87:b5:c8:80:98:b4:a1:e8:16:81:8d:12:86:9c:
8b:62:7f:3d:f1:24:ad:f8:24:7a:8d:c5:aa:af:50:
a7:2a:c2:05:95:c3:5e:62:6c:3c:9c:78:6f:95:06:
91:7e:e2:10:1e:09:8f:80:f2:ae:0f:35:ef:d0:96:
c6:d0:4a:97:c3:59:56:c8:ed:bc:6f:12:8e:54:2a:
d0:43:60:5c:80:3e:18:5f:1d:b3:2e:a6:21:70:4a:
74:0f:f8:e6:b4:2c:8e:b5:e7:8a:fa:b5:4a:07:1b:
4b:af:13:01:9b:cf:c8:1a:0b:51:08:13:0a:98:b5:
79:f6:42:29:dd:2d:a7:04:7e:fe:ad:f9:fc:7c:f1:
28:b1:bd:18:37:05:1b:9a:81:1f:48:46:30:15:8f:
6e:4c:7e:5c:5e:eb:86:50:50:ce:9b:71:3e:45:1b:
c6:81:d1:6b:91:ba:d4:dd:3f:5f:77:bf:cc:84:1c:
0a:67:eb:a4:1d:d0:e3:f9:c9:c3:44:4b:bd:ca:e4:
eb:5c:59:07:83:a9:bc:a9:c5:46:5e:ec:c6:f1:eb:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:22:C4:EC:21:9D:A3:46:DD:A0:88:CA:CF:F7:15:59:6C:B7:58:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d522d13a-79c4-3218-98cc-377b5578b6ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:d9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:8e:b5:31:1b:f1:34:df:7f:7c:a6:56:bf:47:a8:32:75:6f:
4b:e4:75:37:5e:d1:62:af:29:c5:a6:60:39:eb:10:9f:37:e0:
55:dc:c1:a9:7c:2d:3c:64:c6:83:b0:66:b2:42:9f:5d:ad:81:
f2:f7:03:af:ac:c7:87:c1:ec:a0:28:6f:69:47:77:5d:c2:98:
42:0c:b5:69:8b:17:3c:2c:d4:85:ca:82:47:38:fd:ba:5a:25:
13:1f:3c:49:96:2b:f7:63:7a:a2:dd:39:75:da:ea:aa:94:cf:
70:bc:25:c0:46:6d:f6:f6:e0:c2:db:17:c7:ce:86:22:83:a7:
1f:25:88:63:87:94:48:07:e7:04:30:4f:be:2f:f9:ae:f1:83:
06:c7:c8:06:f7:1d:c8:6a:7f:60:97:b9:ec:3c:a5:15:c8:e1:
0c:f1:dd:d9:6c:52:31:eb:5e:cd:4f:ca:1d:cc:3f:23:f9:27:
20:b1:ec:7c:ff:a9:73:4f:da:4b:ca:33:30:ed:8f:b1:45:57:
17:bb:df:dd:bf:91:80:12:fa:43:80:f6:c1:2f:e2:c6:e4:2f:
b7:aa:1f:ab:0e:c6:58:48:49:76:81:a5:c1:de:a8:74:b9:3f:
28:10:f6:c0:13:8e:38:60:b4:23:ed:f9:4b:77:ba:18:9c:ea:
e8:da:eb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:06:49 2025 by rpki-client