Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d98e96c6-99d6-3c58-b382-3a5157b63d18.roa
File: d98e96c6-99d6-3c58-b382-3a5157b63d18.roa (raw, json)
Hash identifier: VARP01A17YmGxtWD6LhcSWAlfudzTjFJUu2Wq2auiIs=
Subject key identifier: 8C:F2:02:1B:B2:96:D9:90:ED:58:26:B0:46:EC:E6:C2:CA:3B:48:3B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846E3DEACC30879D2399AB6BB18
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d98e96c6-99d6-3c58-b382-3a5157b63d18.roa
Signing time: Fri 16 Aug 2024 01:30:10 +0000
ROA not before: Fri 16 Aug 2024 01:30:10 +0000
ROA not after: Thu 14 Nov 2024 02:30:10 +0000
asID: 200020
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e3:de:ac:c3:08:79:d2:39:9a:b6:bb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 16 01:30:10 2024 GMT
Not After : Nov 14 02:30:10 2024 GMT
Subject: CN=4e2df016-188f-483b-93e5-7c4cb702ca63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:29:0f:af:4f:b2:b5:e2:f0:71:e7:c4:a6:c5:
bc:d5:21:5f:00:56:ef:a2:29:3a:36:68:5c:c8:0f:
00:5f:6f:78:31:32:1c:0d:c1:59:b4:b7:8a:c1:aa:
6f:84:ec:e0:c7:cd:e5:e9:13:97:30:a0:31:a8:a7:
a3:f4:b9:c7:5f:ea:10:ab:53:fc:e0:69:33:ce:a8:
bd:3b:cf:7a:3a:72:d3:01:a1:f6:63:46:0e:9c:03:
bb:78:8b:44:9d:b5:0a:ff:1a:cb:99:ef:33:54:ec:
85:00:a8:90:73:3a:5f:cd:bb:0b:c5:2b:06:8e:d3:
2c:a1:0d:c5:53:58:69:55:b0:63:71:9c:0d:d4:31:
8f:74:00:d9:42:fa:d3:ba:fd:c6:e3:6e:66:67:1c:
84:39:39:92:58:4c:15:4d:9c:ab:b1:ee:e5:27:46:
2d:97:d3:e3:80:fe:3d:b1:f1:bb:25:b5:de:98:0d:
0e:41:d2:87:7c:ff:26:62:05:40:c6:53:98:54:79:
69:9f:a3:64:6c:8c:81:6f:01:e8:a3:6e:06:9a:7d:
bb:19:eb:3e:77:76:a4:d6:06:99:af:16:a3:47:a6:
62:d2:0e:d2:44:30:95:dc:fe:a8:7c:8e:3d:ac:22:
1a:76:eb:f4:5c:94:66:cc:0e:b4:63:86:5d:62:88:
17:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F2:02:1B:B2:96:D9:90:ED:58:26:B0:46:EC:E6:C2:CA:3B:48:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d98e96c6-99d6-3c58-b382-3a5157b63d18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:c5:d4:02:25:00:41:00:06:bb:bd:ba:54:26:7b:3e:92:06:
89:38:e4:7a:57:69:fe:c7:54:75:da:2f:fe:9d:8c:e8:32:bb:
3f:ce:52:d0:5b:e3:23:df:d5:e1:ee:e2:0f:73:fa:c9:55:74:
86:2a:33:e4:02:9e:17:ad:e2:4d:d5:9e:e3:f3:59:88:a2:ca:
55:37:a7:87:43:f1:c7:1f:f0:61:7d:eb:87:3d:92:17:9c:0a:
29:38:6e:08:a5:5e:08:c8:85:b2:c4:c5:6d:1b:87:b9:db:aa:
1c:a4:8d:11:5f:b6:65:84:8f:01:8c:b3:c2:00:3b:3e:92:54:
76:16:80:cb:e0:b9:12:83:5b:cc:45:65:cd:4b:0c:a5:fc:35:
d7:5a:58:6a:a2:41:59:78:8d:33:e4:2f:aa:c6:a3:dd:65:25:
73:22:99:f9:5b:70:09:2a:e1:5c:5a:02:b0:c1:0f:b8:bd:13:
6d:4e:7d:07:7e:d6:91:29:f8:bd:09:01:81:49:72:49:2a:36:
ff:4c:df:08:ad:89:b9:6d:cd:73:fd:da:c2:b0:a3:83:fa:8c:
3c:26:d6:d6:55:ec:26:89:b0:80:5d:d0:48:ae:68:5b:dc:11:
9c:7c:cd:5d:d1:7d:ad:59:3d:58:c8:07:b8:ef:62:9c:c7:77:
f8:6f:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:52 2025 by rpki-client