Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1a89c45-74d8-39d8-b9cf-f9808a242d98.roa
File: f1a89c45-74d8-39d8-b9cf-f9808a242d98.roa (raw, json)
Hash identifier: c1SVVy4lATTtgLrnWwlGWJoV9m68bm0WHes+JMoEghM=
Subject key identifier: D9:A7:37:62:CF:B2:69:20:21:0E:99:45:C0:E8:80:F0:CA:0B:2F:16
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858473A5B76459F8F8418A6463E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1a89c45-74d8-39d8-b9cf-f9808a242d98.roa
Signing time: Mon 16 Sep 2024 01:00:29 +0000
ROA not before: Mon 16 Sep 2024 01:00:29 +0000
ROA not after: Sun 15 Dec 2024 02:00:29 +0000
asID: 36902
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:5b:76:45:9f:8f:84:18:a6:46:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 16 01:00:29 2024 GMT
Not After : Dec 15 02:00:29 2024 GMT
Subject: CN=7b239976-c832-4167-986c-7f9397a78d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:73:7b:3e:35:a2:e6:8e:a9:b3:93:e5:84:ce:
4c:d9:63:82:e7:c9:c3:44:f1:8b:0c:3e:ab:1c:04:
9a:71:1b:3f:ae:66:b8:db:1b:52:1d:2c:8f:0b:8a:
8c:ee:c9:c8:8b:5b:c0:cc:b8:cd:13:be:4c:34:22:
3f:9a:99:06:73:94:49:1d:39:ca:da:b3:fd:0e:f1:
ef:83:d1:4b:fe:43:de:68:4f:fc:11:ac:33:81:bb:
e6:7e:3e:65:f9:04:66:8e:b7:e1:83:2c:01:b0:ea:
de:19:e5:61:90:bb:3b:8f:ae:0c:7b:5f:a2:43:82:
1f:02:d5:46:fa:f6:fc:09:83:32:84:4b:a5:a6:4d:
29:02:4c:25:ff:09:f7:87:28:70:0e:41:86:5e:19:
53:f9:37:27:ce:f2:bb:0b:45:9b:57:f2:2e:ca:0d:
7a:b2:49:6d:91:ac:90:20:5c:dd:8c:7f:6d:8f:56:
e4:b2:c0:49:97:0c:72:58:f1:f6:41:c7:5c:71:8f:
0a:d4:ce:52:d3:9c:c5:2a:3f:e0:de:49:bd:c0:34:
09:ea:3f:d0:d4:7b:a7:99:7e:7c:65:a8:1c:3a:93:
04:0a:c2:d7:8c:ff:39:10:d1:49:96:a9:53:c2:f3:
bd:c2:b6:7f:9e:ce:35:82:53:4c:bc:bf:91:97:5f:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A7:37:62:CF:B2:69:20:21:0E:99:45:C0:E8:80:F0:CA:0B:2F:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1a89c45-74d8-39d8-b9cf-f9808a242d98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:97:94:45:3a:68:bf:40:f4:03:4d:99:e1:4f:8c:6a:65:55:
79:bb:b9:86:01:cd:67:31:ef:1f:eb:87:c9:70:d6:3b:4d:00:
37:99:82:4d:8f:2d:e0:a5:33:87:6f:75:15:79:c0:a4:25:a8:
86:e2:c7:74:00:57:e2:d6:2b:ac:7e:15:f9:6f:90:08:23:7b:
00:d0:13:87:35:0c:44:73:8d:39:10:6a:e9:0c:dd:27:79:ca:
b6:31:67:24:78:43:d9:19:a3:2e:89:aa:c6:30:02:58:3b:05:
86:bb:24:42:8b:63:75:7c:3e:53:71:78:b7:1e:e8:c9:a6:f5:
ec:5f:12:2b:c2:07:ed:5f:ee:d4:f8:d7:e1:dd:ff:7c:51:30:
71:50:0e:e1:7c:59:c7:ac:0b:a9:a8:9a:b9:be:99:53:df:3f:
3c:0e:a4:fd:c6:94:b2:0a:8d:4c:8e:0a:eb:77:65:7e:76:86:
f0:ed:3c:d4:b0:fb:e2:89:18:59:14:e2:7d:27:45:dc:82:dc:
39:b7:4b:49:48:cc:2f:fb:e4:63:00:79:60:30:0f:7a:5d:dc:
3b:b2:b0:58:6c:47:24:b9:a1:8f:41:81:b0:9b:dc:91:5e:ca:
eb:36:55:50:ee:6e:c7:89:a7:28:b9:d3:a2:5c:29:7a:20:fc:
9f:4a:6a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:23:37 2025 by rpki-client