Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7a26af5-19cf-36cf-8aed-1a6bccc72f59.roa
File: f7a26af5-19cf-36cf-8aed-1a6bccc72f59.roa (raw, json)
Hash identifier: i5EsR6dn1ukfxFsww66wbqlgH0rXqIFV7Qr/ceWlhoY=
Subject key identifier: FC:68:DE:1C:48:55:03:73:94:D4:D6:19:7A:5B:F4:77:EB:2D:60:05
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A775CA09E7FC2D3BF129180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7a26af5-19cf-36cf-8aed-1a6bccc72f59.roa
Signing time: Thu 27 Jun 2024 20:16:16 +0000
ROA not before: Thu 27 Jun 2024 20:16:16 +0000
ROA not after: Wed 25 Sep 2024 20:16:16 +0000
asID: 329386
IP address blocks: 2001:470:2ef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:5c:a0:9e:7f:c2:d3:bf:12:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:16:16 2024 GMT
Not After : Sep 25 20:16:16 2024 GMT
Subject: CN=e0ea0f44-6fda-4154-84b0-d2fcf310629e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:da:63:70:bf:82:e8:d9:26:ca:32:65:04:50:
37:6e:f9:cc:63:77:b7:65:89:7e:b3:cc:37:31:93:
86:78:e3:c6:cf:e4:b0:b2:42:e2:b7:9f:d6:0c:96:
07:24:20:80:e2:cd:b1:a6:82:e8:22:b5:8a:dc:7e:
3b:44:02:90:2f:d9:f6:a9:aa:7a:82:fd:cb:af:40:
0a:cc:97:7e:db:3f:1e:bb:75:ec:ef:ea:7f:c1:ac:
63:b9:f3:65:5f:3a:7a:57:79:b5:2e:74:9e:63:d4:
1d:60:9d:70:8d:7b:69:ca:2b:66:79:b0:0a:eb:74:
f8:00:a1:e4:e9:4a:2f:4d:4f:26:1e:02:30:8b:41:
b8:34:53:4e:84:db:4c:ec:8c:c7:d1:ff:2b:48:ec:
16:ad:40:32:89:47:de:a3:d0:9a:fd:2a:5c:36:a0:
47:f1:6e:79:82:89:35:7e:97:13:15:93:54:06:a2:
8d:12:0c:7f:11:29:4d:8e:bf:64:00:9d:1e:3b:6e:
dc:e2:df:6b:3e:32:a2:5d:06:fd:29:f1:82:f3:7b:
fa:54:a0:b5:c9:8a:43:00:04:0f:c9:af:52:78:4e:
22:f7:9d:6f:98:34:c9:29:fb:a1:dc:6e:1d:6e:f2:
1d:db:f2:59:55:0e:e8:1f:dc:66:d5:5f:50:e9:38:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:68:DE:1C:48:55:03:73:94:D4:D6:19:7A:5B:F4:77:EB:2D:60:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7a26af5-19cf-36cf-8aed-1a6bccc72f59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:a2:1d:87:81:a8:a4:42:02:b0:fb:c1:e3:b9:e0:a0:dc:ea:
8c:14:bf:fa:7a:1a:d8:ad:70:13:31:d9:da:05:d8:bb:77:b1:
60:35:f1:99:e2:41:1f:77:f1:3e:01:2d:e1:58:1b:bc:25:26:
80:82:c7:9a:26:b0:fd:55:4e:8a:25:15:4e:3a:d0:c7:3f:f7:
14:48:9c:bc:c8:d7:88:cd:cf:78:6a:5b:ba:39:f3:73:6b:05:
80:8f:23:a1:c5:f5:ff:3d:b1:15:99:1a:0e:65:70:36:3f:5b:
14:72:03:46:c4:93:b1:3d:db:02:89:ee:82:d4:8f:d6:89:ee:
a1:c0:38:58:03:1c:fd:49:45:38:52:8f:17:02:d7:66:69:1b:
86:07:79:e3:0a:11:53:5c:0e:f3:d9:ba:2a:7b:71:09:48:eb:
5d:98:05:b3:6b:e4:ce:ac:0d:c4:ea:87:3e:9d:8b:26:99:b3:
80:46:3e:ac:2d:c9:9f:d5:9a:fb:ba:02:b6:2f:54:0e:42:8b:
6d:24:3a:ec:dc:0a:2c:ac:a9:30:01:88:84:3c:00:86:39:1a:
88:63:10:cc:b3:8c:7d:a7:f2:0d:26:42:15:cc:13:55:0c:ac:
24:0f:83:88:8e:77:6f:30:4c:88:24:a0:85:c8:7f:e4:87:ca:
1f:cf:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:23:05 2025 by rpki-client