Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72d3def4-d035-3d3b-bda5-8c3f4cb97225.roa
File: 72d3def4-d035-3d3b-bda5-8c3f4cb97225.roa (raw, json)
Hash identifier: 2JWBdKPmEdBjPuZEllZE+L2Pyr/Gz4cg2637Gzs00G4=
Subject key identifier: 20:E8:26:D9:AC:07:8A:D7:7A:43:6B:62:2D:48:3A:46:CB:EC:9D:4B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285840D3245CAEB764652459721200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72d3def4-d035-3d3b-bda5-8c3f4cb97225.roa
Signing time: Sun 05 Feb 2023 12:00:00 +0000
ROA not before: Sun 05 Feb 2023 12:00:00 +0000
ROA not after: Sat 10 May 2025 04:00:00 +0000
asID: 396982
IP address blocks: 2600:1901:81f0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d3:24:5c:ae:b7:64:65:24:59:72:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 12:00:00 2023 GMT
Not After : May 10 04:00:00 2025 GMT
Subject: CN=d83a677f-aae6-489b-92bb-0860972c8d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:77:23:0d:9a:8b:94:bb:aa:41:41:dc:b1:
73:8f:ac:a2:1a:57:5c:1d:a7:fd:94:b2:3d:5a:66:
3b:ff:39:05:06:66:b7:23:7b:be:50:a4:ab:06:9a:
5e:89:6c:03:43:90:a6:62:29:a2:f9:4b:80:73:32:
37:25:ac:cb:bd:c5:b0:a8:ef:d3:2a:ca:c0:96:67:
58:1a:bb:7c:75:36:74:50:32:87:99:fc:5c:a2:bf:
36:b9:12:7f:f3:63:a0:80:eb:d2:61:10:1e:93:51:
c9:dc:3a:4e:5e:7f:f7:f4:e0:ab:00:21:07:eb:ea:
3a:47:2a:93:1f:36:40:94:e4:70:50:14:78:a2:0e:
b9:43:62:1f:e7:bb:ee:40:02:88:79:cf:94:94:77:
72:e1:e8:f7:58:3d:fa:04:fc:db:3b:28:c0:d1:e1:
05:ae:81:ad:9f:63:45:47:8a:89:81:34:e1:d7:f8:
84:14:2c:17:4b:26:60:c6:49:07:bc:cc:60:e3:73:
cd:db:21:99:ee:03:fe:80:43:54:48:fb:b1:af:84:
68:5b:46:19:e4:38:12:c5:2d:94:e5:aa:6d:14:16:
e6:61:61:3d:ee:dd:75:42:c4:fb:00:08:de:0c:cc:
1c:a2:ff:62:24:76:ce:53:37:b2:6e:3a:5b:50:67:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:26:D9:AC:07:8A:D7:7A:43:6B:62:2D:48:3A:46:CB:EC:9D:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72d3def4-d035-3d3b-bda5-8c3f4cb97225.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1901:81f0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:30:34:9d:be:f6:01:9e:f5:e4:6e:88:dd:b4:b4:df:01:52:
bc:ca:26:f5:5b:d3:21:bc:72:e3:f7:a0:ce:7c:e7:c2:d2:f3:
a8:e4:96:19:9c:13:cd:84:a0:c4:98:e3:d7:1a:52:7a:fa:86:
f1:9e:ac:18:55:d7:f4:ea:7e:76:bf:9b:58:cb:06:5f:f4:7e:
7e:18:21:de:e8:06:62:e0:71:26:aa:79:79:6d:ff:78:12:9c:
c5:80:03:99:a6:f1:42:2d:a9:eb:d2:24:5f:82:50:e5:6e:75:
2d:3a:2d:69:6f:8b:e7:8d:12:2b:5c:3b:9b:18:1f:b0:b0:92:
4e:79:6a:e8:7c:a9:97:2d:d5:d8:87:56:2e:cf:cf:c7:a6:80:
02:88:8a:dc:77:bc:a5:5f:52:b7:87:c8:af:e9:d5:53:24:f1:
4c:ea:47:e2:15:c6:ab:9f:2e:49:6d:eb:5d:51:81:3f:78:11:
c8:6a:b8:d5:7d:c8:99:c7:eb:ae:50:6a:ce:2b:a3:01:2a:b2:
04:20:dd:84:bb:b9:1e:15:75:4f:87:ea:97:20:ff:b2:d2:f1:
0c:61:73:87:48:e6:20:a5:24:b5:43:56:d1:f8:fa:bb:8e:12:
74:f4:f2:23:79:e5:ca:25:e3:fc:59:f8:46:c4:27:b3:55:c7:
98:aa:15:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:34:05 2025 by rpki-client