Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bda97060-af20-3e6f-9ba8-4bdb49a2c4f4.roa
File: bda97060-af20-3e6f-9ba8-4bdb49a2c4f4.roa (raw, json)
Hash identifier: VHsxPdUwwGV06JfaI53urZpZ10aiDUjwe3et4BjxEO4=
Subject key identifier: B8:B9:22:9E:B9:7E:DF:D9:9D:9A:9E:41:7F:1D:53:F1:BD:63:FA:53
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583DCE6874704CBC403CC4DA8B20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bda97060-af20-3e6f-9ba8-4bdb49a2c4f4.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Tue 06 Aug 2024 04:00:00 +0000
asID: 396982
IP address blocks: 2600:1901:8170::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ce:68:74:70:4c:bc:40:3c:c4:da:8b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2024 GMT
Subject: CN=b79a6726-b57f-43f4-8395-24b7765eee49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:1f:40:a8:59:b5:cc:57:4d:10:95:7f:36:
37:cb:36:6d:79:5f:28:71:97:eb:8e:33:0a:6b:54:
c7:5a:77:63:ef:75:fb:f7:02:8f:c1:8f:7e:3d:7a:
1e:4e:e7:a5:6c:d9:a9:46:26:26:c3:75:99:04:80:
05:78:e6:81:be:7c:ca:30:8c:63:e5:e0:e4:f7:fc:
2a:25:0a:d6:a5:03:83:1a:6e:2f:28:05:93:c1:f0:
ee:bf:2b:6f:58:77:c1:04:28:be:b6:ce:64:d3:bb:
41:04:58:e1:32:68:3f:c4:a9:c5:32:53:fc:11:db:
4c:5a:c8:cf:ac:99:7f:77:27:40:7d:52:f0:aa:54:
54:c2:70:dd:85:70:db:f6:14:ca:2b:84:96:77:b0:
6e:46:38:5a:df:01:d8:0d:b3:39:e0:28:8e:e9:4e:
8b:63:34:e5:b5:3b:3a:9e:66:0c:e2:08:a6:31:23:
f4:c4:c9:3b:80:41:77:83:cc:1e:89:b2:91:b0:6a:
89:4a:54:37:80:be:da:18:c9:00:4f:05:ad:a0:b2:
dd:3a:8f:f5:bf:f3:e1:ec:6b:c2:af:d7:49:bf:80:
50:82:95:25:9a:0c:d8:fd:35:00:4b:26:6b:fa:ac:
c5:c5:fd:d0:9c:f9:62:05:89:5c:27:d4:54:bf:fe:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B9:22:9E:B9:7E:DF:D9:9D:9A:9E:41:7F:1D:53:F1:BD:63:FA:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bda97060-af20-3e6f-9ba8-4bdb49a2c4f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1901:8170::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:6d:3a:cf:ee:32:10:53:6d:7a:18:8a:44:62:22:3e:de:88:
41:fc:cd:d9:3a:19:4b:18:5b:ef:35:20:21:d7:ce:37:49:1a:
12:cb:e2:fb:e0:a9:26:61:77:43:e3:ea:aa:ea:33:ea:ff:c1:
05:1e:73:66:61:5c:6e:ce:74:4c:8c:e5:29:93:9f:52:5e:8b:
a3:d2:ad:e6:9f:e4:37:68:55:01:86:99:12:cc:78:bb:6b:1e:
0a:df:9a:97:1a:55:28:02:3c:06:ae:bd:73:96:7a:00:53:bb:
ae:a3:0e:9d:e5:7a:65:3b:8d:33:b4:37:32:02:fe:20:1a:3b:
0f:66:e3:fb:03:9b:6a:8e:05:d3:6e:df:65:a6:80:34:3b:f5:
a4:0e:55:d6:5b:0f:38:78:5c:ea:30:71:03:39:d6:c4:cb:c6:
29:ee:f8:6c:76:f4:9a:56:62:07:fd:a2:3d:a9:37:62:01:c8:
75:f6:61:77:64:37:d7:8e:12:98:16:4b:ba:b6:78:d9:b8:9a:
0d:8c:73:0c:27:4d:e3:b5:a3:ac:a7:88:d2:f1:00:b7:5a:81:
0f:48:9c:d4:81:17:82:87:05:35:07:29:26:f1:f5:73:e0:95:
a9:71:c5:66:b1:d2:20:91:dd:ec:d2:e5:7c:cc:6d:46:ad:74:
da:60:04:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:26:19 2025 by rpki-client