Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cbb16e2-dd20-3380-a11b-f7962278aa70.roa
File: 2cbb16e2-dd20-3380-a11b-f7962278aa70.roa (raw, json)
Hash identifier: uSUM0eL1fU/R62w1HvzwfxMgcKQO7kmFtd4qr3Zk+Gs=
Subject key identifier: 3F:FA:36:08:A5:BA:E8:0D:65:73:63:F0:BD:BF:20:26:5A:0E:0E:76
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846C7F3DEA578E4203073599E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cbb16e2-dd20-3380-a11b-f7962278aa70.roa
Signing time: Tue 06 Aug 2024 01:30:14 +0000
ROA not before: Tue 06 Aug 2024 01:30:14 +0000
ROA not after: Mon 04 Nov 2024 02:30:14 +0000
asID: 202673
IP address blocks: 2001:470:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:f3:de:a5:78:e4:20:30:73:59:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 01:30:14 2024 GMT
Not After : Nov 4 02:30:14 2024 GMT
Subject: CN=0f88a0bd-d7ca-4447-87fd-b2acccc57826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:77:6a:25:c0:a9:54:d4:57:7c:01:c4:5e:
d8:b0:1d:fd:39:e0:80:5e:7c:4f:d0:30:32:fe:08:
f5:56:b5:aa:a4:21:31:1c:af:31:c0:39:61:b9:4f:
09:a7:a8:f6:3d:3b:dc:c3:7d:68:b6:65:43:da:ca:
18:6a:82:8b:86:88:84:d6:77:8f:5f:e0:31:31:b3:
d1:e3:a8:55:85:5f:08:90:98:33:52:8f:a2:bf:d2:
4a:d8:8b:46:80:9f:10:9d:b4:e4:1e:06:51:ef:39:
1a:23:c6:1f:a8:dc:a5:62:9a:3d:ef:67:24:a2:9b:
68:02:fc:c8:bf:99:2d:c6:0d:64:82:ff:57:ee:44:
51:e2:e8:8f:97:c4:b2:35:bc:e3:85:dd:64:05:ec:
1a:58:18:6d:0f:ec:17:5b:1d:8f:64:a1:bd:64:fb:
4f:76:4e:7f:b2:47:f8:8c:6d:8c:b9:ba:75:5e:28:
af:af:7b:24:21:8a:89:47:eb:4b:71:4f:fc:3e:0c:
3b:93:f5:14:a8:ec:08:18:82:19:76:53:3c:2d:9d:
4f:45:c8:76:de:7c:6c:95:8a:9a:87:37:40:ad:80:
37:36:dc:08:1e:70:4b:3d:2b:e6:e8:70:bb:59:4a:
08:01:99:88:65:9e:80:21:e0:0a:21:7b:82:90:17:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FA:36:08:A5:BA:E8:0D:65:73:63:F0:BD:BF:20:26:5A:0E:0E:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cbb16e2-dd20-3380-a11b-f7962278aa70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:354::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:09:05:97:78:22:b2:be:94:d1:5e:a9:45:6e:39:54:75:27:
7e:69:6e:9b:0e:e7:2d:f2:30:aa:d6:e4:a8:ba:af:da:8a:52:
96:78:35:db:e7:d5:1c:19:7d:1b:4b:d5:17:88:63:75:7d:d8:
45:5b:d8:4e:dd:7d:bb:51:c3:eb:8a:f2:d8:6e:28:b1:56:ee:
72:01:ff:f0:68:6d:10:84:f2:2b:a0:bf:5f:09:d5:9a:63:77:
c2:0b:36:5b:a6:96:37:51:63:d6:08:42:0b:f1:ef:21:01:0c:
92:72:90:47:c6:45:14:e7:51:e2:2d:e9:7b:50:4b:38:38:40:
26:8d:86:02:60:70:5d:ea:47:da:de:79:09:bb:61:44:60:09:
c7:4e:6a:08:72:f5:f0:f0:0b:98:e7:fe:43:cf:1f:da:52:96:
48:1e:97:62:df:e4:4a:fe:82:e1:3a:1e:0c:c6:af:b0:1e:a6:
00:09:03:b3:f4:9f:92:6d:cd:d0:03:81:ab:bc:d6:ce:70:49:
85:1d:b1:c1:95:18:34:1c:55:58:76:cd:f4:92:2e:0a:5a:b1:
50:12:ad:e2:d7:2d:15:69:98:71:fd:cc:65:8d:a5:3e:5a:62:
e8:c2:1c:f6:c7:13:57:db:51:1c:2c:af:f7:4b:69:f1:1d:04:
40:f1:3e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:39:46 2025 by rpki-client