Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61b9c797-2087-314b-abec-a0ff6909b924.roa
File: 61b9c797-2087-314b-abec-a0ff6909b924.roa (raw, json)
Hash identifier: LOIsy9qzjlH/dJCrsmngmpG1qkXSwrA5waZ0S3376v8=
Subject key identifier: 7C:E9:CC:18:11:5D:D9:BC:35:FA:5F:64:AA:32:76:02:3A:30:47:8F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858464D0F1970F2DF7F29D9B65390
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61b9c797-2087-314b-abec-a0ff6909b924.roa
Signing time: Sun 23 Jun 2024 01:00:24 +0000
ROA not before: Sun 23 Jun 2024 01:00:24 +0000
ROA not after: Sat 21 Sep 2024 01:00:24 +0000
asID: 400725
IP address blocks: 2001:470:1ec::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:4d:0f:19:70:f2:df:7f:29:d9:b6:53:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 23 01:00:24 2024 GMT
Not After : Sep 21 01:00:24 2024 GMT
Subject: CN=f4f0d5d0-56b0-48d6-864a-a59033cecc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b4:19:14:24:4a:39:b6:48:0e:1c:1a:3c:89:
3c:7e:f4:a6:a6:f4:31:16:3c:5e:8d:70:f1:ec:3c:
03:a4:1c:6b:91:cd:3a:45:a7:ca:6b:fb:72:dd:63:
35:8b:5b:80:cd:1f:82:5d:c3:73:44:5d:23:00:ed:
6e:2b:26:2b:6f:ba:8d:b3:d9:dd:e5:f2:d5:b5:9f:
70:34:5b:95:10:75:8f:90:e1:13:cc:0d:ed:2a:ce:
d1:3c:94:ac:1b:5e:bd:c4:45:1f:84:64:09:2f:9c:
94:8a:2a:a3:54:b6:84:25:1f:85:60:ee:de:6e:aa:
75:0b:a9:ec:61:f2:c6:97:7a:a2:1f:2d:d8:65:c2:
3e:bb:6d:22:9c:07:0d:0e:7c:16:04:dc:f0:d4:3f:
40:2e:d9:07:2f:2b:bc:81:1e:2b:42:9a:01:71:be:
fc:22:63:d6:5f:66:ca:da:76:d1:cc:b4:89:d7:39:
32:b0:44:bd:6e:63:70:fc:4b:13:6b:fa:71:3a:e4:
90:b1:f9:f9:87:e2:a3:52:83:a1:67:3d:39:65:cc:
f4:46:44:c6:c4:70:3d:79:ec:3a:82:7f:fe:f6:7a:
a3:15:d2:38:33:81:ba:3d:c2:ee:09:6a:83:b6:d1:
1c:f8:c9:9c:c8:2f:3f:9f:80:7f:20:55:04:6a:6c:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E9:CC:18:11:5D:D9:BC:35:FA:5F:64:AA:32:76:02:3A:30:47:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61b9c797-2087-314b-abec-a0ff6909b924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1ec::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:ca:6e:d2:4f:db:7d:b8:11:e7:6a:f8:73:ae:0a:9b:64:62:
7d:dd:be:1f:8e:cd:16:58:d2:17:fe:81:82:b3:a3:d4:c2:74:
e6:fd:82:a9:6a:59:67:a8:42:69:af:33:d7:55:4c:88:e6:3b:
0f:20:07:11:03:de:6d:56:94:fe:40:4b:e4:a9:ef:a4:97:dd:
eb:0c:c2:10:d7:34:5f:62:83:2b:4a:ba:3b:72:6a:07:a2:c4:
51:7a:2f:e4:54:ff:9f:74:a3:88:b6:b5:14:d8:b0:19:b7:24:
b6:f0:34:5e:8c:86:22:95:1a:d9:87:dd:fa:ca:58:e5:f8:15:
8c:62:5b:48:1d:2c:80:d1:43:3e:cb:d8:e2:ad:24:e2:47:db:
a6:8b:e2:c1:f3:d8:fc:02:3d:51:a4:7f:ce:8f:a9:f8:69:57:
7e:34:22:76:ab:97:4d:d3:fe:99:ae:c5:8e:a7:a1:bc:59:b3:
e5:65:67:90:b2:b7:8e:e6:21:2d:bf:6a:2a:8a:5e:40:d3:67:
56:d2:d0:bb:4a:ab:4b:83:84:05:3a:7d:f2:dd:bc:a2:ca:33:
32:23:7a:d8:ec:ad:17:39:a4:cd:4c:65:e2:3f:42:52:08:58:
30:05:b1:bf:7f:46:18:62:22:d5:19:ef:22:18:02:84:d4:33:
97:14:38:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:00:36 2025 by rpki-client