Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/649bc49c-6bd6-396f-b0cf-e265e8535bbc.roa
File: 649bc49c-6bd6-396f-b0cf-e265e8535bbc.roa (raw, json)
Hash identifier: VchWrzgsacilbiUJiWeTxFQi9Mbte/tvDhmG+/0WUQM=
Subject key identifier: BF:9B:E0:96:63:E1:C7:41:C7:55:35:A4:69:72:7B:7A:80:9C:57:3F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A73B338E4C40C92CF3ACE40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/649bc49c-6bd6-396f-b0cf-e265e8535bbc.roa
Signing time: Thu 27 Jun 2024 20:08:53 +0000
ROA not before: Thu 27 Jun 2024 20:08:53 +0000
ROA not after: Wed 25 Sep 2024 20:08:53 +0000
asID: 138645
IP address blocks: 2001:470:9f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:73:b3:38:e4:c4:0c:92:cf:3a:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:08:53 2024 GMT
Not After : Sep 25 20:08:53 2024 GMT
Subject: CN=c3bb0094-c66a-4297-bd5b-79ce887e517e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:77:e5:e9:7f:54:69:67:f6:0d:7d:c3:80:
54:87:e1:dd:92:71:ab:c7:4c:a9:e7:fe:cf:f2:cc:
1b:76:e1:c0:15:75:0c:2c:c6:20:89:f8:19:31:22:
73:ce:a8:1e:82:21:c6:f6:89:2f:55:be:22:59:12:
1a:5f:cc:d4:b6:e6:4c:b7:d1:99:88:51:68:4c:69:
dd:43:94:b0:86:4b:6d:06:1b:a1:56:73:7f:61:fe:
b2:3e:91:76:c3:01:76:d3:ac:76:5e:de:d5:8e:91:
c8:95:ca:08:3d:82:12:f0:17:3a:a3:c2:5a:62:3a:
9b:77:e1:d7:9d:1d:33:8c:91:53:9f:d6:bd:44:5b:
c6:2d:c5:3f:f4:94:50:72:e8:d9:50:89:b1:5d:e2:
fc:5d:73:b5:17:5f:f8:3a:a8:ed:7f:1c:14:18:56:
d7:67:ca:31:07:67:98:bf:ea:1a:4c:ef:41:c5:b8:
de:a2:df:93:8b:90:42:f4:12:69:65:b3:a2:5d:76:
e4:cf:45:5b:19:e8:bf:7f:fc:a7:bc:e6:34:c3:90:
eb:d3:89:0f:fe:d7:4d:66:0e:a3:a2:a6:b7:95:c9:
43:97:2b:62:c6:9d:25:f3:0e:88:bd:ff:b3:dd:3f:
2d:c1:25:03:5d:66:f6:f6:be:d5:91:08:0e:11:31:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9B:E0:96:63:E1:C7:41:C7:55:35:A4:69:72:7B:7A:80:9C:57:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/649bc49c-6bd6-396f-b0cf-e265e8535bbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:9f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:c8:4c:fa:9e:4a:4d:fc:53:6c:70:d2:79:0d:17:4b:7e:e0:
bc:96:05:cc:b6:25:fb:a4:c9:dc:00:8b:3d:f7:15:62:5a:21:
7c:bb:49:fa:52:60:bf:b9:9d:24:3a:ee:54:f8:a8:0a:88:c5:
52:60:45:8c:2c:23:0a:2c:cf:b6:3a:a5:b4:65:d4:7f:0b:5c:
8e:c8:38:85:85:e7:13:9e:c6:d9:82:2c:ce:eb:c1:73:92:a2:
7c:d2:93:46:2d:35:4f:13:4b:56:71:d0:e7:08:5f:00:74:24:
c3:a9:da:72:1f:3a:37:5c:a6:28:ea:fc:6f:84:4d:5b:b6:d1:
90:67:0e:9e:4c:61:68:8f:4b:bb:ef:e4:86:36:3f:f4:0d:ec:
d5:92:6d:6d:a1:28:b9:6a:4c:b6:82:85:5d:39:c7:65:ce:07:
5f:cf:01:4c:fb:79:15:48:95:15:80:23:dc:a0:85:e4:4e:3d:
bd:ce:ac:90:98:a5:66:71:56:d2:dc:64:14:d2:a7:a7:54:a4:
8f:3f:ba:5a:5b:00:db:35:19:e2:8d:11:fa:d0:eb:9e:c5:29:
bb:f4:79:2e:d4:bc:57:42:b6:87:68:7b:31:dd:3d:1c:02:93:
60:d9:92:d7:c3:d4:a5:ff:fb:3a:73:bc:03:63:48:08:93:ce:
85:09:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:42:11 2025 by rpki-client