Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7fa7464-a16c-335f-ad11-d29fc3262f8d.roa
File: a7fa7464-a16c-335f-ad11-d29fc3262f8d.roa (raw, json)
Hash identifier: ECAac/YBIRp7m6eQtBNZZylJKRuRxrbWZ8E/Kh4qThs=
Subject key identifier: DF:9B:0D:2E:4C:CC:FD:C4:B3:FB:B0:01:1D:6B:8B:A7:9C:06:F1:28
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848C9BF7C1FF13D878091E8B080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7fa7464-a16c-335f-ad11-d29fc3262f8d.roa
Signing time: Thu 06 Feb 2025 02:30:11 +0000
ROA not before: Thu 06 Feb 2025 02:30:11 +0000
ROA not after: Wed 07 May 2025 01:30:11 +0000
asID: 215828
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:bf:7c:1f:f1:3d:87:80:91:e8:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 6 02:30:11 2025 GMT
Not After : May 7 01:30:11 2025 GMT
Subject: CN=24be37d0-d5f1-4df1-9f1c-164c232cf07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:41:44:51:8f:b5:4e:d9:21:5c:a1:8d:bd:
3b:48:43:f4:2e:62:a4:3c:14:aa:7a:01:86:93:20:
19:74:e8:4d:7f:63:6c:09:6c:fd:01:31:b2:35:82:
86:97:a2:07:51:7f:04:00:a2:d9:b7:2e:aa:31:26:
f6:3c:11:29:b4:98:b4:39:e1:32:fb:7e:31:ee:5d:
9a:05:d3:03:18:e3:c3:2e:50:21:95:e6:2c:dd:c6:
68:dc:d0:70:f3:37:e6:8f:38:b9:00:c6:2e:4c:cf:
62:76:a8:1a:09:4d:ac:1e:41:e8:0b:40:70:bf:c5:
d3:3f:02:c5:cf:64:3d:92:39:bc:9d:06:27:ed:0b:
ec:bd:72:a5:e6:c4:b2:9e:3c:f4:b2:89:56:9d:56:
cc:54:bb:e3:3b:c2:94:90:e1:b1:de:33:d8:9a:e4:
7d:8e:8b:80:12:f6:a3:64:bb:53:dd:51:fd:b4:ee:
31:a8:5b:b7:68:aa:6d:5a:10:92:d7:b9:e4:25:f3:
b9:fb:bf:87:df:05:c2:da:cf:52:dc:08:47:10:2b:
0f:66:9e:ba:84:21:c0:73:ff:94:a0:78:07:30:28:
1e:3e:06:84:21:55:9f:bb:17:52:ab:bf:9b:78:1b:
3e:0e:f0:9b:96:e9:6f:af:3e:cf:89:d7:68:06:be:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9B:0D:2E:4C:CC:FD:C4:B3:FB:B0:01:1D:6B:8B:A7:9C:06:F1:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7fa7464-a16c-335f-ad11-d29fc3262f8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:77:01:c3:da:fb:cc:9e:e0:d6:e9:7f:3e:64:8c:49:29:65:
f8:95:a0:15:d4:3c:b4:af:d0:eb:03:a1:c2:40:bb:af:81:f4:
6d:2b:42:09:52:3f:c9:5a:a1:8d:9f:f2:33:19:c5:5a:5f:31:
ee:db:52:0f:cc:4c:c2:81:e4:06:18:a9:f4:8f:77:b6:83:ad:
40:e3:e6:59:9e:1c:e0:6f:ac:eb:c5:dc:07:e6:28:9a:79:53:
35:ab:cb:7a:6d:67:d8:28:ca:09:1b:7d:57:66:c1:2f:c4:2d:
8c:33:1a:55:26:54:09:62:61:59:35:cb:39:a7:a4:46:a9:07:
c5:48:24:e8:2a:b2:bd:01:3d:ec:90:d1:2b:fe:f6:c2:40:46:
22:9d:b2:b0:35:95:58:54:81:9c:48:46:e7:42:2d:44:42:58:
24:cf:65:8a:bd:49:05:4f:6f:8d:30:cc:4e:81:02:13:ae:a2:
70:7b:d5:e8:99:eb:97:bf:56:1b:54:f0:58:4a:ab:c2:88:20:
30:89:6e:2a:49:d4:61:83:94:30:aa:ea:82:49:f1:10:1c:7f:
dc:ca:8f:d9:bb:52:6e:fa:95:97:7e:7f:31:12:3a:df:8e:c8:
55:a3:5e:3c:87:4f:7a:6e:eb:75:c8:57:ce:c2:63:10:67:23:
54:c8:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:27:02 2025 by rpki-client