Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7b0cb68-6276-345d-ae13-e86d7734bdb6.roa
File: b7b0cb68-6276-345d-ae13-e86d7734bdb6.roa (raw, json)
Hash identifier: 8OgvgDjRepF9n2iwRxTRyR4YQZJvqT7l0ILMlnXU730=
Subject key identifier: 31:51:73:81:5E:8D:A3:38:AF:38:C1:4C:FF:D8:BD:7D:75:A3:DA:21
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846C7F3D3DAF4FB19FB196C0A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7b0cb68-6276-345d-ae13-e86d7734bdb6.roa
Signing time: Tue 06 Aug 2024 01:30:09 +0000
ROA not before: Tue 06 Aug 2024 01:30:09 +0000
ROA not after: Mon 04 Nov 2024 02:30:09 +0000
asID: 12025
IP address blocks: 2001:470:353::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:f3:d3:da:f4:fb:19:fb:19:6c:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 6 01:30:09 2024 GMT
Not After : Nov 4 02:30:09 2024 GMT
Subject: CN=0cba1804-3d5f-472e-bdc5-34c8751b0c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d0:83:4e:1e:88:62:98:9d:8c:36:bf:28:c0:
a3:55:75:61:d5:c6:1b:71:be:d3:ba:f3:61:d3:9a:
4f:f7:20:f6:14:01:0a:a1:43:23:87:55:0f:cb:00:
95:43:ee:4d:42:b1:e3:38:58:80:40:e3:5d:e0:58:
a5:21:92:3c:8e:13:c1:2f:30:ba:53:90:9f:a5:15:
d4:cd:5f:7d:4f:f7:bd:f6:32:83:19:c5:21:77:f1:
da:f6:da:09:a8:1e:17:69:84:34:9b:c2:54:6c:e5:
a0:66:a6:83:5d:0a:f0:55:68:b0:52:9b:d2:f3:05:
be:f4:d3:c9:42:a1:48:88:c9:4f:96:7e:1a:c3:e9:
18:1e:fb:4b:f2:48:d5:6b:24:8c:2d:e4:22:fb:32:
46:18:b1:2d:fe:25:04:ab:20:ca:10:ab:7e:08:38:
32:de:42:a9:bb:c1:dd:77:2a:d6:7f:b9:01:50:41:
80:75:11:43:67:76:f1:ac:54:52:8c:b7:9a:cf:46:
43:f1:84:5a:39:e0:b3:1b:3b:66:46:cd:7f:ce:71:
35:64:70:b0:50:76:17:ed:25:93:bf:b5:b6:68:b1:
45:8b:3d:71:8a:06:65:69:c4:e1:cd:1b:06:76:e5:
0a:75:3e:39:f6:32:3c:77:23:d5:2b:a4:29:9d:01:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:51:73:81:5E:8D:A3:38:AF:38:C1:4C:FF:D8:BD:7D:75:A3:DA:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7b0cb68-6276-345d-ae13-e86d7734bdb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:353::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:67:1e:30:06:b4:f1:b1:25:8a:54:eb:ed:2d:6a:05:fb:b1:
72:66:bf:a1:8a:13:ed:88:bf:a6:fa:a7:19:23:c0:87:7e:ce:
41:03:64:91:98:12:be:36:6c:1a:93:cf:e6:08:1b:1e:f5:3f:
b9:28:0b:87:43:9a:95:a4:29:44:b9:2d:43:ea:60:ce:5b:65:
47:16:5b:c7:09:83:fd:54:3d:de:b2:b5:71:75:c9:cd:8f:58:
1c:04:c2:6a:7d:9b:0c:88:90:bf:80:0a:53:68:66:46:14:b9:
6e:49:e8:b8:4f:72:67:df:06:0e:a2:cf:6f:d1:8d:0f:57:62:
23:02:fd:7a:54:73:83:b3:77:95:8f:83:d8:e3:3a:04:f6:ad:
15:9f:3b:55:e2:78:f0:db:4a:8e:8d:53:87:0a:03:51:56:89:
6b:ce:02:f7:32:98:78:34:81:48:cd:62:0a:b5:7b:e1:85:f1:
64:7a:45:d0:ab:fc:e8:07:12:98:f8:38:c3:4b:5c:c7:cc:33:
cc:a2:9c:be:f9:96:fc:05:47:f8:72:72:d2:0f:0a:0c:d8:89:
10:8c:f1:d7:82:dd:86:df:16:44:20:de:cb:5d:b4:5c:76:f6:
c9:1a:14:4e:a4:19:a6:32:64:91:81:b5:78:1f:78:20:ec:11:
36:93:10:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:38:43 2025 by rpki-client