Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9eca3eb-771a-3f8b-8262-2a50010e7890.roa
File: c9eca3eb-771a-3f8b-8262-2a50010e7890.roa (raw, json)
Hash identifier: 90gQbkmZO6FXFgUxXdoZiDYVMmbqSOkZBKfYBOu9psU=
Subject key identifier: 8E:1D:1E:1D:AF:9C:16:2C:13:49:DB:E8:19:ED:D5:1C:F1:92:7A:07
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285846381EEC8B874DCE77CC819F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9eca3eb-771a-3f8b-8262-2a50010e7890.roa
Signing time: Sat 15 Jun 2024 13:00:35 +0000
ROA not before: Sat 15 Jun 2024 13:00:35 +0000
ROA not after: Fri 13 Sep 2024 13:00:35 +0000
asID: 40081
IP address blocks: 2001:470:2ca::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:38:1e:ec:8b:87:4d:ce:77:cc:81:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 15 13:00:35 2024 GMT
Not After : Sep 13 13:00:35 2024 GMT
Subject: CN=fac4b926-bafa-4b82-9cc1-3629b695e8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5a:a1:43:89:e1:de:b7:87:8e:b9:fd:75:be:
42:42:19:3b:67:2d:84:ec:b6:d2:94:02:5c:0a:9f:
9a:b7:bb:2e:82:bd:79:8a:34:5f:95:69:fe:ff:f5:
ff:93:58:b1:ae:ca:ec:e0:32:1e:e9:a4:c7:10:a0:
4f:70:b7:c9:ef:80:3c:30:d9:81:9e:a2:71:2c:eb:
ea:1d:96:a9:7b:da:22:8f:6a:03:3a:fe:d1:07:36:
83:2c:bf:4c:db:4e:df:19:ce:e6:5a:1f:ea:97:7d:
56:cf:06:9f:d4:17:db:84:d7:07:8c:06:d5:45:fb:
d7:08:67:b8:e4:46:a0:5f:e3:4f:91:7a:48:50:ef:
b8:ec:d8:3f:aa:4e:49:ce:fe:62:7f:ed:08:58:77:
52:e4:16:53:77:3c:a9:2f:c0:37:d9:65:59:6e:05:
a1:40:4f:d8:3e:4e:52:49:68:23:ea:53:c7:d3:9d:
8d:4b:04:63:69:21:4b:d0:5e:09:94:9e:6a:55:49:
3c:a5:84:b2:f3:74:d4:4f:af:0d:b4:76:27:95:c2:
f6:42:89:de:0a:8c:a5:9a:37:77:df:1e:5e:99:d9:
c8:47:b1:92:e4:51:d3:a6:ea:8f:ca:10:be:b9:c0:
75:c5:5e:c6:9e:c4:90:ea:68:aa:47:60:87:fe:a1:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1D:1E:1D:AF:9C:16:2C:13:49:DB:E8:19:ED:D5:1C:F1:92:7A:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9eca3eb-771a-3f8b-8262-2a50010e7890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ca::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:41:83:be:d3:df:10:3b:c0:5b:f2:af:bf:eb:c7:8e:ea:cf:
19:e6:1d:ec:41:0e:42:84:96:dc:15:51:a7:47:65:d8:e7:8a:
15:b0:d4:d6:8a:26:fb:e8:d8:c7:f6:e2:88:e8:33:d5:68:1f:
7e:fc:8b:9b:3e:42:ae:5d:fa:9b:07:90:7c:8c:7d:5e:3a:08:
a0:f4:69:7e:32:ba:f3:c5:f9:1a:4b:02:7f:07:01:63:8d:e2:
6c:62:81:1f:30:c2:ce:d1:46:10:af:fe:e1:61:e1:dd:0f:14:
87:07:31:b1:4a:2a:f9:c9:63:71:ba:39:89:e7:1e:6e:11:f9:
6b:2d:cd:8a:79:30:6d:02:ba:88:a3:7c:63:d2:20:6e:10:0a:
21:f9:30:f3:5e:43:09:c0:3e:3b:be:66:6a:66:da:67:0f:80:
e9:61:11:29:68:9e:ad:24:17:79:04:48:a1:2e:a6:8b:82:dc:
d0:90:3f:1c:ae:03:fa:ac:ab:38:89:8e:ea:1f:72:3f:5d:c5:
49:be:94:a8:6f:06:88:8e:57:0f:cd:fb:7b:5b:5e:59:23:50:
8a:eb:5f:56:89:6c:c0:23:23:7f:51:00:2f:62:af:91:b2:3b:
d4:ab:3b:36:f9:c6:79:71:be:93:2e:58:c5:50:9a:d6:61:d7:
26:10:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:30:13 2025 by rpki-client