Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc5105a0-8b32-34da-bf40-e16ca0f58c92.roa
File: cc5105a0-8b32-34da-bf40-e16ca0f58c92.roa (raw, json)
Hash identifier: rHbg1E6k3u9Xklo9xJ91b7vNM8svA+9J7hFPdaYBKoA=
Subject key identifier: AD:1D:8C:07:D5:01:D6:CB:2F:5A:EE:D6:52:E0:C5:06:8C:BA:45:8D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584636B989CEDAA5DCCCE70AA400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc5105a0-8b32-34da-bf40-e16ca0f58c92.roa
Signing time: Sat 15 Jun 2024 01:00:27 +0000
ROA not before: Sat 15 Jun 2024 01:00:27 +0000
ROA not after: Fri 13 Sep 2024 01:00:27 +0000
asID: 17210
IP address blocks: 2001:470:268::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:36:b9:89:ce:da:a5:dc:cc:e7:0a:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 15 01:00:27 2024 GMT
Not After : Sep 13 01:00:27 2024 GMT
Subject: CN=f33a7450-670b-46d6-a903-29f06a51417e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:c0:9c:d2:64:21:52:e7:14:31:59:ea:f1:
94:ab:2a:f2:7a:6b:70:65:56:ec:74:4c:f0:51:a0:
f1:b8:cd:7b:25:5b:6e:4a:54:2b:82:9c:b1:66:6c:
48:11:dc:aa:91:0f:54:8a:f2:ee:85:8b:93:87:95:
3a:70:72:44:67:a7:c8:88:d7:83:a8:f3:bb:5b:de:
36:64:b8:4a:85:0c:3a:c5:46:83:0b:68:8d:3e:32:
c5:08:49:be:7b:e0:81:73:1b:27:e2:e2:0c:72:a1:
d6:64:d9:29:2d:b0:ad:94:a1:48:9c:73:0d:08:7e:
50:6d:95:3c:1e:10:7c:ec:23:05:27:8a:1d:5e:cc:
bf:30:e3:d9:0b:a3:ff:c6:46:d8:60:5a:c6:fc:d7:
86:04:8e:fb:14:58:52:80:96:f9:2d:2f:63:3e:b3:
e2:5c:95:bc:a4:a4:2b:80:b4:d2:94:4f:c5:ed:8c:
1f:5b:5d:2b:7e:de:25:dd:4c:54:14:82:2c:ce:97:
e9:86:da:66:50:3d:bd:b8:d6:74:dd:d1:e8:02:7e:
43:86:e7:f2:f0:ed:71:a7:48:fb:41:21:8a:2d:e0:
4a:92:a0:34:d7:51:0f:35:30:8d:a5:75:df:b2:66:
a8:31:f3:e7:7c:b6:9d:64:9b:21:b7:da:47:cb:2d:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1D:8C:07:D5:01:D6:CB:2F:5A:EE:D6:52:E0:C5:06:8C:BA:45:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc5105a0-8b32-34da-bf40-e16ca0f58c92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:268::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:f1:3d:6e:b4:72:a9:e3:d0:2d:8f:50:4f:da:64:60:21:59:
87:34:02:c6:00:41:7f:d5:0e:56:89:cc:20:35:f4:66:a3:d0:
45:fb:ba:1e:6e:66:57:42:bb:5e:8a:0e:dc:69:09:0d:ee:b2:
10:81:ab:0d:20:62:4f:9a:21:5b:fd:62:be:c0:4d:1d:7f:c7:
e1:c6:2e:fd:a8:6a:45:4f:51:1b:93:b2:32:e0:7c:12:21:dc:
e4:3f:9d:11:65:df:5a:38:fa:45:c8:e7:53:bf:0c:be:cb:60:
3c:bc:ab:80:c9:4e:45:8d:79:fd:45:62:af:73:ae:29:09:27:
b2:1d:5e:b9:8e:a3:14:1b:d3:de:ca:84:52:51:ac:c0:7b:e6:
1a:6c:6d:08:de:da:72:e2:c4:9f:12:03:9d:3b:87:ce:50:b8:
43:b3:dc:a1:76:d4:0d:8d:f2:61:0d:31:e6:e6:61:83:4b:ab:
7e:21:28:37:ff:b1:98:16:f5:32:c6:26:02:17:92:bf:f6:f5:
04:01:8f:ad:b0:75:38:e3:1d:8e:4c:33:fd:b5:d5:9b:bd:55:
f3:7b:f0:98:a3:76:f8:12:ff:a9:d7:6d:cb:01:1e:3a:44:ed:
83:a6:e8:51:34:68:23:0c:e7:8b:3f:67:ff:58:6c:3f:b1:d9:
51:16:25:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:42:34 2025 by rpki-client