Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/de47419d-5d79-357f-9dd2-1808edf13469.roa
File: de47419d-5d79-357f-9dd2-1808edf13469.roa (raw, json)
Hash identifier: Ndsw/bngSPrSwQd0VkIwCO0rc54wBSJLFTjr663GYpQ=
Subject key identifier: 70:C8:91:4D:38:0B:79:65:06:89:E9:FC:33:02:C3:2C:7E:5B:25:6F
Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial: 010D0C9F4328584880E13DBFB943E075762FB0AF
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/de47419d-5d79-357f-9dd2-1808edf13469.roa
Signing time: Sat 11 Jan 2025 00:04:11 +0000
ROA not before: Sat 11 Jan 2025 00:04:11 +0000
ROA not after: Thu 10 Apr 2025 23:04:11 +0000
asID: 400597
IP address blocks: 217.149.97.0/24 maxlen: 24
2602:fb1b:61::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:e1:3d:bf:b9:43:e0:75:76:2f:b0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Validity
Not Before: Jan 11 00:04:11 2025 GMT
Not After : Apr 10 23:04:11 2025 GMT
Subject: CN=e6890126-b4b4-4315-bc1b-9b48be29e27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:d9:2f:19:1f:1b:09:10:d7:2b:7a:2f:f8:
67:11:99:5d:d9:35:c5:0b:ea:24:d4:ea:df:94:84:
ae:7b:83:15:e1:8b:90:62:65:8e:a3:b0:e9:6b:b4:
3a:fc:dc:c6:dc:7f:35:99:b0:ab:38:8e:87:c6:e3:
d8:9b:ba:70:48:14:5b:35:25:00:59:02:6e:c8:b6:
5d:6a:28:5a:53:6a:6b:e5:cc:ff:69:73:7d:af:2c:
8e:1d:86:d0:9f:31:c3:63:83:68:ca:07:7e:da:61:
5d:8d:b1:37:f4:d9:f1:8c:0f:47:76:de:78:06:eb:
3e:85:3f:fb:2f:8e:40:7d:e2:be:8f:ac:ad:c1:e0:
d9:12:3e:61:01:ff:80:07:38:26:a0:2e:6d:a6:a9:
8c:64:75:21:68:00:35:a7:5d:d0:bc:6e:b5:4c:55:
6d:e8:c4:8a:de:91:fe:97:bb:9b:5a:40:b7:74:b1:
1e:6f:27:54:ea:e2:bb:55:d3:43:5b:7f:64:a3:cb:
ff:8f:4a:b5:f9:af:67:39:57:b2:58:f2:2e:37:57:
fc:9c:92:5c:45:1e:1e:ee:fc:79:b5:2e:76:06:a4:
22:26:18:5d:d4:6e:17:b5:28:22:ec:07:32:25:e6:
e1:e6:1f:9f:ad:ca:c2:c7:45:c1:73:fc:92:71:3a:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C8:91:4D:38:0B:79:65:06:89:E9:FC:33:02:C3:2C:7E:5B:25:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/de47419d-5d79-357f-9dd2-1808edf13469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
X509v3 Authority Key Identifier:
keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
sbgp-ipAddrBlock: critical
IPv4:
217.149.97.0/24
IPv6:
2602:fb1b:61::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:05:71:d8:45:25:45:2d:a7:b9:20:c4:eb:5a:90:c9:d0:bd:
41:37:fc:27:1a:b9:3e:e0:92:ea:62:09:8d:11:e3:54:cf:92:
a7:20:93:ff:c5:d9:2c:60:5c:a3:1c:05:b0:70:39:bf:54:ac:
5b:66:57:3f:fb:ec:ec:fb:e7:59:77:d6:ca:6e:3b:f5:45:f4:
16:0d:dd:21:5a:b6:1d:a6:3d:8c:28:0f:a3:5d:0d:92:fb:89:
61:06:44:e2:ba:b0:b5:a2:f0:d2:f8:bf:13:92:a5:57:8b:cb:
ab:32:be:e8:f2:29:ef:2b:3f:ea:eb:7b:c0:f5:14:34:63:c2:
d6:9f:23:11:e5:0d:77:43:02:da:99:e9:2e:fd:d0:f1:9e:5b:
ce:4f:99:bf:21:c1:74:dc:81:3a:55:f1:89:5b:df:f3:47:a0:
48:9a:07:15:82:79:a7:94:0b:32:84:32:ac:ce:8d:27:e0:c4:
74:e0:d1:1d:6d:b5:6b:f0:50:7c:64:0e:c2:d5:e8:72:2b:dc:
59:a6:71:c2:79:3d:56:5a:5f:f0:16:d8:26:e3:1e:bf:5f:6e:
06:21:aa:6a:62:f7:94:5b:64:41:92:64:45:c2:ff:9d:d1:82:
77:47:d0:68:db:db:88:e6:f7:5c:b8:63:8f:ba:a8:66:06:00:
44:9d:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:53:10 2025 by rpki-client