Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/888f7638-693a-3164-addc-bd8f611e09e3.roa
File: 888f7638-693a-3164-addc-bd8f611e09e3.roa (raw, json)
Hash identifier: vkclwzhlqAFsl99P0a8iVAXEICl9t4AVPLD99T78sD0=
Subject key identifier: 84:09:22:DB:48:88:6A:45:E5:60:26:7E:D2:D9:D5:37:DB:65:77:C5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858465A77859B5C387C0F7FC33900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/888f7638-693a-3164-addc-bd8f611e09e3.roa
Signing time: Thu 27 Jun 2024 20:16:35 +0000
ROA not before: Thu 27 Jun 2024 20:16:35 +0000
ROA not after: Wed 25 Sep 2024 20:16:35 +0000
asID: 142271
IP address blocks: 2001:470:230::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5a:77:85:9b:5c:38:7c:0f:7f:c3:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 27 20:16:35 2024 GMT
Not After : Sep 25 20:16:35 2024 GMT
Subject: CN=298bae77-5d0c-4d84-a2dc-3f754e5c52aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:73:fa:ca:38:ed:66:90:f7:62:2a:c3:84:
cc:7d:c5:a5:78:20:e2:30:78:4d:e7:a6:64:d6:ee:
18:9b:0d:5c:5d:1e:4b:4d:9a:1d:23:02:cb:ee:49:
c2:d8:83:90:90:d4:22:50:a1:3c:0c:30:03:ee:57:
54:09:64:f2:0c:07:69:57:64:37:9f:e9:0a:b9:da:
8a:c7:f5:8a:e2:39:81:0c:b9:c3:4c:10:a9:42:da:
4f:d4:75:8a:a0:04:8f:ad:eb:19:26:89:c3:37:32:
ee:02:48:dc:a3:b9:ba:18:45:5f:4a:84:0b:50:c6:
04:a5:7c:84:a2:a5:98:96:0c:12:6b:a5:22:90:5b:
4b:86:09:1f:68:82:3b:f7:5c:0d:73:fa:d7:c7:cb:
5f:e7:56:20:08:a9:85:2b:0b:b9:b7:2b:0f:46:ce:
7c:f5:9b:b3:9e:ec:36:43:56:46:84:b3:af:bb:38:
14:b4:3a:17:f6:48:6f:bd:de:4c:ae:02:ce:dc:68:
48:a3:07:d8:54:05:1e:90:8a:cf:15:64:ff:8b:00:
17:13:ab:13:b9:9a:a4:2a:f7:4c:63:3b:66:9a:5f:
3f:d2:cf:85:b3:eb:3d:ae:3c:5a:e8:3e:a4:7b:4f:
4d:07:ae:b9:fe:35:29:be:f2:d1:74:ac:1c:76:ac:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:22:DB:48:88:6A:45:E5:60:26:7E:D2:D9:D5:37:DB:65:77:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/888f7638-693a-3164-addc-bd8f611e09e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:230::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:4c:2a:bf:20:d4:03:82:f3:2a:93:bb:a6:cc:bc:6b:7d:32:
d7:29:24:12:69:bf:aa:98:97:38:b6:3d:bd:d5:dd:8c:d8:be:
05:16:63:bc:92:60:22:72:f0:2a:fe:ad:d3:8e:a8:eb:ca:54:
d6:81:fd:7d:9f:18:10:9e:8f:2e:12:bf:ad:d4:bb:53:e4:e0:
92:de:9d:21:38:b2:ea:d4:fb:bd:30:25:26:07:81:15:f6:0c:
79:8c:6f:85:b4:df:9d:0a:7a:00:d3:7d:19:be:66:50:12:0c:
f7:28:b8:1e:95:2a:19:cb:63:e6:26:3c:e8:30:2a:83:26:2f:
5e:bf:b4:10:5e:78:a1:4b:cd:e3:5c:f5:a5:c6:02:0f:66:64:
33:5c:ca:aa:49:5f:2f:53:cb:9e:43:71:f9:6c:d3:57:f1:65:
70:d3:58:77:b8:95:cf:b8:84:82:58:01:c4:02:f1:d0:57:be:
ed:c7:43:c3:01:67:19:9d:62:f5:b8:cf:8c:c1:33:87:91:e1:
45:1f:10:f6:15:bb:5a:29:00:5d:81:67:9b:69:ff:cb:53:2b:
66:b2:fb:9c:64:c6:1b:62:2a:29:1f:5a:bd:af:64:08:a3:13:
b7:ca:05:72:f3:46:f4:e8:7f:4e:4b:f4:54:01:93:3d:dc:f4:
bb:ac:9a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:46 2025 by rpki-client