Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa
File: 323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa (raw, json)
Hash identifier: 9M6+ctr3/mJCzbHzYd4AMSLnCfzP1Tl4hG4urHuUJ70=
Subject key identifier: FF:DC:EF:8F:72:D3:EE:57:CB:3C:42:16:30:69:07:8B:F2:3F:22:BB
Certificate issuer: /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial: 5C5E09CA9195D92277BADABD79990755A89A9D10
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa
Signing time: Tue 15 Oct 2024 14:33:58 +0000
ROA not before: Tue 15 Oct 2024 14:28:58 +0000
ROA not after: Tue 14 Oct 2025 14:33:58 +0000
asID: 401386
IP address blocks: 2602:f7dc:2::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:5e:09:ca:91:95:d9:22:77:ba:da:bd:79:99:07:55:a8:9a:9d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Validity
Not Before: Oct 15 14:28:58 2024 GMT
Not After : Oct 14 14:33:58 2025 GMT
Subject: CN=FFDCEF8F72D3EE57CB3C42163069078BF23F22BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:02:59:59:d8:d5:4d:88:0a:67:ce:f0:44:
a9:59:ee:63:c6:04:66:1e:d8:24:05:3f:d4:7a:95:
e3:f3:ca:51:9c:32:b4:8a:5e:6e:77:08:8f:4d:7f:
88:04:b0:d9:02:79:c4:04:38:cb:19:e4:c4:82:59:
39:5a:55:f0:5c:29:a9:02:26:14:b3:f3:43:1f:6e:
9d:2f:18:9a:53:89:30:79:cd:8b:b3:0c:58:d8:e0:
4a:0b:49:2a:a2:ce:ca:39:e7:a2:8c:57:fe:fd:52:
08:d8:de:85:09:18:5b:51:6f:06:41:2a:03:22:b4:
d6:a5:23:52:3f:fe:34:de:7a:c6:e9:38:f9:c1:f9:
99:32:6d:50:22:8d:b1:ef:35:68:3c:fa:ba:f5:50:
89:b7:1d:a5:a9:3a:be:15:27:c1:ee:11:26:12:b9:
c8:1a:81:e2:5c:85:f9:02:e4:e8:76:cd:03:2c:7c:
3c:7c:28:6e:c0:fb:7f:65:a2:78:84:f0:b8:fe:a6:
f8:ff:16:63:5a:2c:b6:09:58:18:9c:88:90:22:fe:
c3:7a:7b:c1:48:dc:94:b4:90:42:81:fc:f8:14:9a:
be:6c:48:03:b0:80:08:25:62:f5:28:e3:da:4f:52:
02:01:04:72:56:76:48:51:fa:68:74:3c:b1:b0:ed:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DC:EF:8F:72:D3:EE:57:CB:3C:42:16:30:69:07:8B:F2:3F:22:BB
X509v3 Authority Key Identifier:
keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f7dc:2::/48
Signature Algorithm: sha256WithRSAEncryption
46:70:ac:72:4f:4a:a7:ba:fb:c5:ec:72:82:35:cf:02:49:15:
d2:1e:42:00:08:1b:d3:57:36:30:6f:94:f8:f6:22:be:98:08:
3a:4d:e7:d8:ec:2d:ef:2e:36:13:fe:a6:0c:1c:7a:f5:1a:99:
7c:d6:86:1c:05:00:28:f8:86:68:7e:72:ff:e3:12:86:30:95:
fa:bc:73:03:5c:d4:3d:33:34:34:2d:a1:fe:25:2e:d8:8c:04:
ed:3e:32:20:64:2c:5f:9a:94:64:9d:74:65:c8:26:58:fa:83:
a9:14:11:e0:1f:7d:05:9a:65:14:7c:8c:71:33:33:0a:73:76:
18:c5:7c:30:d2:65:ea:09:a1:d5:83:aa:23:50:bc:6d:89:3f:
81:d9:44:82:13:e4:34:0f:93:87:1c:0b:be:11:33:6c:df:70:
91:25:9a:c3:e0:0c:38:bf:cf:fb:bb:8a:4c:8c:82:ad:fb:81:
35:c9:4d:75:be:48:d4:e2:b6:92:bf:bd:58:0b:9f:63:43:5c:
96:0a:fe:9c:46:29:2e:67:e4:19:35:86:5d:d7:08:24:6d:97:
1b:d2:02:69:4c:bf:81:0f:2b:23:5e:36:7a:0b:70:90:2a:7b:
fb:e5:c6:0e:cc:fa:14:c3:3a:b8:fc:61:22:59:7b:33:54:e6:
84:44:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:04 2025 by rpki-client