Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/bec2e72c-3977-34c1-8fc0-d60c9265b3c9.roa
File: bec2e72c-3977-34c1-8fc0-d60c9265b3c9.roa (raw, json)
Hash identifier: QtOs1aGBTrkYCs4FdxajNUVmJ30GMCWxDhqHr6JvWhs=
Subject key identifier: 7C:82:A5:19:93:8F:87:6E:1B:2E:17:41:7C:36:B4:97:06:79:55:AB
Certificate issuer: /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial: 010D0C9F43285847A5D6A27067ACE74B1FA4E700
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/bec2e72c-3977-34c1-8fc0-d60c9265b3c9.roa
Signing time: Thu 24 Oct 2024 13:00:42 +0000
ROA not before: Thu 24 Oct 2024 13:00:42 +0000
ROA not after: Wed 22 Jan 2025 14:00:42 +0000
asID: 16509
IP address blocks: 2601:9200::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a5:d6:a2:70:67:ac:e7:4b:1f:a4:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
Validity
Not Before: Oct 24 13:00:42 2024 GMT
Not After : Jan 22 14:00:42 2025 GMT
Subject: CN=a723a0fe-1e8b-4f29-a17e-bed5479a34d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c3:cd:85:8e:4d:e7:50:e8:89:0c:eb:0f:cb:
fe:dc:07:7d:84:78:77:26:90:e3:69:93:d6:c5:e9:
14:75:11:1c:3b:1b:81:f7:c8:a1:32:2f:71:35:99:
d6:84:cc:3b:3b:ce:5e:33:5a:a5:50:74:02:17:5d:
3e:13:f1:33:33:86:dd:42:eb:91:f6:b3:f6:cd:83:
e9:8b:0f:91:7c:3c:c1:aa:50:a0:9c:cb:93:d2:4d:
09:a5:56:53:ed:af:fc:89:9f:c3:86:ec:e9:04:c9:
6e:ff:52:b6:2a:c6:41:86:84:28:e2:3a:73:fb:06:
86:20:eb:34:8d:43:f0:e3:ca:be:f1:a5:b0:27:b2:
2d:65:f2:d3:2a:be:94:c9:26:8c:bf:97:4d:7d:02:
72:19:91:b9:aa:0e:af:ff:51:45:e7:cb:9f:31:e4:
52:48:61:cb:91:3e:ff:de:10:2a:f2:51:01:47:dd:
dc:af:b5:c1:2e:f6:d8:a3:eb:21:bc:60:e1:5e:c2:
f9:b4:66:3f:70:2d:fd:73:ac:c3:5c:3f:b8:55:59:
9f:1d:41:e7:c6:45:be:18:35:6c:83:48:06:89:08:
c1:e9:95:61:1d:e1:11:df:bd:71:6f:30:b6:43:bd:
76:de:01:39:87:5d:a6:71:29:78:dd:e2:b5:4f:48:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:A5:19:93:8F:87:6E:1B:2E:17:41:7C:36:B4:97:06:79:55:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/bec2e72c-3977-34c1-8fc0-d60c9265b3c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
X509v3 Authority Key Identifier:
keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:9200::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:36:e6:71:5e:1f:c1:90:a9:65:41:00:17:92:9b:26:1a:e6:
46:ab:09:5c:8c:17:f3:4e:66:96:02:15:53:45:4c:02:ab:52:
d4:47:11:91:82:0e:1c:67:77:6a:f8:4e:30:c0:78:90:12:d5:
76:c6:4e:db:fb:a4:0f:1f:44:e1:c2:73:96:53:96:dd:a0:55:
42:ae:83:a7:1e:76:81:6c:2b:b0:1f:73:a6:86:d9:49:41:e2:
5c:2e:9b:c3:8d:a8:f3:a3:be:40:c4:cd:05:46:4b:3e:88:39:
31:fd:7f:2d:4d:47:ad:67:14:23:fd:14:68:40:47:b6:33:8d:
85:7b:eb:84:6b:49:1c:3b:35:58:69:9c:f0:c7:e6:a9:8d:4c:
80:55:19:66:86:28:2b:d8:bc:75:57:f4:62:3b:99:61:9d:60:
5d:69:1e:05:81:02:7c:f5:3b:0a:98:ee:f2:8e:96:29:86:32:
9f:ff:bb:22:c6:a9:14:2e:ba:ed:ba:63:0a:37:8a:ed:7b:e5:
b1:2d:29:b9:21:24:52:9c:6b:6b:60:31:27:66:42:d7:05:f2:
da:49:33:88:30:fa:25:ef:0c:13:df:14:62:7c:5d:7c:d2:d1:
b7:47:51:66:7f:92:0f:08:c3:37:c5:91:02:1e:24:5b:f7:ae:
09:63:65:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:42 2025 by rpki-client