Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c8e7608-86da-37a3-986e-0cdf84a64541.roa
File: 2c8e7608-86da-37a3-986e-0cdf84a64541.roa (raw, json)
Hash identifier: 24CG/6U2mdkkPMK7VObf66cc4Z9yjrPk2LO4PIR6mqI=
Subject key identifier: FB:35:5B:2F:E4:8D:6A:F3:11:E4:24:09:79:C3:7F:E7:40:AF:9E:C2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B8184C4500B53EA20712E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c8e7608-86da-37a3-986e-0cdf84a64541.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 3848
IP address blocks: 2001:4958:a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b8:18:4c:45:00:b5:3e:a2:07:12:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=b2d8b21c-b7ae-401b-a40f-9af3254ab042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:ec:0c:29:ea:eb:3e:37:a9:c2:26:5a:08:
ae:76:c1:d7:a5:0a:18:17:b4:7b:0f:b6:44:6b:36:
e8:4e:b4:29:4b:c2:09:b9:6b:af:22:db:4f:49:b1:
d8:5b:1e:b9:be:13:73:9e:45:80:44:2e:a8:23:bf:
75:25:1f:64:9a:d4:c8:8d:69:0e:37:8e:a7:fc:ab:
de:56:31:05:87:cf:c9:bc:53:80:80:4e:23:93:58:
74:ef:ae:62:75:2a:e2:f0:40:5b:c7:cb:a6:f3:c9:
c5:63:3a:b4:49:f2:c2:6e:dc:4b:cd:18:2a:50:9f:
5d:d5:b3:5b:00:f1:99:77:77:f4:f0:ba:fb:e3:7d:
d6:ac:ec:bd:9e:30:86:85:16:8b:a4:cd:cf:b7:95:
77:ac:ab:dd:30:a4:8e:d5:02:5b:ed:e3:05:84:ca:
61:89:42:d2:f4:11:6c:ad:f3:3b:85:dd:fc:ec:49:
dd:36:eb:2e:1d:69:9c:80:95:6a:94:80:a6:ac:e5:
2a:eb:f6:12:76:60:4e:93:7d:31:b7:89:1a:e7:3c:
53:4f:19:06:7b:55:bd:76:12:cf:6f:bb:b6:98:65:
6b:f8:21:3b:7a:a7:2d:26:38:0f:66:e4:fe:40:5f:
19:03:14:26:e3:20:55:a5:f9:a1:9b:55:50:da:ab:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:35:5B:2F:E4:8D:6A:F3:11:E4:24:09:79:C3:7F:E7:40:AF:9E:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c8e7608-86da-37a3-986e-0cdf84a64541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4958:a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:6c:81:a9:66:06:e8:8f:96:af:bc:0e:19:50:de:a8:2c:f8:
06:fb:c4:b1:86:e2:10:7d:36:c2:f3:c2:17:c8:22:29:c4:ef:
b0:3e:be:b9:d9:8d:11:d9:41:a4:eb:71:f0:82:8c:3b:95:c5:
fb:48:fa:c1:84:90:3b:36:b0:fb:80:3b:9b:43:6f:4d:77:d0:
0e:0b:64:68:29:f5:b0:96:26:7b:4a:1d:6f:90:ce:a8:8a:e4:
bd:e1:76:65:54:10:32:d7:80:f5:c4:2c:2f:71:33:2a:2a:2e:
6a:7a:c6:21:6e:f0:d3:96:a4:4c:47:94:d3:ab:26:0b:73:29:
12:ec:ae:fb:0e:ff:1c:76:e4:b1:96:e9:2a:a8:60:b7:92:c7:
1d:bd:12:5e:02:bf:e9:f4:05:42:05:b6:55:6f:4b:94:9c:c6:
8e:3a:89:ec:63:cb:27:14:10:b7:17:d7:64:93:84:93:d2:e1:
53:db:8b:3b:5c:fc:02:2f:aa:60:60:e5:18:56:6d:c5:7c:de:
fe:b3:b7:3a:24:6a:03:40:ee:b2:46:f1:fe:8c:e1:74:db:15:
7a:3a:06:73:0e:a8:e5:04:75:84:33:fa:66:fb:f7:80:9f:73:
bd:a5:f2:5e:00:f5:5a:d2:f2:7d:7b:62:e2:64:d9:6e:45:6d:
b7:d0:d5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:02 2025 by rpki-client