Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/58932355-1612-36c8-8445-20a2127d0b60.roa
File: 58932355-1612-36c8-8445-20a2127d0b60.roa (raw, json)
Hash identifier: mQgIXnAo9qfq7iJTccHf46DjRT1+5QvG18eaj2dzh80=
Subject key identifier: F8:68:5C:D5:51:B2:7C:5A:97:19:97:9D:A1:89:E9:36:D3:F0:AE:B8
Certificate issuer: /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial: 010D0C9F432858488085F09E3F1E8CF64379C100
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/58932355-1612-36c8-8445-20a2127d0b60.roa
Signing time: Fri 10 Jan 2025 21:00:14 +0000
ROA not before: Fri 10 Jan 2025 21:00:14 +0000
ROA not after: Thu 10 Apr 2025 20:00:14 +0000
asID: 400597
IP address blocks: 2602:fb1b:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:85:f0:9e:3f:1e:8c:f6:43:79:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Validity
Not Before: Jan 10 21:00:14 2025 GMT
Not After : Apr 10 20:00:14 2025 GMT
Subject: CN=ffdab72f-937d-4557-8be5-c0444276ad26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:c1:30:f4:1f:a3:46:9b:0f:f0:a0:a3:04:
4d:35:ff:f8:87:6f:51:fe:96:26:5f:d8:e9:ec:67:
46:f9:f8:99:f8:00:be:24:f5:80:60:7f:8a:a4:65:
e6:71:ac:4c:de:78:ad:c5:91:34:f7:cd:c3:9e:a9:
c5:a7:cc:6e:ba:46:5c:ed:e5:30:bd:d3:ef:21:30:
5a:d6:13:c1:f5:33:ff:f2:bb:55:40:28:e6:89:9e:
53:77:4c:83:28:38:d2:ce:5d:f3:32:05:a3:d6:0e:
d1:65:68:0a:67:3f:ba:dd:dd:04:80:3e:e1:15:af:
76:55:b9:e4:d6:a8:19:20:dc:08:59:59:92:56:94:
f7:d3:f8:6b:15:3f:da:78:df:6d:43:9b:81:30:fa:
9f:b5:49:60:62:f9:50:fe:0b:22:f6:cf:85:fc:15:
f5:8b:48:19:2d:c7:e1:63:e0:a2:ce:57:20:62:2c:
49:33:c8:32:b5:b3:da:ee:f1:da:a1:e0:31:12:5a:
7e:ec:f9:ba:90:d0:7f:66:58:1d:77:c5:d5:ef:30:
9b:ef:84:01:ea:19:b7:0e:8c:37:2c:8d:ff:5a:75:
24:ab:41:de:12:30:2e:34:90:56:5e:cd:e9:80:08:
7f:2a:9d:23:de:20:e2:c2:21:a0:3d:66:f9:55:78:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:5C:D5:51:B2:7C:5A:97:19:97:9D:A1:89:E9:36:D3:F0:AE:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/58932355-1612-36c8-8445-20a2127d0b60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
X509v3 Authority Key Identifier:
keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb1b:4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:e6:23:04:f1:e4:44:c3:19:cc:aa:73:06:d9:e9:ce:fc:a9:
f2:2d:67:25:8f:7e:bb:a2:02:5f:9d:46:cb:84:54:69:d3:03:
74:08:d6:a7:f5:3a:b6:a3:11:63:48:5a:c4:80:a6:8a:48:d9:
31:a4:79:98:e5:66:2c:db:bf:90:40:8a:28:e2:96:cb:54:12:
59:9d:0f:d8:0c:76:4b:5c:bb:a6:b4:69:0e:3a:bf:c3:7f:df:
26:86:1d:6a:5a:14:ea:89:e0:2d:77:15:1d:0f:7a:90:43:e6:
0f:2f:aa:f6:9d:a1:25:ed:5f:6b:1d:3a:6e:4a:38:7f:91:aa:
87:c7:3f:d5:87:ce:aa:e4:12:f9:9d:1e:1c:2d:5f:50:d2:36:
42:60:3e:22:4f:ad:c4:9d:d3:f8:e5:8c:b6:1f:fb:89:c5:1e:
79:e2:42:f7:c9:a3:39:61:5e:78:74:60:c0:83:59:84:41:ac:
a6:62:b6:5e:0b:f9:66:1e:c1:ab:e2:07:28:2f:ff:d6:27:ce:
78:7b:9c:92:00:5c:01:36:3e:18:bd:79:32:25:7f:06:4e:3a:
4f:d9:da:bc:78:49:22:a9:38:fe:30:eb:9c:a1:46:c8:d6:6c:
e5:40:d2:4c:7e:99:ed:f4:24:72:e7:20:f3:dd:1d:6d:c3:8f:
8e:20:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:42 2025 by rpki-client