Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0988b625-3411-3a63-a9a3-4605b35f1ed0.roa
File: 0988b625-3411-3a63-a9a3-4605b35f1ed0.roa (raw, json)
Hash identifier: RgGD1Xo8ZJEi6K6xXiVfVch8v7tCSs5YCZarrGXKRjA=
Subject key identifier: E6:6C:65:EC:1F:20:CA:0D:22:F7:1B:D0:CD:9D:0C:E5:B7:2F:F1:32
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73FC55598DE900FC765C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0988b625-3411-3a63-a9a3-4605b35f1ed0.roa
Signing time: Fri 29 Nov 2024 13:58:40 +0000
ROA not before: Fri 29 Nov 2024 13:58:40 +0000
ROA not after: Thu 27 Feb 2025 13:58:40 +0000
asID: 396588
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:fc:55:59:8d:e9:00:fc:76:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:40 2024 GMT
Not After : Feb 27 13:58:40 2025 GMT
Subject: CN=ec443127-64f7-45a4-aebc-b8517d4c1e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:5a:20:2e:f1:c0:6b:76:81:de:e3:57:fe:
06:81:57:39:f9:3e:84:af:33:c5:ba:d3:7c:26:37:
b0:5d:af:90:d6:28:39:f5:a1:18:07:8f:37:c7:cc:
35:ed:03:dd:be:c6:0b:1e:f4:17:ac:fa:d8:04:9c:
d6:0b:b0:aa:f9:da:d0:92:f0:88:bc:dc:70:0b:0f:
28:41:eb:d4:57:78:1c:75:43:cd:85:94:a1:f8:44:
82:ce:0b:26:c4:25:8b:fd:29:e7:6a:c1:be:82:80:
da:9d:c4:b1:da:54:45:1d:32:25:b8:6e:b4:83:f4:
e0:84:5c:c3:37:9b:53:ef:14:dc:00:22:00:b6:3f:
f6:4f:b9:16:76:eb:9b:c4:5d:5e:66:e6:ad:4c:b0:
43:5a:ec:dc:ab:11:a9:64:e7:4f:f3:3b:2a:0a:9d:
fe:47:f7:e8:bc:eb:fb:32:48:aa:2f:59:37:e5:81:
20:36:08:ea:c7:04:9f:cc:ca:69:4b:25:7a:56:6f:
d1:3c:c4:48:39:fa:c6:be:da:ce:f6:38:7e:a6:16:
b4:2c:55:fa:bd:c1:72:80:30:7c:81:3f:e7:13:32:
01:c2:4f:0f:08:51:e6:da:1b:d8:ad:05:ab:4e:be:
21:9f:64:aa:c5:04:a5:30:e1:99:d1:08:71:30:69:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:65:EC:1F:20:CA:0D:22:F7:1B:D0:CD:9D:0C:E5:B7:2F:F1:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0988b625-3411-3a63-a9a3-4605b35f1ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:a3:2c:22:77:fc:8e:90:61:44:fc:e9:91:dc:44:89:c6:37:
90:ab:ac:55:0e:d6:fe:76:7c:11:7f:5a:1e:48:ed:a6:ed:1a:
09:d3:1c:e2:93:9d:b7:0c:63:d7:95:5f:5e:9d:d2:76:b1:34:
33:e0:fa:46:cb:c7:d6:6d:c6:a9:70:53:0f:2e:2c:00:d2:da:
5a:8e:04:33:2b:a6:e6:b2:c0:50:89:8a:f5:25:9f:8e:3d:f7:
35:e6:6b:0e:4a:65:92:f5:a6:d5:8f:3c:6f:c4:06:84:48:1e:
2d:6f:6a:ef:9a:b8:04:4e:37:66:5a:38:c7:87:e3:5b:fe:8e:
48:e0:53:f4:86:19:e1:f8:98:64:45:9a:1f:11:41:82:a6:a1:
34:8d:3b:2c:90:71:0b:7c:6b:2d:9f:c8:eb:1d:89:4c:8b:2d:
ad:82:8a:59:e6:ea:2c:7f:83:b0:f4:ff:5d:fa:44:32:87:23:
bd:87:1f:21:3c:f7:5a:ec:f4:eb:aa:56:89:7c:e5:af:db:a0:
74:07:5d:8d:48:03:f4:3d:77:78:f9:f8:d4:91:7f:56:ee:bf:
93:b7:78:5b:59:e3:44:c5:5a:71:53:38:d7:0b:c4:97:a0:0a:
8e:06:17:bd:af:20:d2:42:94:4b:ac:24:20:66:03:05:ab:37:
56:c8:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:35 2025 by rpki-client