Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a3fdbda-fb8e-3ce9-befc-0e0a7919c084.roa
File: 1a3fdbda-fb8e-3ce9-befc-0e0a7919c084.roa (raw, json)
Hash identifier: E4h6GlUgEC68ZMPhpeB3eP91JT0YaW+VbCpktVY/mg4=
Subject key identifier: A8:04:18:90:55:53:6A:B1:74:49:AE:C9:BD:31:79:D3:9D:44:33:E5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A7407912985649D76056F70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a3fdbda-fb8e-3ce9-befc-0e0a7919c084.roa
Signing time: Fri 29 Nov 2024 13:58:45 +0000
ROA not before: Fri 29 Nov 2024 13:58:45 +0000
ROA not after: Thu 27 Feb 2025 13:58:45 +0000
asID: 396605
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:74:07:91:29:85:64:9d:76:05:6f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:45 2024 GMT
Not After : Feb 27 13:58:45 2025 GMT
Subject: CN=8a6bdd60-d592-4af0-b09c-fae84105912f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:5d:7a:8a:06:c6:0c:d6:13:13:47:fa:17:
ca:a6:c2:30:eb:9a:04:2f:e8:dd:bc:6c:00:05:bd:
95:c6:59:bc:46:1d:e0:3a:7a:7f:ec:42:27:3b:dc:
75:65:49:ad:56:8a:bd:9a:3a:91:95:f5:58:41:e0:
31:52:64:ae:69:1a:0c:13:02:bd:65:f3:28:e8:6b:
2f:74:b0:07:a0:4b:83:fa:f0:72:86:57:4d:31:c9:
20:5d:d7:b1:03:12:5c:d8:c5:ea:0c:56:7a:82:3f:
c9:3c:8f:87:be:ba:be:3c:3d:9c:5d:3d:35:2c:9a:
3a:16:d5:24:4f:5d:60:00:67:0b:cd:ab:35:d6:65:
ce:11:87:b3:39:aa:a9:ca:ad:fc:66:f6:e5:51:5b:
cf:5c:17:a4:d0:f4:25:e1:9c:18:af:cf:7a:1c:84:
48:b5:cb:2a:99:95:0a:2e:9a:fb:29:b1:50:85:f3:
64:f0:2f:2e:62:96:33:ab:b5:8d:41:96:a5:91:1a:
89:47:d4:3d:d6:42:a7:78:82:52:df:c8:02:f1:96:
94:6d:e8:55:ca:cb:2d:c1:0a:74:3f:e8:ee:47:7d:
5a:ad:e8:f1:8b:8f:a5:6e:5e:81:55:56:ce:91:e2:
6e:16:58:35:c1:af:e2:6e:58:31:d4:ae:6f:88:bf:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:04:18:90:55:53:6A:B1:74:49:AE:C9:BD:31:79:D3:9D:44:33:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a3fdbda-fb8e-3ce9-befc-0e0a7919c084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:96:12:57:6c:26:66:2c:59:81:ff:ce:db:ea:d5:d5:4e:7d:
e8:d8:4e:35:2a:2e:dd:ef:2c:1e:51:3e:d8:06:8a:8c:3f:df:
27:d7:fe:7f:52:4b:c2:46:18:96:b7:1c:a3:92:a3:5c:3d:58:
85:a9:7a:a7:79:e4:c8:d4:24:16:a9:53:f5:ed:c5:41:f3:c2:
aa:6b:0d:3e:a0:fc:e7:f4:8d:06:38:61:ef:ca:6d:5d:9f:fc:
49:83:05:2b:fc:cd:52:46:fb:ff:2b:cc:68:f0:8d:87:7b:c9:
55:ba:f4:1e:ce:89:5c:cc:d8:07:e2:ce:a4:94:14:01:de:ff:
28:61:aa:c9:10:f8:b5:3c:6d:8c:25:92:1f:69:f2:31:3b:f7:
8a:59:3f:8a:3b:46:06:4d:f0:f3:7a:9e:9a:24:75:c5:aa:23:
24:1e:f6:33:fe:60:c1:f2:9f:9e:45:4a:4f:23:b5:f8:64:19:
c2:af:00:83:78:bb:6f:57:5b:72:21:65:80:a4:7e:47:2d:da:
55:78:48:b3:e3:48:6d:2d:6e:4f:65:6d:83:6f:1f:2d:da:7f:
75:64:85:84:0f:8b:86:9e:0e:a6:8f:74:88:3a:70:ac:59:a1:
15:6c:10:c1:e6:6d:11:42:2e:b5:0b:a2:0b:21:4c:71:12:66:
96:c9:4e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:26 2025 by rpki-client