Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e9af627-954a-330f-bf6b-f4827092e5e6.roa
File: 2e9af627-954a-330f-bf6b-f4827092e5e6.roa (raw, json)
Hash identifier: zzZvfBtH9mBHwZJY+QSBHfgzvAEQYxYdrbPNhrbDmDw=
Subject key identifier: 7F:95:8C:E9:52:74:BB:5E:D3:1B:41:77:4E:BE:42:72:5E:D7:3B:1D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E0ACF6333181A8485500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e9af627-954a-330f-bf6b-f4827092e5e6.roa
Signing time: Fri 29 Nov 2024 13:58:27 +0000
ROA not before: Fri 29 Nov 2024 13:58:27 +0000
ROA not after: Thu 27 Feb 2025 13:58:27 +0000
asID: 396568
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e0:ac:f6:33:31:81:a8:48:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:27 2024 GMT
Not After : Feb 27 13:58:27 2025 GMT
Subject: CN=7d557982-13f9-4bca-b6cd-9bc3098bdc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:5f:1d:a5:a5:1f:e7:fd:33:92:4d:09:b3:
51:5f:54:40:86:29:1f:7f:40:e8:94:7a:0c:28:49:
57:66:eb:87:9f:f8:4e:58:b2:15:87:48:1b:f1:41:
86:07:12:c8:08:87:c2:68:6e:43:2c:76:07:2c:55:
f6:2b:9e:e5:b6:a0:84:4f:fa:b7:a9:65:1c:5a:1b:
a4:0b:9f:8d:eb:7c:8c:94:ae:ec:9a:84:cc:7e:bf:
4e:78:ff:05:13:f7:8c:de:56:bd:97:b5:c9:27:23:
c3:6c:9f:42:5b:78:9e:d3:08:19:14:6a:86:00:64:
dd:44:ff:6d:bc:9b:b9:78:e1:fd:17:5a:3c:00:1d:
58:4f:cf:79:a8:d1:0a:d3:69:46:14:17:d7:08:1f:
38:a4:8a:59:09:e2:f2:07:4e:56:4f:5f:be:b0:cf:
b6:b7:6e:d9:3c:45:97:72:36:09:cc:d2:51:22:0a:
09:06:20:f5:71:39:f0:9b:07:f4:cb:eb:59:33:4a:
61:29:4d:9d:9b:ab:53:92:0d:ac:b9:49:1b:74:60:
27:c4:6f:77:b2:cc:c0:bf:a0:64:54:99:32:ba:78:
0a:b2:20:fb:06:30:21:24:00:52:36:18:57:98:7b:
b8:21:2d:c0:af:bb:69:d6:d4:dc:db:fd:53:3e:bd:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:95:8C:E9:52:74:BB:5E:D3:1B:41:77:4E:BE:42:72:5E:D7:3B:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e9af627-954a-330f-bf6b-f4827092e5e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:58:d9:03:e3:1e:5d:38:ab:81:fe:01:7e:2d:82:1c:18:25:
61:bf:82:d4:ad:4a:da:39:05:7e:86:2e:75:93:2e:06:c8:28:
ac:4b:ad:35:9c:75:93:52:4a:5c:1a:cf:c0:fd:ab:54:50:a4:
7a:32:c7:ac:85:a7:15:9c:c7:9f:79:4f:f1:c7:2d:ac:2d:6d:
7c:4b:15:3a:78:dd:84:da:c8:17:be:ff:7e:c3:08:30:8a:34:
34:57:cc:81:8b:15:04:c1:74:de:78:0c:40:51:ae:aa:52:78:
d3:17:eb:4b:05:e5:b3:ef:7e:da:70:e8:83:f5:61:4b:98:6d:
0e:1e:da:6a:81:03:53:9f:80:cf:a7:45:2f:45:1d:e4:45:b4:
f9:bc:0f:38:66:41:d7:73:dd:3a:9e:9a:a4:a0:00:26:07:02:
89:fa:2e:ff:f9:9f:e6:1d:e7:a0:53:d9:ed:21:0f:95:a6:ea:
36:42:97:73:57:35:41:32:d1:e4:c8:e2:1f:bb:90:e7:85:52:
68:47:91:c3:ea:9d:c6:89:f3:44:26:23:54:19:93:f8:47:9a:
2d:b0:44:c6:db:68:b3:8b:2e:7d:b6:0a:b1:8a:d5:02:c0:6d:
42:86:53:c5:53:86:ed:f6:d4:b5:06:b1:6e:64:3f:78:22:5b:
89:ac:a1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:10:50 2025 by rpki-client