Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3917f7f5-a23a-335b-a4fc-6062eb7584c1.roa
File: 3917f7f5-a23a-335b-a4fc-6062eb7584c1.roa (raw, json)
Hash identifier: WfeqtJ4TWUllkMYzecYmpttlWsQzWV8FsFVZT1lBFvk=
Subject key identifier: AA:CA:11:14:48:FA:50:A2:63:6C:A0:C4:DB:34:6F:EB:D6:34:E4:B5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E37C5885AD1CA6754A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3917f7f5-a23a-335b-a4fc-6062eb7584c1.roa
Signing time: Fri 29 Nov 2024 13:58:28 +0000
ROA not before: Fri 29 Nov 2024 13:58:28 +0000
ROA not after: Thu 27 Feb 2025 13:58:28 +0000
asID: 397203
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e3:7c:58:85:ad:1c:a6:75:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:28 2024 GMT
Not After : Feb 27 13:58:28 2025 GMT
Subject: CN=6cd958d0-29d5-40fa-bdc8-4eccf15048e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0b:c0:20:8c:6b:1f:a2:ca:94:fb:d7:5c:90:
12:72:c1:b3:34:33:06:ba:85:85:2e:6d:db:c1:c8:
27:b4:36:e5:c3:10:7b:29:fa:82:a7:62:32:3b:47:
10:5b:d2:b7:9d:2e:d8:fc:38:77:19:d0:6a:3d:97:
a8:c8:0a:ea:52:8b:cb:33:18:c9:54:68:4e:67:78:
92:9e:6e:fc:f0:64:4c:07:26:d5:e1:ca:9d:5f:eb:
15:ef:d4:04:64:4f:0a:6f:2c:f9:39:8a:1a:6b:b9:
48:bc:22:a5:09:95:d7:4e:e7:bf:1a:d1:a7:0a:c1:
84:43:a6:cf:9d:80:c8:07:62:d9:ba:40:3c:2a:02:
ed:5d:b3:b5:ac:bf:71:cd:c7:89:7b:de:ba:99:4a:
ba:64:84:d9:00:89:ad:3a:25:5c:b9:5c:d4:b7:90:
da:c5:67:f3:6e:eb:b0:cf:0f:9d:f8:7a:c8:af:8d:
1f:13:c9:dc:5b:a8:1d:70:a7:7f:33:d1:ef:3c:05:
aa:5d:da:61:d9:1b:6a:1c:b6:f9:12:c4:d9:5f:a4:
72:ab:21:ec:1b:1c:83:c5:8f:15:62:5f:ba:75:d1:
18:81:29:ad:23:3d:2e:59:72:ec:3a:55:ad:f4:a4:
29:81:45:7f:a7:50:e3:7f:bc:b0:00:10:93:b7:74:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CA:11:14:48:FA:50:A2:63:6C:A0:C4:DB:34:6F:EB:D6:34:E4:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3917f7f5-a23a-335b-a4fc-6062eb7584c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:36:43:27:52:06:cc:2b:9a:06:35:fe:0b:90:2a:6f:f2:d6:
4b:57:ec:ae:5a:44:bd:f9:fa:5b:4e:66:61:09:94:cb:06:44:
e1:1f:68:03:9c:b4:0a:ac:75:27:2f:b2:03:26:15:ab:3f:dd:
9a:c4:2b:08:d1:cd:f0:4c:27:78:c2:e3:5b:67:3f:5e:20:97:
4c:05:57:d9:74:7e:63:32:27:ac:a2:80:c1:9b:d9:07:d9:1b:
bc:2c:c3:b0:e6:7a:97:0b:3b:9a:df:ee:6a:e6:79:db:91:c1:
e1:c7:2a:ff:d0:d1:c2:c2:19:61:a3:e7:b4:be:18:7c:c7:d8:
bb:d7:3b:8c:6a:2b:84:53:e1:70:57:bb:a3:26:bd:a7:8b:0e:
3a:98:9a:3b:27:4b:42:4e:48:57:92:27:4a:25:7d:b3:6b:43:
44:ec:ab:7b:10:02:40:b4:35:57:ba:e7:25:f9:a6:30:a9:5f:
9a:c9:ed:1a:6d:f8:b0:86:67:46:50:68:c3:04:8b:98:05:21:
45:4d:2d:2c:1d:aa:48:b0:a7:f4:86:84:18:02:6a:09:f8:cb:
6f:a3:ad:03:27:07:ff:cd:dd:35:24:4c:2f:d7:42:16:a2:58:
9f:84:35:a2:bd:e2:89:5d:65:cb:1b:58:23:b3:c2:0c:d9:f1:
f9:19:0b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:56 2025 by rpki-client