Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/487d9a5f-048d-3074-bf30-cc527c1af149.roa
File: 487d9a5f-048d-3074-bf30-cc527c1af149.roa (raw, json)
Hash identifier: 6uz8CvUrj5fHw14DIEQbHDjh8Mp2aFnd10a+EkPaFeQ=
Subject key identifier: 1B:03:3F:C2:07:35:EE:E7:D2:C0:D0:75:66:13:F1:2E:4A:CF:FE:DD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73DE74DA07D112F3665E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/487d9a5f-048d-3074-bf30-cc527c1af149.roa
Signing time: Fri 29 Nov 2024 13:58:26 +0000
ROA not before: Fri 29 Nov 2024 13:58:26 +0000
ROA not after: Thu 27 Feb 2025 13:58:26 +0000
asID: 396616
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:de:74:da:07:d1:12:f3:66:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:26 2024 GMT
Not After : Feb 27 13:58:26 2025 GMT
Subject: CN=d2c71da6-9bd3-4aac-88d1-769a7db6dbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:76:96:05:32:fc:9a:56:fc:94:c3:8c:f2:
f6:f0:89:98:a7:86:a1:d6:31:5c:72:10:ba:8e:1c:
44:06:0f:1e:b1:2b:e9:68:4b:6d:1e:d4:6b:1e:0a:
bc:95:b4:38:02:a1:03:73:0b:da:d7:1a:30:b3:57:
60:6b:89:72:0a:98:c4:63:46:ce:10:e7:ea:a6:1f:
57:c0:53:be:8a:15:70:7e:c6:02:d4:0a:a5:74:2f:
4b:2d:6e:4e:9d:19:b2:4d:86:ff:3a:9d:e9:a3:bc:
33:f1:08:85:6d:0a:80:5b:b0:67:11:d5:63:14:b0:
0f:bd:a4:69:c3:ee:0d:1d:6b:fb:7c:cc:91:c3:d5:
0b:08:71:49:b2:6e:39:b1:26:36:c6:39:73:39:70:
92:3f:d8:a0:9a:20:3e:ca:5d:b1:43:e6:03:09:33:
83:b4:dc:8d:22:bf:27:25:ca:8e:80:57:f9:22:2d:
98:c8:a5:82:d6:b0:70:80:64:d1:2c:33:07:38:b9:
32:bc:49:ff:f1:05:68:b2:64:7f:48:50:ed:33:99:
b8:2e:f0:16:3a:5e:48:fc:d5:76:74:5b:fe:c0:af:
ba:a3:80:3c:44:51:3d:4a:28:d0:28:f8:fb:1d:8b:
1f:07:26:7d:b3:db:e4:bc:3a:bd:7a:79:25:e3:97:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:03:3F:C2:07:35:EE:E7:D2:C0:D0:75:66:13:F1:2E:4A:CF:FE:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/487d9a5f-048d-3074-bf30-cc527c1af149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:52:a8:7d:6b:1c:13:56:f7:2d:50:ec:c4:56:a0:eb:15:3b:
51:13:8a:21:7b:c0:23:78:f0:94:87:e3:00:49:05:7e:35:b8:
03:34:db:2e:b2:e2:0b:97:75:7f:a4:cc:81:eb:96:bb:a2:5b:
bc:23:aa:b4:cf:1a:5e:b7:cf:10:4c:96:d3:78:b8:3f:5a:a3:
d9:a1:75:8a:c3:13:d1:89:a9:27:a8:7b:61:d2:ff:70:5f:c7:
44:a4:cb:d3:2e:f1:52:66:fc:74:8b:a3:30:72:48:4a:8f:d2:
e0:96:e7:fe:75:8f:ba:1d:eb:1b:08:04:9d:34:bf:68:c7:15:
11:60:bc:d6:70:68:76:9f:13:6a:fc:05:04:98:99:f6:ba:38:
9d:b1:96:c8:da:99:49:1f:e6:7e:b5:ca:94:d3:b7:ae:e9:db:
04:a3:59:7f:cd:f2:af:00:fc:20:9c:5e:98:b6:ca:87:7b:26:
65:85:cb:e9:7a:37:f2:4d:5a:6b:cc:48:68:8e:11:79:96:e4:
61:1f:de:ca:7d:1d:4c:49:65:ae:3f:5d:4a:31:6f:04:e2:76:
4d:16:27:9c:ca:90:e4:26:84:13:7d:14:3f:b2:ac:bd:d1:36:
9d:aa:24:5d:33:d4:07:af:f4:ba:71:b1:59:85:78:6b:e9:df:
ac:1c:80:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:29 2025 by rpki-client