Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d7cba0d-2561-386c-abbe-fdc36baf4043.roa
File: 4d7cba0d-2561-386c-abbe-fdc36baf4043.roa (raw, json)
Hash identifier: 6wlxE8QTJh1/XvDWxDzoIq0SLWAgXbfvsxPpR6Zq2SM=
Subject key identifier: D2:A1:3F:80:9E:F1:DA:FF:90:95:3D:88:46:95:1E:FF:1F:7B:98:65
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E571C23EED0D3D100500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d7cba0d-2561-386c-abbe-fdc36baf4043.roa
Signing time: Fri 29 Nov 2024 13:58:29 +0000
ROA not before: Fri 29 Nov 2024 13:58:29 +0000
ROA not after: Thu 27 Feb 2025 13:58:29 +0000
asID: 396557
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e5:71:c2:3e:ed:0d:3d:10:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:29 2024 GMT
Not After : Feb 27 13:58:29 2025 GMT
Subject: CN=da0467da-a04c-43c8-9a85-20da0160a336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:02:dd:a2:17:d9:5f:43:7a:94:84:54:c3:54:
6c:bb:7a:81:80:2d:25:6f:b6:c5:a5:b6:1d:7f:70:
23:1b:9d:3c:83:0c:f6:9b:23:1e:cc:ea:20:3d:78:
72:8a:77:68:b2:a4:51:8d:79:d7:17:c3:13:4f:b2:
58:58:45:43:0d:0b:44:0b:65:c9:80:aa:d9:0c:07:
6b:bd:98:5c:04:26:54:ee:aa:b1:dd:90:7b:ff:7b:
c3:ed:10:b0:62:93:93:c0:99:a9:fb:82:af:dc:f1:
af:81:4d:33:a8:e4:8e:b1:d1:bf:35:87:aa:9f:ea:
54:33:8a:1a:a9:ff:84:26:33:26:56:b5:14:06:fa:
d9:88:dc:f4:a2:4c:29:a3:41:0e:fa:e2:81:96:13:
29:11:a3:68:95:db:a6:1d:dd:1f:fa:7b:01:5b:af:
00:30:12:95:9e:a4:c1:6d:ce:e5:86:c6:b0:5d:c3:
e9:d2:34:08:25:c4:c8:95:49:41:f6:1b:ad:1a:bd:
30:83:f0:ae:03:a3:45:af:39:ef:bb:00:28:f3:60:
11:9e:97:8b:b3:b5:ec:fe:37:53:ff:f2:a1:b1:03:
0a:3e:70:68:af:a2:e9:bc:eb:38:14:69:2d:f0:13:
4f:71:ea:4e:03:7d:2e:09:82:f4:14:e0:bf:87:02:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:3F:80:9E:F1:DA:FF:90:95:3D:88:46:95:1E:FF:1F:7B:98:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d7cba0d-2561-386c-abbe-fdc36baf4043.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:54:f6:c7:aa:77:5d:f6:d3:63:06:f6:28:dd:d4:6c:4e:3c:
fe:31:b5:1b:0f:18:c9:18:8a:24:17:7d:04:ea:c2:39:fd:ab:
a8:d9:26:82:06:57:89:1d:b5:48:50:c1:1c:39:e9:1a:8b:48:
1f:cd:b8:b1:92:c1:cc:64:2d:0e:58:2a:6e:3f:69:82:0b:cf:
cc:5c:ef:c4:49:74:c4:06:91:2d:b7:ac:50:a9:e7:c2:c3:26:
ae:4a:b9:2d:d5:b3:4f:0b:6a:6a:c7:b8:56:0a:40:c3:1f:ce:
e3:e8:02:78:57:ce:31:50:8b:28:d2:12:fc:cc:a9:9a:b4:36:
0b:d4:a5:2a:5a:d4:23:39:c7:bb:c5:08:bb:d0:bf:3f:4f:b4:
7e:4d:a5:ff:7f:71:e4:7b:33:6e:48:54:e5:06:0f:9c:a5:df:
c7:26:9a:f4:07:23:44:a0:2b:69:f3:e2:0f:e5:02:ca:e2:f8:
07:09:a9:a5:e5:b6:f6:12:68:9c:09:94:e3:ba:a9:43:c2:86:
0c:05:35:c2:f4:81:1b:a2:b1:e5:69:8c:cf:f6:5a:9f:ac:76:
64:b8:0b:4f:b1:1a:9a:5b:9e:73:65:9c:31:08:98:44:e6:c9:
fb:32:05:5d:f0:0c:cc:13:38:01:25:df:0b:e6:bd:7f:6b:1a:
02:83:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:45 2025 by rpki-client