Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68dd023f-66ab-3ff2-9f66-10ad4b5dce5d.roa
File: 68dd023f-66ab-3ff2-9f66-10ad4b5dce5d.roa (raw, json)
Hash identifier: Un2pKCxUrPftYHIh3Wbn8Ovf4z80dTzcWoV1RV5WcjU=
Subject key identifier: 88:3E:DF:83:AE:8D:AA:FA:AB:64:8E:46:17:AB:57:40:99:F1:35:FD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73EDD7364048B833DC3380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68dd023f-66ab-3ff2-9f66-10ad4b5dce5d.roa
Signing time: Fri 29 Nov 2024 13:58:33 +0000
ROA not before: Fri 29 Nov 2024 13:58:33 +0000
ROA not after: Thu 27 Feb 2025 13:58:33 +0000
asID: 396565
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:ed:d7:36:40:48:b8:33:dc:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:33 2024 GMT
Not After : Feb 27 13:58:33 2025 GMT
Subject: CN=129641a2-871c-4bd6-9eba-72a815b1c5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:b4:84:72:8c:d3:1c:6e:76:57:55:7d:28:
2c:d4:83:2d:53:8d:0b:60:c4:c6:df:d1:7e:b0:e4:
73:66:6e:cd:3c:a4:e6:52:ee:7e:75:7c:9f:00:49:
7b:08:cd:14:53:27:e7:3a:dc:35:34:5d:34:71:8c:
93:e0:9c:f9:1b:ec:a9:e1:9a:0f:b5:16:3d:72:b8:
80:4b:d3:6a:12:79:ae:58:c1:79:e3:1d:bc:3d:9f:
a8:41:30:16:1c:61:e8:24:df:00:44:1e:2d:a1:12:
62:93:f2:6e:41:b6:8b:6c:f2:ae:a3:48:8a:0e:54:
31:00:09:5b:b5:77:87:2e:7e:0c:38:f2:7d:bb:7b:
0e:aa:ad:38:39:97:e5:69:71:67:f4:7c:ce:0f:c4:
68:ec:27:e4:08:1a:ff:4a:00:fa:47:89:3d:de:f9:
7b:9d:cf:85:5c:b8:d4:26:21:1a:cd:e0:6d:b5:6f:
ca:bc:82:b6:37:fd:c0:fc:98:a7:d8:bf:08:c7:42:
31:e5:82:3e:39:13:ba:f0:73:29:bf:b2:a2:64:c3:
5b:12:67:78:29:e1:70:c7:2b:ca:85:ca:83:2c:5e:
77:eb:eb:31:cf:07:6f:1e:69:ab:04:aa:29:af:7c:
9d:bb:19:eb:68:63:8d:7a:c2:31:f0:ca:c2:b4:06:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3E:DF:83:AE:8D:AA:FA:AB:64:8E:46:17:AB:57:40:99:F1:35:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68dd023f-66ab-3ff2-9f66-10ad4b5dce5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:e1:ad:96:13:97:89:11:53:28:40:0d:7d:61:59:ad:25:96:
48:cc:68:0f:2a:74:f0:3d:30:61:65:5b:49:43:e6:11:89:94:
c5:cc:4b:f3:a7:31:d2:a8:a0:8f:04:ff:da:d1:8b:93:b8:b4:
00:0c:cb:23:ad:f5:10:36:e8:45:8b:e0:84:37:f1:e2:3d:ef:
fa:14:4d:00:04:e9:fd:6b:71:26:45:0e:33:ef:85:be:8a:31:
a0:a1:fb:41:4f:4f:e7:c9:99:e0:ff:31:8f:12:1b:22:7d:03:
85:14:05:2b:f3:de:f8:5b:ed:b4:c1:15:ba:c4:96:8a:60:5c:
14:39:54:bd:f9:88:c8:2d:b7:95:5c:b1:f8:f7:c0:be:d3:84:
c3:52:55:36:ce:0d:88:11:f0:82:a3:4d:e1:ff:85:f2:2c:89:
59:41:2c:5b:9c:55:7a:1d:3f:e4:6c:ff:74:47:b1:d1:55:3d:
1e:82:78:c8:47:fb:7c:d0:04:56:c0:67:38:86:0b:8d:9a:e1:
ef:bd:ae:7d:b4:9c:46:20:51:8c:a6:f2:7f:09:b3:40:75:75:
32:9d:38:18:e5:42:8b:c5:78:85:fe:df:e9:1a:3d:cd:7f:d2:
f7:9c:62:b4:f3:c4:01:a8:0b:4a:8d:ca:20:27:d7:81:89:22:
3e:ca:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:37 2025 by rpki-client