Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f4758d3-a013-3131-a07d-2ca7a003e4a0.roa
File: 7f4758d3-a013-3131-a07d-2ca7a003e4a0.roa (raw, json)
Hash identifier: qnAbKPTPP9dR2UdM4TILjM7scoD8RbFTt82jfrP4pvQ=
Subject key identifier: CB:52:77:36:B0:C7:E1:A2:5B:CE:22:E3:C2:DC:14:A9:C2:D2:52:D3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73F11DDA429933071D3E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f4758d3-a013-3131-a07d-2ca7a003e4a0.roa
Signing time: Fri 29 Nov 2024 13:58:35 +0000
ROA not before: Fri 29 Nov 2024 13:58:35 +0000
ROA not after: Thu 27 Feb 2025 13:58:35 +0000
asID: 396587
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:f1:1d:da:42:99:33:07:1d:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:35 2024 GMT
Not After : Feb 27 13:58:35 2025 GMT
Subject: CN=af29d794-d880-4e18-a7ce-e85a03f30386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:46:3e:48:81:b9:2c:e6:ac:03:16:ca:2c:
6e:c5:66:fe:fb:ad:2c:83:48:b3:12:39:7a:4a:ec:
21:56:0d:98:e9:aa:06:99:77:57:d4:00:e9:98:d6:
70:b5:16:e5:6a:8e:18:0b:4c:68:9e:33:11:fc:6f:
72:ff:4a:90:84:ab:5d:cb:39:b4:e0:92:19:7f:13:
c9:a8:bf:fb:d2:18:88:5c:79:eb:3d:ef:4a:a0:4c:
0c:df:11:7d:29:8a:25:40:4c:91:1c:30:47:b1:0d:
48:d6:e1:fa:63:cd:65:c1:eb:e3:ac:67:69:8e:cd:
6f:6f:8d:18:e2:57:75:dd:4c:3a:05:c7:bc:99:75:
7a:5e:35:55:13:03:b9:1c:47:88:1c:13:59:9c:39:
d9:26:77:c3:02:c4:f5:37:24:d7:2a:e1:1b:1b:2c:
e3:c1:eb:7b:0c:97:24:b7:b0:57:28:12:74:03:7b:
8a:08:e9:64:21:df:9a:3e:2d:27:31:64:c1:4e:3f:
dd:7c:33:38:c8:e4:07:62:fe:7b:8a:cf:fd:de:cc:
f3:46:b7:f6:05:e9:d3:66:78:e8:3e:7d:9c:8c:47:
f3:ae:22:f8:78:a1:9a:42:09:e5:9e:91:97:1d:a3:
85:41:98:60:29:43:d4:43:3a:f6:a9:13:0f:b0:57:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:77:36:B0:C7:E1:A2:5B:CE:22:E3:C2:DC:14:A9:C2:D2:52:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f4758d3-a013-3131-a07d-2ca7a003e4a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:c5:6e:af:c2:4b:ab:45:b1:b2:45:8f:98:d0:18:23:01:20:
2f:39:4c:47:b2:f1:44:7a:64:6b:c6:d1:75:60:e0:7d:cd:eb:
19:f1:8e:57:e8:ec:cd:fc:ae:b5:73:51:79:97:85:54:e0:eb:
b9:d6:0c:c6:5e:d1:25:03:1a:54:a9:62:39:21:08:76:a8:49:
46:77:46:b4:7b:2f:b5:33:fd:6c:24:a1:7b:bd:a3:71:c4:63:
c6:f2:a8:ff:52:2a:ce:e9:00:b3:d5:c6:79:d0:64:56:bc:e9:
d2:26:c4:75:9b:95:72:ba:30:6b:e8:5d:b2:aa:c6:4c:dc:f8:
85:97:98:3a:7c:2f:97:de:38:cb:80:2d:ff:1f:04:78:a2:74:
f3:bc:f9:3d:8d:9a:cf:d3:dd:8f:ba:a0:f9:b1:b4:bf:96:40:
c7:d9:0a:8c:87:22:56:4e:e5:83:85:5c:6a:de:9f:b2:60:cb:
d4:ad:59:63:ae:37:d9:e0:27:bf:ae:e1:81:78:88:8c:09:d1:
96:0e:96:e1:b0:73:78:7f:47:56:de:2f:3a:9f:85:44:18:df:
6c:21:6d:27:7b:22:9b:62:d1:8f:7d:e0:99:36:8c:bb:38:21:
26:b5:64:1c:4b:1e:97:59:59:63:1f:f5:e4:5c:23:77:e6:41:
b5:03:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:55 2025 by rpki-client