Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/978fb6c7-a9d7-3827-8137-bc212f2f1cd9.roa
File: 978fb6c7-a9d7-3827-8137-bc212f2f1cd9.roa (raw, json)
Hash identifier: y/H7ku9CkLUiC17xKd88D8E63utCrPWJFIB5mci70jU=
Subject key identifier: A8:63:8A:98:9E:1C:FD:6B:A6:88:3B:90:6E:4E:B4:36:14:06:84:EC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E30625945BCCFFAFCA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/978fb6c7-a9d7-3827-8137-bc212f2f1cd9.roa
Signing time: Fri 29 Nov 2024 13:58:28 +0000
ROA not before: Fri 29 Nov 2024 13:58:28 +0000
ROA not after: Thu 27 Feb 2025 13:58:28 +0000
asID: 36618
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e3:06:25:94:5b:cc:ff:af:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:28 2024 GMT
Not After : Feb 27 13:58:28 2025 GMT
Subject: CN=41751dfc-6f90-45ce-b1d5-df9b3c3f69a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:17:15:64:63:3d:61:2d:81:d8:27:14:a1:
80:a3:70:25:99:91:af:98:4c:d6:86:e6:8d:bb:f3:
f8:46:91:b0:16:0b:a1:d1:3f:dc:d1:17:f5:97:25:
78:0b:75:ec:4c:26:3a:c9:fc:c5:92:11:0f:3e:0f:
b4:0b:af:93:4a:a8:a2:e3:73:77:b9:55:c1:42:b5:
05:98:e1:c4:cf:53:d2:24:47:45:4b:cf:88:3f:4d:
7e:9f:96:16:cc:89:06:db:87:00:24:a1:08:4c:cc:
5d:02:ce:3e:2f:f9:1b:6a:82:9d:a3:2e:72:86:33:
0e:f8:93:ea:3f:c8:b9:b0:e3:da:da:16:cc:1f:3d:
06:46:f0:a5:f9:8f:35:ce:1d:6c:48:29:8f:46:65:
c0:49:46:4a:c8:d6:e8:25:98:3f:fe:f7:e9:85:02:
5e:7d:ba:ae:80:f0:41:a5:ed:fe:78:14:c5:5f:e1:
c8:36:5d:d8:d1:17:d8:95:36:b4:43:b4:54:b5:33:
65:04:fd:fb:58:fb:a2:ac:4c:e6:0d:0e:85:b1:60:
0b:65:99:d0:43:46:5e:e1:e7:01:08:0d:7a:e9:3d:
ce:b6:c5:48:60:64:45:3b:b7:00:44:0a:63:fd:1b:
f7:2e:42:af:97:09:3a:b0:79:db:67:2e:9c:7b:08:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:63:8A:98:9E:1C:FD:6B:A6:88:3B:90:6E:4E:B4:36:14:06:84:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/978fb6c7-a9d7-3827-8137-bc212f2f1cd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:e8:c3:81:26:2b:60:df:7d:38:7f:48:52:56:c2:86:07:a6:
9b:60:db:ea:14:22:63:fe:5a:b1:7b:cb:3e:ca:f0:7e:13:82:
37:99:33:fa:b1:df:02:72:b7:e2:6d:65:b8:eb:7b:e1:b7:56:
d7:5b:7f:4b:59:e9:41:af:ec:98:94:6c:ae:54:c7:e5:43:f5:
07:d3:8a:59:8b:99:cc:2c:21:81:59:f8:48:a4:21:a3:64:62:
df:0e:34:0b:58:f3:5a:b0:3b:1d:52:28:f6:be:f3:58:83:b5:
59:a9:74:4e:7d:79:b1:49:5f:8d:57:54:7f:71:ba:90:16:d8:
d0:96:05:c2:80:a6:5b:6e:b8:d3:b9:f6:9d:a8:c1:af:d1:0c:
80:23:17:14:cc:71:ca:48:d3:5f:59:65:59:7d:27:9d:b9:b6:
03:50:cf:fb:84:99:1e:eb:0a:4f:58:53:7d:85:67:e6:cb:ac:
76:b2:8f:4d:61:a7:cb:e3:82:00:8d:98:05:43:b6:6e:26:0f:
dd:53:b7:d5:16:c6:cd:fc:ab:6e:48:70:b5:d8:e1:cb:01:af:
9e:6c:d0:91:bc:5a:b7:58:d1:e9:a8:dc:e5:f4:33:2b:19:be:
19:ce:8b:35:4e:ab:9d:6a:5f:e7:fc:02:1e:bf:2e:d9:e1:21:
8b:56:c0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:29 2025 by rpki-client