Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bc5b7c3-19c5-3dfe-b6f7-fffa2fb831d2.roa
File: 9bc5b7c3-19c5-3dfe-b6f7-fffa2fb831d2.roa (raw, json)
Hash identifier: mhw8F46U6dG/ryBW7xSi1GolM9vdF5eG5Vovttuz02k=
Subject key identifier: D8:ED:26:14:3C:18:3C:EF:EA:39:74:44:64:BC:E8:C1:AC:86:70:9C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73F0990822EAA69314D380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bc5b7c3-19c5-3dfe-b6f7-fffa2fb831d2.roa
Signing time: Fri 29 Nov 2024 13:58:35 +0000
ROA not before: Fri 29 Nov 2024 13:58:35 +0000
ROA not after: Thu 27 Feb 2025 13:58:35 +0000
asID: 397212
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:f0:99:08:22:ea:a6:93:14:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:35 2024 GMT
Not After : Feb 27 13:58:35 2025 GMT
Subject: CN=6bd929d8-aa3f-464d-a903-e1848c1b3dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:ca:45:22:7c:ff:5b:28:99:7f:b6:1d:0f:
7a:8a:5f:6e:a6:be:1b:89:0c:58:3b:60:f0:48:1a:
7c:06:c2:9f:32:0c:e2:59:30:82:81:49:77:fb:cb:
85:65:28:2d:59:09:17:d2:94:c8:8c:9a:69:6d:0c:
1f:b7:54:d9:28:9d:24:d9:05:ae:70:95:60:ee:89:
81:fa:41:83:56:ed:80:ad:d5:b4:f9:f2:89:9c:ac:
04:9c:13:a2:1e:32:f7:81:20:7b:60:42:71:c8:fd:
f7:1d:0d:e6:2f:72:a0:c5:c2:f7:ad:9e:2b:0a:70:
73:5e:88:79:26:bb:ec:51:b3:a8:5e:b1:87:c1:9d:
1f:07:8c:0e:f1:40:13:b8:49:46:41:61:11:76:49:
a3:19:ee:1e:40:e9:88:a7:bc:c3:84:f3:91:5b:3f:
a4:f6:38:5b:13:59:80:34:37:01:62:b5:84:2d:b9:
8e:e1:33:55:af:da:8c:b6:74:0c:be:4c:16:f5:d7:
7d:40:60:03:95:4d:3f:37:3d:a3:cd:63:62:63:f1:
d8:11:de:31:68:75:8d:2c:1e:1a:af:e9:e5:82:fb:
64:55:c7:fe:15:d8:a3:27:bf:2f:63:89:7b:b1:69:
79:90:7f:b1:67:1f:f1:ea:0e:af:68:be:51:9a:9e:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:ED:26:14:3C:18:3C:EF:EA:39:74:44:64:BC:E8:C1:AC:86:70:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bc5b7c3-19c5-3dfe-b6f7-fffa2fb831d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:ef:ab:1b:7a:bf:31:04:c2:d8:27:cf:db:d9:32:2a:9e:3e:
c2:e9:0c:05:b2:40:e9:0d:61:41:fc:ee:83:56:5a:2a:17:3f:
96:8f:1c:89:53:a4:d1:6f:34:f9:71:b8:22:5e:5a:b0:0c:af:
47:a0:39:18:a7:4d:33:a5:cd:7d:ea:04:7f:3c:9c:82:d4:ec:
f8:62:85:8b:b3:65:ed:98:82:74:b8:25:31:fd:63:14:54:1b:
95:52:db:b7:09:d5:e3:7b:04:8d:07:ba:62:6e:38:f0:0e:fc:
74:76:78:62:0f:c8:58:74:f1:de:a0:c3:e0:74:0b:46:d0:11:
ab:cc:40:39:c2:13:06:b6:83:a7:e0:55:cc:bb:b8:ec:c9:31:
31:ae:af:52:aa:d0:7d:f1:18:a0:e1:a5:48:bb:e9:23:05:ee:
9d:7b:bc:30:30:89:49:68:1e:b8:b9:c3:15:01:ed:00:8f:03:
40:e1:e5:82:a9:74:d7:e5:6b:ab:e1:51:d6:79:8f:21:29:6e:
70:32:86:c1:41:0b:60:e9:9c:75:df:8c:bc:bf:76:f8:52:62:
50:5b:8d:a0:bd:74:29:27:2a:0d:c9:8e:3e:29:6c:c2:4d:0b:
db:59:09:f8:72:60:ae:84:bd:68:17:b3:ef:ba:3e:aa:da:2b:
03:41:ab:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:15:07 2025 by rpki-client