Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b014eb84-115a-36b4-ac52-2e5f3d0b1657.roa
File: b014eb84-115a-36b4-ac52-2e5f3d0b1657.roa (raw, json)
Hash identifier: 0JrN+dYT6q/dixdOAlthImXN9VwolUnUSSjVonJRrXA=
Subject key identifier: B5:EB:B5:46:54:11:79:87:D0:3B:A3:5F:A1:92:66:B3:CA:38:4F:03
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A74002D3F4498B2B58D3880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b014eb84-115a-36b4-ac52-2e5f3d0b1657.roa
Signing time: Fri 29 Nov 2024 13:58:42 +0000
ROA not before: Fri 29 Nov 2024 13:58:42 +0000
ROA not after: Thu 27 Feb 2025 13:58:42 +0000
asID: 397209
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:74:00:2d:3f:44:98:b2:b5:8d:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:42 2024 GMT
Not After : Feb 27 13:58:42 2025 GMT
Subject: CN=98b0db4e-0006-4ce0-8015-925752d61580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7a:e0:c7:9e:2d:3b:95:10:c7:b5:27:3c:e0:
56:9d:02:d9:14:5a:02:4b:97:44:d4:8a:42:fa:f1:
b1:c5:47:58:7a:2b:73:9e:54:36:b5:21:be:a5:84:
13:0b:6c:2e:0b:4b:e7:51:06:fe:4d:36:ed:d0:4f:
e0:01:68:d2:19:f9:5f:eb:88:e7:f6:21:ec:b8:78:
be:b2:40:46:56:51:c7:72:f7:fa:92:67:97:79:6d:
db:6a:06:37:4e:d7:38:fd:54:9c:c4:07:c4:7c:3f:
b5:58:a2:08:81:73:69:36:ef:5f:75:09:a3:85:47:
d9:c1:fd:ef:7b:f6:1e:16:36:32:5f:c7:d8:b4:33:
0a:65:9d:22:16:8a:db:ad:20:63:e5:b7:6b:31:ed:
38:86:03:23:ea:4d:f4:97:a5:96:32:57:e5:aa:fe:
fc:00:77:05:84:0a:67:c1:ad:82:ee:f8:3c:6d:e4:
42:27:48:79:5f:91:b7:a5:51:ed:3b:88:94:0e:41:
b6:ae:67:87:11:9c:60:27:91:2e:3d:6a:1b:1a:ca:
1e:53:7d:2e:4a:a8:0f:d0:82:03:2c:79:9c:8a:fa:
0a:42:e0:80:c6:a1:8a:1f:3c:b0:02:04:be:44:38:
db:9b:84:51:04:41:d3:f9:18:dd:b5:f2:dd:86:59:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EB:B5:46:54:11:79:87:D0:3B:A3:5F:A1:92:66:B3:CA:38:4F:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b014eb84-115a-36b4-ac52-2e5f3d0b1657.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:fe:79:ac:d2:75:17:ca:8f:48:f7:76:40:19:af:73:cb:8c:
c4:24:45:ec:e8:1c:7f:1b:be:5d:10:4d:b1:e7:89:c0:6d:ac:
55:02:51:66:e8:8f:0e:b4:25:3f:7a:f6:9f:a2:49:90:7a:d9:
12:86:e3:1a:01:89:f0:3e:2c:c8:a0:2a:6d:a9:41:0d:7c:d7:
b3:4e:62:6d:1c:24:ff:2f:7c:2a:a1:96:77:95:b5:59:ab:6f:
08:65:d8:6d:70:59:fe:73:84:76:07:11:16:59:0c:77:84:ad:
80:76:3d:5e:20:14:71:b4:8c:45:0c:f5:67:90:15:63:e8:09:
64:a6:fd:fb:8f:76:a4:ef:7f:53:7d:a7:b0:a9:02:bf:cb:9c:
a2:00:c2:9a:50:06:13:b0:98:01:64:83:51:bc:8f:b0:b9:5d:
f3:80:6d:44:0c:af:16:c2:0e:4a:2e:01:32:68:87:07:46:cb:
6e:69:93:6c:fd:3a:78:50:88:46:b2:23:78:60:47:cc:a4:ec:
f9:86:42:9f:e7:5d:25:59:19:27:c5:a0:94:b8:aa:f3:26:45:
4a:63:d7:a3:1b:c1:c6:10:45:66:80:fe:1a:20:f5:f9:f1:a5:
dc:fd:df:29:9d:bb:8d:ce:cf:6e:19:9f:a3:fd:fd:46:fa:4e:
14:53:45:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:54:13 2025 by rpki-client