Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca349476-33e1-36c7-bcab-b47044923f8c.roa
File: ca349476-33e1-36c7-bcab-b47044923f8c.roa (raw, json)
Hash identifier: bQqEzwv+7OF9bVfbLA2vb2OCOkAL1jDnHSBOua++OYk=
Subject key identifier: 90:72:AA:00:15:D4:1E:F1:6A:02:3F:DD:0F:0C:0E:5A:94:5F:CC:51
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73F449E3A1AD99BB336040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca349476-33e1-36c7-bcab-b47044923f8c.roa
Signing time: Fri 29 Nov 2024 13:58:36 +0000
ROA not before: Fri 29 Nov 2024 13:58:36 +0000
ROA not after: Thu 27 Feb 2025 13:58:36 +0000
asID: 36620
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:f4:49:e3:a1:ad:99:bb:33:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:36 2024 GMT
Not After : Feb 27 13:58:36 2025 GMT
Subject: CN=539b2000-e1fc-4908-b626-a8562c420b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:9a:0c:7d:72:9d:8b:89:1f:cb:92:c4:5f:
75:60:2c:a8:8e:50:66:8c:64:15:82:e2:e1:3d:cf:
70:86:67:63:e1:46:6e:88:3e:47:9a:9b:2d:94:39:
b7:b4:bf:54:f6:7e:27:e3:96:f2:65:ba:8b:4d:0a:
3a:66:b5:43:4b:f9:ed:06:30:2b:92:25:88:cd:60:
df:06:28:43:6e:00:87:0d:4e:cb:73:47:d8:48:48:
45:d9:1a:3f:6f:63:a7:7a:e2:15:de:fa:3a:f3:e6:
c1:99:20:7a:1a:11:80:eb:88:36:25:e5:4a:a9:52:
ea:f3:d1:0d:41:3c:29:d4:9e:ae:c5:f6:b9:88:90:
44:01:03:27:e1:3a:58:00:b7:c9:c8:2e:fd:7f:60:
ab:5c:9b:68:7a:ce:e2:34:c4:6c:21:ed:fd:49:56:
a0:38:4e:08:6e:71:35:e5:3d:22:06:55:60:39:74:
96:37:9c:d4:12:50:71:3c:57:7b:3c:85:68:07:d2:
69:9e:57:fb:3f:5e:6b:6c:34:3d:f5:c8:81:76:da:
4b:67:a5:30:bf:dc:ea:88:fa:1b:54:bc:a0:4a:b0:
5e:ec:14:fe:17:a6:0d:b1:c2:bd:d6:65:48:88:17:
ae:f6:a6:75:c4:64:aa:53:99:52:95:dc:cf:71:ce:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:72:AA:00:15:D4:1E:F1:6A:02:3F:DD:0F:0C:0E:5A:94:5F:CC:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca349476-33e1-36c7-bcab-b47044923f8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:a6:e5:6b:4c:9f:cb:62:cf:0a:3f:58:ef:3b:00:07:03:64:
96:e2:bb:45:98:7c:88:fa:ec:8a:9d:19:e4:8e:dc:6a:f0:27:
62:da:ce:36:53:ee:33:0f:2e:00:61:bb:74:0e:9a:61:80:5d:
8c:be:0b:24:1f:30:09:6c:4e:cd:d5:3a:a2:3f:7c:bd:54:ed:
60:c0:8f:bc:55:23:a4:a2:bf:45:f6:73:ad:3e:f1:f5:e4:49:
d6:0d:1e:a1:e4:a1:9f:ad:d3:c8:3d:56:19:6e:3a:22:ab:31:
6b:dc:30:20:fc:96:7a:a9:1d:c1:c8:e4:12:ed:cd:7b:4c:4e:
52:9b:64:43:80:bc:59:6e:9b:17:74:89:61:e6:b8:3e:f4:b1:
f0:bc:a2:56:68:da:46:6d:11:05:f5:4c:ca:89:b4:49:8b:a5:
a4:b0:29:4a:aa:46:33:9c:e9:29:e1:67:75:5f:f9:c8:99:8e:
96:94:e6:18:5a:81:05:95:1f:22:20:49:70:02:39:ff:f3:53:
28:85:f3:9a:b6:38:df:28:93:5d:0e:43:e7:77:21:3a:1f:85:
f7:4e:d0:0a:b4:94:ae:a9:7d:e2:9c:19:2a:58:e2:9a:a0:70:
c2:89:ab:92:fe:8e:5a:b5:db:ae:28:c2:93:a6:7e:95:77:64:
59:4e:60:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:47 2025 by rpki-client