Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca8af457-2cc8-3a16-89b8-5eb96f9bbe26.roa
File: ca8af457-2cc8-3a16-89b8-5eb96f9bbe26.roa (raw, json)
Hash identifier: qzBWyo3+1VLaSfUNGFh1vrFPmqrpLnxFnckk66jAPcw=
Subject key identifier: B8:52:12:06:52:D4:0C:E2:7C:C6:43:EC:81:CE:AD:44:04:90:66:E4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A74013A1FDBD9EB59906BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca8af457-2cc8-3a16-89b8-5eb96f9bbe26.roa
Signing time: Fri 29 Nov 2024 13:58:42 +0000
ROA not before: Fri 29 Nov 2024 13:58:42 +0000
ROA not after: Thu 27 Feb 2025 13:58:42 +0000
asID: 396573
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:74:01:3a:1f:db:d9:eb:59:90:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:42 2024 GMT
Not After : Feb 27 13:58:42 2025 GMT
Subject: CN=5b173d51-cbb9-4e05-b414-3ccad7e1b401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:40:d6:bf:5a:01:02:95:a9:3e:ed:5b:98:
09:0e:ea:bd:dc:dd:e4:7c:12:3f:02:25:65:bc:d1:
e3:1e:52:d5:bb:e1:85:76:47:c2:3a:16:fc:3e:f8:
ac:db:96:24:0b:70:1c:20:45:b2:13:50:34:35:7f:
82:cc:26:11:3f:64:9c:c6:5c:9a:e1:bc:e9:53:a1:
54:90:cb:da:53:f8:4a:3d:44:6f:e7:d8:96:d8:fa:
a7:37:8d:d3:3e:9e:bf:0c:d0:0f:25:01:f4:9e:e2:
76:b9:a9:71:48:f9:39:a9:17:a5:fb:d3:b1:11:63:
4b:22:22:9b:90:9c:59:24:40:27:05:5e:c9:10:c1:
3e:07:7c:16:39:4d:63:98:e3:cc:ea:27:98:9a:2a:
7e:d6:19:53:4b:e0:f6:df:50:ba:1c:77:c7:ee:40:
57:3c:ed:9d:cd:7a:e7:7b:51:a8:79:bf:13:37:35:
17:22:58:e9:f1:95:3d:12:ae:57:c0:d0:96:d8:df:
7a:22:39:88:c2:f4:b5:11:f0:b9:57:cc:1d:7c:f6:
11:33:02:ff:e3:80:b0:68:cc:eb:97:82:94:fa:d4:
af:14:52:da:7a:51:ef:8a:dc:71:91:58:85:00:fa:
ae:11:ad:87:f3:aa:29:6a:dd:38:aa:cc:3c:6c:81:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:52:12:06:52:D4:0C:E2:7C:C6:43:EC:81:CE:AD:44:04:90:66:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca8af457-2cc8-3a16-89b8-5eb96f9bbe26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:cc:02:4a:eb:ca:4b:aa:00:84:50:6e:67:96:4a:8c:f0:f6:
81:87:1e:d5:29:16:ca:f9:7b:86:55:4a:ba:93:e6:92:f6:ae:
db:dd:c8:8a:d5:28:d6:e0:93:d9:c9:54:ef:d0:f3:1b:67:79:
38:aa:af:6b:eb:9f:e7:6f:09:78:66:92:43:46:a1:46:50:08:
67:54:c6:95:d8:5c:a2:42:fd:db:82:fd:e1:26:45:3d:62:1f:
e7:bd:37:68:45:d4:3c:bf:bb:44:db:c6:0c:d0:d6:f4:1a:d7:
cb:5f:6d:fe:56:02:9c:c9:aa:60:24:1b:3b:6b:3d:1a:7a:6f:
f3:16:8f:85:a7:f0:a7:3f:7e:1a:b9:15:b2:81:c2:7a:76:14:
a8:65:60:44:a4:06:ec:79:e1:c8:7d:ac:69:86:c5:bc:b7:df:
c6:0a:9f:a5:7e:57:da:e3:75:29:a3:d2:ac:3f:ec:26:8c:55:
2d:fc:87:66:12:29:c6:9f:1a:9a:d5:44:72:17:52:15:13:f3:
3a:33:cc:31:2b:ef:22:72:68:77:35:97:dc:dc:df:5b:ab:88:
ce:52:3b:7c:e2:9c:4d:eb:c2:1d:ca:3a:b8:93:a6:3f:71:69:
f4:ce:c7:b7:a3:22:e4:c3:e7:09:ef:f9:e0:7f:79:54:c1:01:
c5:cb:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:06:12 2025 by rpki-client