Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf185028-473a-305b-baf9-5b5b3f5b440c.roa
File: cf185028-473a-305b-baf9-5b5b3f5b440c.roa (raw, json)
Hash identifier: Gs+Ps2nH/Xr/uVNhNh9Fbi3hSna0ufUZVT1jtE/K3rA=
Subject key identifier: EB:AC:55:74:48:F8:76:CF:94:D8:69:38:53:B2:B1:63:10:47:65:40
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E5B729A176B3D9A62F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf185028-473a-305b-baf9-5b5b3f5b440c.roa
Signing time: Fri 29 Nov 2024 13:58:29 +0000
ROA not before: Fri 29 Nov 2024 13:58:29 +0000
ROA not after: Thu 27 Feb 2025 13:58:29 +0000
asID: 396563
IP address blocks: 2620:0:5050::30/128 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e5:b7:29:a1:76:b3:d9:a6:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:29 2024 GMT
Not After : Feb 27 13:58:29 2025 GMT
Subject: CN=e47b23e2-976b-4142-ab23-6bbbb8420699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7a:36:9d:24:42:eb:36:f4:b5:d5:d8:3f:7c:
ff:ee:56:08:96:95:1c:6a:4d:0d:48:6d:21:8f:13:
80:ed:49:2a:52:01:a0:58:80:5c:e3:93:48:62:3b:
e8:cd:54:12:26:bd:d2:6f:c5:0e:96:87:9a:f1:47:
25:28:e2:22:6b:bf:ef:16:1e:53:c9:2f:df:ca:48:
6b:0c:56:ce:3f:46:46:f5:7e:e0:52:8e:0b:06:8f:
68:a3:0a:46:0e:6f:8d:90:39:d4:58:d3:6e:3e:45:
03:41:85:5e:ff:51:7d:25:16:bc:1b:3a:64:55:cd:
55:30:bc:ca:aa:ea:cd:ee:56:0e:47:b0:e0:61:aa:
a5:bb:f8:b3:f3:4d:70:89:04:c0:9b:2b:a1:dc:0e:
71:a2:66:fd:b4:02:0e:bd:84:14:60:86:cf:95:b2:
7a:08:23:1c:32:90:5b:6d:83:4a:cc:b4:07:47:17:
a6:ac:52:f8:15:47:6e:c4:40:d1:19:cd:a5:0d:33:
94:8f:1b:44:64:b2:94:3c:e7:b8:62:55:1f:a5:c6:
cf:ef:b9:b4:5f:02:7e:5d:6a:e3:ba:e9:b4:db:77:
52:ec:25:77:69:c0:77:70:62:f3:ff:4c:45:cc:9a:
ba:aa:43:f0:ef:82:fc:a3:61:8e:13:8a:82:b2:8f:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AC:55:74:48:F8:76:CF:94:D8:69:38:53:B2:B1:63:10:47:65:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf185028-473a-305b-baf9-5b5b3f5b440c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:52:9e:f0:74:1f:95:7d:45:17:6a:0d:1e:bf:e6:41:91:cd:
57:66:2b:c4:c0:9c:ea:96:de:6f:e3:16:7a:d1:b1:15:91:2c:
9c:f0:d9:43:80:fc:aa:ee:da:35:57:c1:1c:34:60:f0:6a:b5:
25:81:6d:93:56:16:c2:db:ed:e8:a7:4e:08:af:02:bb:28:67:
5c:b1:81:96:90:30:9d:85:83:a5:ed:38:e2:4d:54:82:2d:be:
bb:67:83:dc:2d:f4:59:b4:4c:36:b6:be:ed:2f:3c:2c:71:52:
b3:1d:8b:4c:8c:c5:46:83:fe:9d:7a:99:30:59:4d:eb:14:15:
16:5c:72:32:8c:c1:0b:22:b0:36:b4:69:77:a0:d7:5e:47:e5:
05:da:65:ec:de:e1:e4:51:57:43:22:38:76:7e:b0:81:53:cd:
8f:fd:98:d6:5c:8a:4c:2c:06:59:51:51:73:77:d8:9d:c6:d0:
8f:36:04:c6:d9:b2:19:53:50:d0:25:37:1e:69:18:09:7f:9c:
4f:f4:6d:66:d6:a4:69:59:85:57:0b:f3:e9:1c:e1:8f:13:41:
13:36:cf:4c:af:cd:eb:3a:3a:35:54:52:12:ab:36:e0:b8:74:
c2:bd:5b:2a:2f:84:c4:df:d9:51:f6:f5:2a:be:2e:64:65:dc:
61:8c:4d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:04 2025 by rpki-client