Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d01bdd78-9e0b-3464-83cc-437b89cc97e2.roa
File: d01bdd78-9e0b-3464-83cc-437b89cc97e2.roa (raw, json)
Hash identifier: AMyVNELJilvwkjIzgLPIZkJ/MbS5LFvs2NrxP8qtKck=
Subject key identifier: F3:A9:70:E3:74:B9:E8:9B:C2:F5:F9:46:9B:0C:61:DE:00:79:AE:9D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A740460406F121CB7B53A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d01bdd78-9e0b-3464-83cc-437b89cc97e2.roa
Signing time: Fri 29 Nov 2024 13:58:44 +0000
ROA not before: Fri 29 Nov 2024 13:58:44 +0000
ROA not after: Thu 27 Feb 2025 13:58:44 +0000
asID: 397198
IP address blocks: 2620:0:5050::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:74:04:60:40:6f:12:1c:b7:b5:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:44 2024 GMT
Not After : Feb 27 13:58:44 2025 GMT
Subject: CN=a5ed4615-d5c3-47d3-9539-72ad9784ebd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:be:53:cd:83:6e:48:ab:d0:fe:dd:b0:76:
9e:f3:7b:9e:e7:6b:2a:da:b2:c4:8e:22:28:70:24:
ab:50:b0:3d:83:43:6f:bc:f5:b9:99:90:28:dd:ff:
5e:fc:2b:48:63:1c:33:da:b3:6d:41:94:f1:39:5f:
8b:a6:15:0f:8c:29:be:8f:e0:77:e5:24:6e:7d:ec:
4c:b3:9f:7b:f0:07:bd:10:2d:37:cb:0a:30:3d:2c:
e9:a5:de:e6:3b:23:a7:42:1b:00:98:0b:81:27:e8:
6c:bd:26:e3:e3:8a:1a:2a:18:72:04:ac:d2:d0:e5:
80:f1:ea:a4:3b:89:ad:99:53:0d:2c:50:76:18:b3:
c2:96:58:e3:4c:4d:3f:e8:44:43:c4:c5:15:00:6c:
b4:eb:0c:48:27:af:4b:09:8c:24:76:eb:02:88:c3:
0c:94:cb:08:f1:03:40:5e:c7:32:07:8d:f5:b4:13:
91:7e:35:7d:79:fe:36:61:64:f1:e9:69:77:0a:47:
b7:34:0d:ec:d5:ae:76:0c:00:13:76:35:35:48:8d:
d2:a1:8d:e4:99:22:52:bc:78:d4:a9:b1:80:80:8b:
c9:ca:e0:71:60:fe:4b:2c:2a:d3:9a:0b:2c:ff:47:
fb:70:66:06:ad:29:ab:72:8c:32:57:2c:5d:d7:95:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:70:E3:74:B9:E8:9B:C2:F5:F9:46:9B:0C:61:DE:00:79:AE:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d01bdd78-9e0b-3464-83cc-437b89cc97e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:5050::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:9e:65:4e:f3:be:eb:85:6d:4d:2b:9b:cb:15:c4:0b:bd:57:
2d:2d:3b:1a:eb:7d:e0:72:23:95:4d:4a:85:25:1a:04:ba:38:
3d:49:47:f6:d8:5f:52:a2:2e:59:f9:d2:17:ef:bb:17:e3:bf:
d9:b8:c6:6c:82:f4:45:b4:05:0f:e9:8a:e9:64:d2:66:eb:91:
2e:52:e9:e4:ee:da:65:70:36:09:77:ea:51:c6:aa:d4:ff:c1:
12:dc:7d:f4:f4:e4:ec:a6:79:a5:84:13:48:9c:91:ba:90:d3:
38:7e:f3:99:66:ba:8c:5e:c1:08:b1:fe:0c:bf:55:4d:20:c2:
72:a6:6c:46:e9:fa:46:0d:58:14:5e:33:1e:fe:0d:90:ca:b2:
94:23:6e:c3:80:56:ca:3b:8f:9f:94:7f:35:89:13:9a:34:ff:
ed:8d:b7:34:77:02:07:57:2c:fa:25:05:99:5b:cf:dc:cf:55:
95:de:b1:a7:0a:84:ba:1a:dd:22:6a:42:57:6c:6d:e1:1c:5f:
8f:fa:f3:f1:ea:d9:12:b1:ab:94:9d:1a:10:c0:79:61:c2:70:
38:9c:4a:1a:29:d8:2e:9e:57:0b:24:23:40:81:7b:53:85:26:
8e:5a:ee:91:a7:83:88:dd:aa:11:0e:2d:83:a8:ab:87:34:75:
af:07:14:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:11 2025 by rpki-client