Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/9d87d05e-f3c6-3b37-b5b7-7be34c54e99a.roa
File: 9d87d05e-f3c6-3b37-b5b7-7be34c54e99a.roa (raw, json)
Hash identifier: YHniMx0ATYf/DsI+AOMxvPcWw1xiS3Tv+3mN3eHonDw=
Subject key identifier: B2:91:15:A5:AA:4D:EC:DF:E0:BE:A0:78:65:AE:A1:5C:F9:49:C3:6A
Certificate issuer: /CN=2531a4ba-6abc-447c-add8-67edc3c483ab
Certificate serial: 010D0C9F43285844FD4A0F0405A48040D425B940
Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/9d87d05e-f3c6-3b37-b5b7-7be34c54e99a.roa
Signing time: Fri 23 Feb 2024 18:27:52 +0000
ROA not before: Fri 23 Feb 2024 18:27:52 +0000
ROA not after: Thu 23 May 2024 17:27:52 +0000
asID: 8075
IP address blocks: 2620:12a:c000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:fd:4a:0f:04:05:a4:80:40:d4:25:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab
Validity
Not Before: Feb 23 18:27:52 2024 GMT
Not After : May 23 17:27:52 2024 GMT
Subject: CN=cc8ac872-6e8a-46e9-8235-8ded8270b3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f3:53:6f:8e:ba:93:04:16:01:d4:84:8e:18:
82:9a:31:b5:4c:71:48:f1:e1:e3:90:13:bf:6b:83:
92:88:4a:01:26:53:b8:4c:8f:03:3a:e6:39:80:3b:
1a:7c:2a:a0:43:c6:d1:8d:f8:cb:8c:9b:02:63:87:
bc:13:73:13:95:3c:6b:c5:e9:09:74:1f:c3:4d:67:
61:03:9f:38:28:c9:fe:5b:56:25:fc:a0:eb:c5:77:
de:65:32:33:b8:ec:54:13:58:e7:4c:99:86:e1:a5:
08:0e:12:5a:2c:6a:73:00:b5:10:d2:01:71:66:86:
ee:85:e8:e2:f6:65:18:b9:39:11:c2:f5:7b:ed:5e:
22:21:18:b6:2c:46:5c:0b:22:78:f1:6d:14:32:49:
92:b2:42:fd:15:d1:db:63:1b:de:a5:f1:9f:ab:b7:
c5:0f:53:91:8c:b3:72:8a:a1:0a:72:17:ca:cb:bf:
0d:15:b8:13:84:61:16:2a:c6:3d:5a:55:e6:53:b4:
43:4e:26:39:94:4b:0f:bf:cc:52:b9:c8:8d:d4:9d:
70:ac:cb:a4:46:17:a8:ff:6a:c9:8d:4b:94:2a:92:
2a:6d:8d:af:ac:c6:82:fe:f1:97:a7:07:94:fc:65:
40:f2:5a:3e:71:3c:0c:63:48:99:be:8a:28:e6:45:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:91:15:A5:AA:4D:EC:DF:E0:BE:A0:78:65:AE:A1:5C:F9:49:C3:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/9d87d05e-f3c6-3b37-b5b7-7be34c54e99a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl
X509v3 Authority Key Identifier:
keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:12a:c000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:7e:0d:9c:a0:64:ab:ba:87:1a:87:53:a1:39:94:ac:7a:9f:
bc:8b:52:2a:35:3a:d3:36:95:6b:0a:15:d9:89:98:24:20:6d:
da:02:e0:46:a7:21:ba:8e:a6:73:9a:27:44:6a:10:40:e9:4e:
bb:d6:8f:2b:2c:4a:b2:57:cf:d7:b7:48:88:26:98:69:a9:68:
e7:4a:1b:ff:47:dc:3d:d4:b5:00:53:ee:df:e5:63:2b:df:a3:
7d:6a:fb:74:c7:b9:a6:f6:c3:4f:32:b7:31:c0:8d:13:7e:4f:
5b:e6:dd:9c:b6:84:3a:7b:6e:24:26:3b:f8:d1:ed:8a:5a:ed:
0d:08:16:f2:fe:12:d3:41:4f:74:e0:c4:60:f7:e8:80:f3:de:
eb:01:a5:08:bc:a9:28:b5:66:86:2c:da:f2:0a:f3:87:c9:14:
fd:1b:a3:2c:a4:90:6e:96:4f:42:52:ca:16:17:7c:9e:d5:d1:
18:09:62:b9:72:8e:29:3a:0a:d9:34:1a:58:0f:1f:84:ae:5a:
c7:32:17:45:14:d2:3b:be:d6:c0:d9:8f:a6:ac:83:5e:f8:c7:
59:38:93:48:f0:41:a5:06:51:2f:49:bf:23:84:af:ec:07:06:
5e:a4:32:78:f2:a4:e2:ce:29:d3:4e:7f:aa:37:36:37:09:d1:
60:37:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:27 2025 by rpki-client