Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d257e010-2b45-3cdc-970b-9869a2fe00f5.roa
File: d257e010-2b45-3cdc-970b-9869a2fe00f5.roa (raw, json)
Hash identifier: qFpcoDjnZ5rqq5dy81yl4CUk/nZUPsd6QsmDdebG5os=
Subject key identifier: 4A:39:D9:07:E3:AE:FC:D0:C4:E9:EE:2C:4D:25:CD:6B:75:2D:54:84
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858445E147B1FAB9BAB2618857600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d257e010-2b45-3cdc-970b-9869a2fe00f5.roa
Signing time: Thu 28 Dec 2023 17:46:23 +0000
ROA not before: Thu 28 Dec 2023 17:46:23 +0000
ROA not after: Wed 27 Mar 2024 16:46:23 +0000
asID: 7029
IP address blocks: 2604:cb00:4100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:5e:14:7b:1f:ab:9b:ab:26:18:85:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 28 17:46:23 2023 GMT
Not After : Mar 27 16:46:23 2024 GMT
Subject: CN=95ced168-0a49-4cc0-a7f6-d8da7dac8564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b3:17:48:c1:d9:1d:d3:9a:72:1e:d3:5c:0e:
d5:dc:20:64:78:ce:6d:42:ba:7d:f6:00:0a:c9:94:
c0:80:5f:9f:e4:48:21:ce:76:58:42:46:9d:70:60:
e8:c3:0b:07:f2:94:aa:8c:87:8d:00:a2:33:51:92:
c6:80:8e:87:97:d4:e8:0e:2f:47:7e:8f:f1:78:29:
52:b9:49:9f:77:8f:79:67:b0:13:76:e0:a9:14:eb:
73:04:c6:07:b6:1c:89:cf:8c:c1:b8:a1:74:42:c2:
a3:51:4d:0e:5f:99:67:f5:60:b7:fe:86:36:67:64:
df:68:50:db:9f:a1:0c:ab:e7:47:ba:98:71:d9:0d:
b4:95:eb:cc:55:f1:06:be:21:e6:76:19:3b:82:33:
52:eb:71:56:08:78:a8:6e:a8:6d:0d:e6:ee:bd:8d:
5e:09:ce:5f:ef:b0:37:77:15:c8:90:35:1c:ca:33:
c6:9e:0d:f4:68:49:3c:c8:61:c9:d5:75:73:58:9a:
c2:38:1c:d1:63:5d:64:84:4a:3c:37:e5:76:9f:a5:
04:76:4f:48:ac:d3:0d:5b:56:6e:3e:44:8d:b4:c2:
2f:44:75:68:4a:91:50:8c:5d:08:86:ef:b2:9a:89:
50:c9:d1:bf:24:51:23:66:29:36:08:61:a6:05:f4:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:39:D9:07:E3:AE:FC:D0:C4:E9:EE:2C:4D:25:CD:6B:75:2D:54:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d257e010-2b45-3cdc-970b-9869a2fe00f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:4100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b2:2b:e4:ce:3b:55:24:c5:00:93:76:91:72:2d:87:81:83:
e3:36:ba:82:31:55:c4:35:e1:b1:4d:74:e0:15:f9:3b:db:16:
b9:e4:d3:ba:f0:67:b9:e6:20:fb:1d:6a:02:a5:01:f6:20:a0:
43:ad:10:75:3a:c7:cd:99:9a:ee:25:89:c5:74:f8:f6:37:0c:
ab:ae:88:75:ae:a0:84:60:e4:b5:de:e0:35:09:b4:8f:62:66:
24:91:e2:75:b5:35:71:87:ae:0d:ed:58:a2:78:2f:67:16:d0:
09:4a:ab:7b:19:39:bb:c1:92:42:14:cb:0c:06:f1:a4:7b:34:
ab:e6:f2:03:cd:78:c4:c4:db:1d:2c:ed:4c:79:91:0c:bd:f0:
ac:fd:fe:57:c3:71:ce:45:48:a3:d1:64:82:b5:e2:19:91:46:
ec:ac:da:4e:4d:f3:9d:f1:1e:b5:45:8e:b8:e9:a8:04:d3:94:
df:0c:57:0a:0f:13:7b:10:f3:6d:e7:60:6a:67:10:25:6a:24:
d5:6f:c1:e9:c4:97:94:41:86:15:fa:6e:f9:b2:a2:95:75:6c:
62:a3:a8:e5:f9:9a:f9:66:07:4e:c1:b7:42:61:96:c0:2c:9d:
1c:df:45:a5:64:b9:ce:d2:b6:96:17:f3:57:b2:f0:bd:b0:3a:
5a:65:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:10:16 2025 by rpki-client