Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b22367a3-6301-354b-8d0e-abda840dacd8.roa
File: b22367a3-6301-354b-8d0e-abda840dacd8.roa (raw, json)
Hash identifier: 70ydINpLg5EAMmhnj3gDL2Ob0MStVlroBcCSnt8E7/g=
Subject key identifier: 4D:46:B3:52:87:5E:24:65:95:EE:7C:CC:7F:F8:6F:41:EB:7E:72:F4
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584849457B63B0214C80412EBE80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b22367a3-6301-354b-8d0e-abda840dacd8.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 7342
IP address blocks: 2620:74:23::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:7b:63:b0:21:4c:80:41:2e:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=dd22ccca-e2d3-4c49-b052-416159ac6720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:85:81:13:a8:5b:f8:79:c7:9c:b6:6e:3a:
6f:1f:21:bd:7f:7f:93:84:2c:b2:ce:2b:29:6a:7a:
42:23:1e:68:11:40:b6:7c:1b:db:2d:fd:cc:fc:d1:
ba:f0:ca:cb:25:55:15:59:cb:8b:aa:26:f9:12:0c:
e3:15:95:ee:c0:6d:f9:91:72:d6:78:ab:f9:3c:80:
6c:56:6a:4c:ac:78:27:17:dc:00:9a:4e:ff:d3:6e:
1f:c0:a0:41:5d:e6:5f:99:c5:58:8b:40:a3:e4:50:
6b:4d:3a:3b:89:8e:aa:9e:99:cc:9b:03:98:b8:43:
f5:53:f9:22:5e:a0:35:24:1c:7f:6e:ac:1e:e3:30:
85:de:de:50:93:38:25:19:fa:91:2d:24:fa:6b:dd:
34:cd:e6:14:4e:52:48:7c:d2:c0:a0:bc:c2:9f:93:
c6:d4:a5:30:67:59:59:8c:46:8e:c2:88:f9:c9:93:
b2:34:b5:5c:ca:f2:8b:07:7e:da:e0:62:5f:32:c6:
10:31:89:f4:a4:a9:9f:84:22:95:d2:55:f5:21:02:
ad:8a:35:df:97:0d:39:16:ab:8f:b0:86:65:2c:8c:
55:eb:a9:4d:6d:d3:bd:f9:36:65:f0:9e:20:13:bf:
c0:0e:f7:7f:67:3e:e0:c3:b8:f6:af:d1:2a:10:46:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:46:B3:52:87:5E:24:65:95:EE:7C:CC:7F:F8:6F:41:EB:7E:72:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b22367a3-6301-354b-8d0e-abda840dacd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:23::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:ef:8e:80:05:09:3f:f2:05:45:b4:6e:79:4a:00:aa:e7:43:
12:c4:a0:81:ab:48:4b:13:bc:9e:92:fe:44:ba:39:42:f3:4b:
4a:3c:15:29:16:60:c8:2c:05:75:28:69:d4:b0:40:ad:7e:27:
aa:fc:07:5f:7f:5a:38:89:95:ae:a2:69:d8:d3:46:70:87:f1:
8c:c3:ab:ae:96:db:f5:ad:cd:59:a9:8f:35:34:6d:62:57:83:
60:c1:80:76:b1:10:77:e3:89:55:f7:6d:b3:b3:26:09:98:08:
49:2b:7d:e7:44:5f:06:c1:8e:8c:8e:4b:33:c1:c6:57:c1:a1:
f0:38:89:ab:94:90:bd:47:2f:7e:78:cb:96:0b:64:62:c6:f2:
c6:e4:36:74:c9:cf:71:b5:d5:60:98:b6:cc:bd:75:55:44:c9:
0b:23:52:2a:ae:4d:71:91:a1:a6:bd:9d:01:40:67:75:e1:72:
f5:9a:75:8e:27:61:8d:71:e2:9f:da:0e:fa:72:3d:d1:f7:b5:
99:99:d3:1b:65:fd:e5:06:1c:ec:a9:ac:03:6b:79:a2:93:df:
01:94:c1:1c:8c:f2:03:b8:82:ba:b1:ba:06:b2:05:4b:32:81:
21:65:06:63:91:0e:ea:6d:d5:55:32:12:e4:09:25:05:58:8b:
45:f2:c9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:45 2025 by rpki-client