Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/1cbd98bb-907a-3877-8444-b0fa2f0ed39f.roa
File: 1cbd98bb-907a-3877-8444-b0fa2f0ed39f.roa (raw, json)
Hash identifier: 9CLVVvHD97MpG8t8nEDDPTMemE0n8ZCj8MnV8JSe+oA=
Subject key identifier: C5:12:75:01:B6:12:8F:04:3B:B9:68:9C:36:6C:31:BB:26:FF:83:2A
Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial: 010D0C9F4328584250D08005203331CC9441C380
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/1cbd98bb-907a-3877-8444-b0fa2f0ed39f.roa
Signing time: Fri 23 Jun 2023 14:10:02 +0000
ROA not before: Fri 23 Jun 2023 14:10:02 +0000
ROA not after: Thu 21 Sep 2023 14:10:02 +0000
asID: 13849
IP address blocks: 2602:fbb5::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:50:d0:80:05:20:33:31:cc:94:41:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Validity
Not Before: Jun 23 14:10:02 2023 GMT
Not After : Sep 21 14:10:02 2023 GMT
Subject: CN=f1ccf2b7-c7cf-4ad2-b5e5-4c45d1363717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:d1:59:eb:07:8a:50:78:30:40:1f:cf:48:
36:ce:02:f1:26:37:8e:85:5b:4d:91:00:ee:a8:7d:
68:f6:83:78:be:17:a2:0f:05:e7:86:9e:8d:b4:0a:
72:f2:9d:ce:56:ae:36:70:0a:f9:85:bf:68:a5:13:
b0:d9:89:42:58:79:aa:3e:93:e1:47:59:4a:2c:2b:
7e:a1:c6:69:d1:89:6e:02:bf:bc:b0:a6:11:26:9a:
c6:b1:44:4d:17:32:80:15:ac:a2:51:46:bd:93:b7:
87:60:5b:65:0c:82:65:ae:24:cf:ca:67:7a:1d:59:
a8:af:64:d9:d6:97:89:c7:d6:ec:06:02:68:c4:1f:
0d:7a:89:c0:b4:9a:cd:a0:2f:d3:16:db:7e:ba:93:
82:41:67:3b:7a:c5:9c:7e:cf:57:61:c5:34:db:84:
9e:ca:c3:45:25:ef:12:fe:5a:b3:ea:6f:30:c3:46:
5e:3f:87:76:0b:fc:e0:04:1f:4b:e4:25:4e:4b:73:
67:67:a1:49:50:15:5d:d9:30:83:07:59:0e:ae:77:
2a:b0:af:fb:f1:ee:6d:4f:d5:b1:ce:2a:36:4f:21:
ab:fa:1e:7b:53:69:c8:dc:bc:a5:4e:4e:12:69:0a:
c8:ba:07:f6:25:e9:49:97:0b:ce:99:92:8f:8c:c6:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:12:75:01:B6:12:8F:04:3B:B9:68:9C:36:6C:31:BB:26:FF:83:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/1cbd98bb-907a-3877-8444-b0fa2f0ed39f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
X509v3 Authority Key Identifier:
keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbb5::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:eb:86:5d:8d:7f:8c:57:fc:94:0f:8d:16:a7:28:c0:f9:95:
21:f6:63:27:a8:26:1e:e4:86:ce:49:2c:07:e6:a7:cf:fe:18:
08:4d:2d:f9:86:d0:26:d9:c8:4d:39:96:1e:e3:5e:03:28:2b:
00:8e:b6:54:2e:37:61:89:24:7f:8f:1b:57:c1:b9:1b:98:ac:
d6:8d:e3:c9:45:d6:b4:7c:82:ec:2b:b3:38:16:0a:ba:8d:7c:
d6:e5:92:59:e9:af:fd:c2:d3:51:8f:62:2b:77:d3:18:32:20:
45:c6:c7:23:b1:2f:7d:a1:50:59:05:82:d9:45:c7:87:a7:f1:
c0:73:9c:e2:cf:92:f5:b9:5e:6c:b7:6a:ce:80:18:56:d9:1a:
cc:c8:27:d9:c5:7e:6c:f4:f5:c7:9c:00:3a:f7:04:fe:9c:61:
a9:d7:ed:83:c1:d3:e1:b6:af:1c:12:3d:06:3c:6f:71:f9:ff:
7b:dd:e5:92:84:6b:7b:1e:17:da:0b:0a:c7:30:72:9e:3e:f6:
c8:55:1d:0b:13:88:34:80:6b:5a:7e:68:21:03:5f:b2:0f:65:
db:d0:74:4f:6c:28:65:d4:56:6a:6e:fb:86:a8:f9:e9:fe:03:
30:29:cd:65:b3:a7:00:e8:7b:6e:e2:90:f1:ca:be:ad:fc:1a:
e5:e5:5d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:14:31 2025 by rpki-client