Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/ed8844c4-50f3-3aad-8f88-12ae617a3a97.roa
File: ed8844c4-50f3-3aad-8f88-12ae617a3a97.roa (raw, json)
Hash identifier: Gy8fZBLSagC5dyVDG/LLyaX0buUuPKHdxEHRXQKYQYg=
Subject key identifier: 11:89:6F:14:AA:7D:ED:04:62:0E:C5:B5:27:64:6A:A8:23:E0:5A:97
Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial: 010D0C9F4328584250D2D4FBC16AD340A5E78880
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/ed8844c4-50f3-3aad-8f88-12ae617a3a97.roa
Signing time: Fri 23 Jun 2023 14:14:44 +0000
ROA not before: Fri 23 Jun 2023 14:14:44 +0000
ROA not after: Thu 21 Sep 2023 14:14:44 +0000
asID: 13849
IP address blocks: 2602:fbb5:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:50:d2:d4:fb:c1:6a:d3:40:a5:e7:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Validity
Not Before: Jun 23 14:14:44 2023 GMT
Not After : Sep 21 14:14:44 2023 GMT
Subject: CN=41b266a8-40ea-4597-9836-af59d29657af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:1d:b7:ad:2c:3f:21:8e:3f:68:eb:03:ca:
a4:9d:13:d9:c0:ca:f8:41:34:58:38:61:fd:f6:b6:
05:e0:1b:3c:7c:b7:f5:1e:fe:a1:1a:9a:53:c7:f0:
73:8a:63:30:2f:61:b8:30:5e:8f:26:36:0f:8c:cd:
f4:7e:57:49:73:7c:3d:78:1d:39:6b:0b:fc:05:fa:
6f:99:fd:c0:7c:4f:0e:a4:9e:7b:56:17:6f:dc:f8:
35:65:78:bf:c4:4e:22:01:47:e8:a7:3f:c5:4c:95:
78:a8:bd:d3:96:99:38:d4:c1:e9:f7:75:e4:b4:c9:
ce:61:73:fb:02:be:e0:33:08:6c:91:70:17:e2:9a:
b8:ab:89:ea:70:f6:a3:f6:03:ec:10:79:d0:5b:23:
2d:23:5b:10:5e:b4:2f:b5:3e:fb:ae:8a:ac:1f:7d:
6e:72:f8:2b:9d:ad:37:6b:7b:ec:7d:8a:0f:27:57:
16:ed:11:c3:07:c2:2a:d6:c5:83:87:d0:44:93:8a:
d2:c5:93:97:1f:90:78:c3:af:13:76:c8:1d:f0:3d:
c8:ab:b1:e1:97:da:0d:fe:ef:73:7e:85:58:4c:19:
94:5e:90:7e:2e:6d:15:61:37:51:29:4e:15:5c:a0:
54:ee:b3:72:0e:b5:1b:45:a7:73:90:bb:14:36:a9:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:89:6F:14:AA:7D:ED:04:62:0E:C5:B5:27:64:6A:A8:23:E0:5A:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/ed8844c4-50f3-3aad-8f88-12ae617a3a97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
X509v3 Authority Key Identifier:
keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fbb5:4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:78:96:8f:19:db:2c:6e:10:d0:58:28:da:85:e5:b2:e4:49:
1e:80:65:4f:a8:42:6b:94:c0:89:29:62:d5:4c:f8:d0:cb:86:
ee:34:09:9a:bb:9a:89:5c:d3:cc:d3:23:2b:30:32:6a:57:09:
00:39:ac:18:d7:78:09:c8:ca:20:1d:18:4c:46:2f:42:21:6b:
e9:67:41:9c:23:30:a4:1f:90:65:43:91:73:51:99:25:e1:4d:
6e:26:7c:8e:db:1b:e4:99:14:83:08:02:91:f1:44:59:fa:39:
92:63:47:e2:9e:cc:91:e3:d4:3a:40:12:ae:b8:8f:44:37:0c:
c5:32:d8:8e:22:2e:b1:94:44:4f:bc:0b:76:e9:d2:6c:d5:0c:
09:30:ae:78:33:a6:71:17:5a:86:4b:6a:66:bd:a3:6f:3b:6e:
93:ef:cc:ec:66:ba:03:4f:1c:03:01:de:38:17:22:32:cc:13:
80:d8:b9:dc:50:8c:c5:6a:5b:ad:71:b1:61:0b:b0:0b:fd:f3:
99:42:59:7c:52:46:25:71:e3:36:aa:40:57:b3:3a:4b:ff:dc:
17:46:4c:7b:99:9c:48:14:16:c0:09:07:5e:d5:6f:69:73:09:
9c:7c:b9:21:b0:77:ac:a0:da:3a:b6:9b:8f:57:d7:76:cd:41:
97:f6:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:12:45 2025 by rpki-client