Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/acfcff29-c04e-39e1-a4e8-06b0109276e1.roa
File: acfcff29-c04e-39e1-a4e8-06b0109276e1.roa (raw, json)
Hash identifier: Fgf2HLy6nhmmHMO6ZbjkMucPqHk95GDlTSU/rQKsa9k=
Subject key identifier: 71:7B:D0:1C:53:25:81:C2:BB:33:0D:E1:70:53:04:13:68:C2:E4:60
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285847DB32758AF4BDAF127A1D14E0
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/acfcff29-c04e-39e1-a4e8-06b0109276e1.roa
Signing time: Tue 12 Nov 2024 15:43:39 +0000
ROA not before: Tue 12 Nov 2024 15:43:39 +0000
ROA not after: Mon 10 Feb 2025 15:43:39 +0000
asID: 26340
IP address blocks: 2602:fc3b:6f97::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:db:32:75:8a:f4:bd:af:12:7a:1d:14:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Nov 12 15:43:39 2024 GMT
Not After : Feb 10 15:43:39 2025 GMT
Subject: CN=36ab1958-2aad-4f59-bd48-1a2d01d48b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bc:1d:4a:94:fe:a2:fd:06:71:44:75:7b:5f:
c3:de:81:3e:15:82:50:a0:71:4c:ac:0a:ec:27:33:
ef:a7:35:47:f7:5b:d4:ca:73:85:1c:89:0b:aa:42:
cb:ca:a9:e4:76:ab:5c:04:0c:1f:04:d9:88:7c:c5:
c1:fa:b1:42:89:67:00:d7:f9:e4:b3:22:86:6d:88:
3c:80:5f:c9:ab:07:b2:07:ec:3d:e5:2b:91:b1:4c:
e2:36:73:2a:7c:3b:b6:64:12:fc:ff:2d:d4:a2:bc:
e1:67:24:e6:0e:3e:e7:f3:b9:49:e4:c1:88:3e:99:
a5:a4:d1:cc:15:84:5c:a2:ab:de:9a:f8:9f:45:bf:
b6:60:d2:14:af:f5:11:3e:4a:a8:a3:e7:cc:60:78:
f0:0b:90:3d:07:96:34:f7:9e:1f:c3:11:b8:bd:2f:
b8:ed:92:3f:b7:d4:a9:d9:ee:ac:1f:0f:b4:11:2a:
ac:a0:b7:b0:77:e7:d5:42:ba:98:f8:46:f0:c6:5a:
4e:b9:c5:ba:31:36:2a:67:bd:83:76:a3:e8:ae:1f:
a3:f3:09:b7:b5:8c:9d:ba:ea:58:59:50:3b:48:5c:
bb:59:e3:d4:28:ac:8a:5c:b7:ee:bb:2c:b0:4b:0d:
95:ee:79:5c:37:d8:ca:de:cd:01:0f:40:e7:94:7a:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7B:D0:1C:53:25:81:C2:BB:33:0D:E1:70:53:04:13:68:C2:E4:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/acfcff29-c04e-39e1-a4e8-06b0109276e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:6f97::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:12:90:c7:ea:fa:09:29:63:7e:c8:f9:a8:ad:d3:f8:1e:f8:
c9:8b:e3:70:54:12:58:9b:fd:30:82:ec:57:5c:2c:b9:a0:c3:
38:38:d2:0e:b9:20:b2:3e:8b:53:90:fe:15:2b:00:ff:5c:a6:
67:67:d5:e3:36:73:b9:85:39:3c:3f:ae:1e:8a:df:a8:33:f4:
52:ed:72:a6:39:7d:2a:60:3d:61:5d:f0:c9:94:6d:94:ae:d4:
fe:e5:cc:09:65:72:2d:1b:23:75:54:dd:58:67:4c:6a:c8:53:
4a:8e:32:06:15:1e:4d:8b:a5:2c:48:96:c0:38:47:ca:fa:96:
10:f9:e5:77:d5:02:81:76:26:42:18:74:af:9d:3d:00:0f:a1:
78:73:64:47:cd:32:7c:e9:fe:07:b6:6c:a0:9c:23:17:42:ae:
cd:35:da:f1:a1:3e:43:96:4c:2e:b6:fd:6a:4d:4c:3f:46:4f:
64:71:a9:66:8a:22:84:e3:a4:4c:93:63:6d:28:33:06:88:38:
f9:1f:ae:1a:00:2e:f7:6d:db:63:8e:bc:d5:72:25:82:cc:e9:
0a:6a:58:a4:25:66:9f:1e:72:01:b7:14:49:16:af:82:23:ad:
ff:34:9a:31:9b:ba:2b:11:71:5d:0e:c7:ea:fb:cc:d9:8a:c1:
e2:59:2a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:34 2025 by rpki-client