Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/e51320b8-92a9-30e2-a716-3b5505862fcc.roa
File: e51320b8-92a9-30e2-a716-3b5505862fcc.roa (raw, json)
Hash identifier: lPUp/At4MwimLCHZrhU54HHT+QgNPDvFfH4e1CGB5+Q=
Subject key identifier: A1:3C:78:10:8F:E0:57:7B:11:B9:B8:B2:CA:AE:14:EE:22:91:0F:92
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285847DB324AE73A6A899F9291FF40
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/e51320b8-92a9-30e2-a716-3b5505862fcc.roa
Signing time: Tue 12 Nov 2024 15:43:19 +0000
ROA not before: Tue 12 Nov 2024 15:43:19 +0000
ROA not after: Mon 10 Feb 2025 15:43:19 +0000
asID: 26340
IP address blocks: 2602:fc3b:6f96::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:db:32:4a:e7:3a:6a:89:9f:92:91:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Nov 12 15:43:19 2024 GMT
Not After : Feb 10 15:43:19 2025 GMT
Subject: CN=488af76c-9cd2-40a6-bb8b-b9f56f667dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:97:07:ef:78:78:7e:9a:a6:7c:87:5e:40:
cf:7e:62:ea:b7:26:0a:4e:50:83:f0:c9:23:c4:32:
52:cb:53:f1:2e:f1:f5:72:96:ba:ff:99:14:11:3e:
44:2a:3f:14:15:6c:32:b6:31:ee:f1:2a:5d:e3:3c:
f1:96:11:78:7a:0c:cb:bc:6d:e7:9b:95:e4:8e:30:
ed:a3:60:9e:0e:9b:70:c0:02:1a:9a:de:fc:c3:9f:
27:8c:c1:85:1e:1f:c0:90:ce:e7:78:5e:b9:9d:55:
71:ba:18:70:fc:cd:3c:d9:67:41:7b:a7:5b:5e:7c:
f8:19:31:2b:4f:ae:9e:35:7a:32:e0:40:64:d9:5b:
36:92:56:fa:ac:e5:21:4f:1c:c8:fe:a5:87:44:1c:
b4:19:1f:58:08:67:52:ab:34:b4:d7:2e:3f:40:55:
61:11:5c:fc:92:c9:b0:14:d5:eb:80:5f:c9:67:e5:
96:a9:c7:0d:c6:2d:15:3f:ce:6e:10:c4:25:3a:43:
b7:2b:5c:2e:fb:1a:e5:20:44:1e:01:45:67:f5:fb:
43:46:e0:02:36:e7:4a:e1:05:b2:6d:41:42:bb:3c:
17:39:f1:a0:82:5f:53:a0:76:58:91:4c:c0:df:7f:
cf:1c:2f:ff:b4:05:52:d2:39:cb:d1:55:76:12:cc:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3C:78:10:8F:E0:57:7B:11:B9:B8:B2:CA:AE:14:EE:22:91:0F:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/e51320b8-92a9-30e2-a716-3b5505862fcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:6f96::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:73:3f:9c:5d:c3:f1:12:03:df:ef:88:19:0b:fe:53:7a:c2:
99:a2:59:b4:14:28:e7:cc:61:12:ce:61:7a:80:29:61:e7:76:
8f:d2:73:c3:4c:d9:64:77:c1:ec:dd:87:65:6d:b7:79:67:ed:
6b:ba:ce:a4:34:3f:51:71:ea:c3:09:ba:f2:af:93:ac:33:97:
f7:7f:d9:e0:6a:f3:72:34:47:3b:ff:ab:ac:d2:c9:ab:25:d4:
d4:e8:d0:17:b3:4b:75:2d:5e:2d:23:3a:8c:ca:2c:48:4b:62:
b2:e4:28:ee:60:b0:d1:9e:1d:cf:bd:eb:48:fa:d5:fa:39:7a:
d8:62:69:fc:ad:fb:2c:f0:0a:bd:04:e6:a6:57:74:d4:3c:d5:
ed:62:9c:5d:2c:a4:4d:e8:c1:96:e0:9c:54:8c:91:d2:9f:ef:
e5:19:ec:64:b0:5d:6f:80:f5:f7:66:f3:61:f1:d5:97:d6:3c:
7b:5a:4e:94:8d:a0:b8:e7:f1:d2:fd:25:de:ef:3c:b5:0f:14:
e4:7d:cf:55:46:4d:e7:bb:34:d3:32:6f:61:27:99:a5:0d:9e:
2d:7a:ad:be:e0:40:99:16:a4:e3:75:b8:46:3c:7d:a3:b6:5a:
a2:75:a7:28:54:d0:0b:a3:3d:5e:d5:30:99:ec:2e:2f:1d:cb:
62:35:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:29 2025 by rpki-client