Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/a6b705d2-4c11-3f7f-9976-3f8b85d37f15.roa
File: a6b705d2-4c11-3f7f-9976-3f8b85d37f15.roa (raw, json)
Hash identifier: zV7gPpzbKwB4mE2AqmU9Zs5/k91U2O5BIn0535tMNWo=
Subject key identifier: EE:58:01:69:6D:42:CB:EB:23:CE:35:68:8A:21:B2:33:0A:81:F8:30
Certificate issuer: /CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
Certificate serial: 010D0C9F43285847CE66A4F090E19422E2B6B780
Authority key identifier: 81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/a6b705d2-4c11-3f7f-9976-3f8b85d37f15.roa
Signing time: Fri 08 Nov 2024 01:43:17 +0000
ROA not before: Fri 08 Nov 2024 01:43:17 +0000
ROA not after: Thu 06 Feb 2025 01:43:17 +0000
asID: 14618
IP address blocks: 2602:fa16::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ce:66:a4:f0:90:e1:94:22:e2:b6:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
Validity
Not Before: Nov 8 01:43:17 2024 GMT
Not After : Feb 6 01:43:17 2025 GMT
Subject: CN=6e803227-3647-460e-aefa-55bff8746ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:42:6a:39:3b:f5:ef:60:77:ef:26:b8:85:ed:
14:80:4c:92:56:0c:95:a4:1d:a4:b4:d0:2e:c6:03:
1e:0e:06:95:d8:07:39:95:98:52:93:99:f5:91:8c:
98:7d:10:86:e8:f2:2f:a0:ba:1d:6c:f1:c3:38:7a:
15:a8:82:be:27:3b:70:7b:49:52:45:a7:49:49:42:
bf:b7:22:62:31:a0:8c:93:13:07:a0:b5:84:76:aa:
4f:cf:81:61:d6:8e:d7:cc:00:ff:4f:f1:97:a9:ea:
4f:58:0d:bc:d9:ba:65:43:a2:3a:fa:10:7d:7b:c4:
e9:3e:d1:66:1b:7c:52:10:0d:b8:a6:77:28:d3:68:
5a:8e:56:fd:51:d2:71:ad:e6:18:3d:25:ba:83:92:
5b:35:2f:08:d8:ec:87:48:f6:a8:05:d6:c1:6b:50:
ae:f9:07:ff:6c:66:d0:cd:55:8e:2d:69:75:a3:d1:
8e:5d:f7:5d:ed:7d:04:1b:52:b4:1c:07:2b:ff:c6:
83:dc:fb:2d:f3:e7:8c:f2:b6:70:3a:21:73:79:20:
0e:4e:ba:3b:5c:9a:15:ab:73:c9:1c:ff:30:5b:97:
16:7c:e9:fa:81:9a:98:d4:da:e2:89:15:c9:58:fb:
0c:77:4f:83:94:5d:d9:b4:b4:83:d2:9e:e2:6f:ea:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:58:01:69:6D:42:CB:EB:23:CE:35:68:8A:21:B2:33:0A:81:F8:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/a6b705d2-4c11-3f7f-9976-3f8b85d37f15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl
X509v3 Authority Key Identifier:
keyid:81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa16::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:15:eb:5f:b6:92:ec:ce:bb:47:e5:e3:73:4f:32:e6:d9:d6:
e8:60:c5:db:af:15:7c:a4:1e:19:d8:8a:52:24:99:1e:cb:b5:
1e:73:68:8b:98:a8:82:49:51:33:73:fa:00:6b:57:dd:35:fa:
2f:fe:17:ff:e2:0e:f8:32:98:32:ea:cd:89:60:65:14:cd:ee:
08:57:39:e4:c5:ba:eb:04:6a:b9:a0:bb:7c:54:b1:85:e6:90:
f8:7e:5e:79:fa:5f:f8:e7:99:04:74:7e:0a:09:34:fb:04:7a:
18:a4:85:79:6d:65:d4:08:9f:0b:70:41:8a:4b:71:c7:0b:cb:
e3:5b:48:8e:83:8c:df:bd:ff:6e:f9:eb:85:58:f2:2b:29:bd:
80:54:8d:91:6f:1b:ae:4a:4f:84:c0:1f:c8:74:d0:9c:f8:67:
d1:87:98:c6:67:34:44:1b:0e:47:24:15:2d:16:6d:cf:30:b0:
bf:bb:72:5e:24:db:ad:ed:5b:1e:e2:b5:ae:f8:b0:fe:04:56:
ae:e3:bc:bb:07:c4:d7:cb:b9:14:78:47:3c:6a:45:e2:00:12:
2d:33:ce:ce:17:1d:01:06:32:fd:08:89:3c:2f:8a:d8:82:d3:
ef:5c:45:4e:bb:de:3c:c1:2c:6f:3c:96:dd:b1:ed:2d:7d:b7:
cf:e7:1f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:19 2025 by rpki-client