Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/5f784761-4495-37e7-91fb-bb824b4091e1.roa
File: 5f784761-4495-37e7-91fb-bb824b4091e1.roa (raw, json)
Hash identifier: Jf2XqwYcJJie5d/w7sqQcShDyAPQI3wmUSYW4x9f728=
Subject key identifier: CD:2B:B2:D5:5C:9B:B2:C3:F8:69:54:86:5B:9F:DF:36:B1:27:80:A7
Certificate issuer: /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial: 010D0C9F43285847A9A5036D41D6EE749DBA3000
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/5f784761-4495-37e7-91fb-bb824b4091e1.roa
Signing time: Fri 25 Oct 2024 21:44:03 +0000
ROA not before: Fri 25 Oct 2024 21:44:03 +0000
ROA not after: Thu 23 Jan 2025 22:44:03 +0000
asID: 897
IP address blocks: 2620:ab:a004::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a9:a5:03:6d:41:d6:ee:74:9d:ba:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Validity
Not Before: Oct 25 21:44:03 2024 GMT
Not After : Jan 23 22:44:03 2025 GMT
Subject: CN=7d8ada55-8ce8-4032-977e-21df2e14fc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:93:f4:9e:e9:2a:45:72:4f:bc:6e:86:ec:
a8:3e:29:1f:13:27:97:02:df:4b:e3:77:c0:fb:08:
e9:a1:44:87:db:c7:cd:b9:77:1f:60:02:39:2a:81:
06:e2:f9:b2:72:7e:55:f2:a8:01:ec:fb:85:04:b7:
8c:d6:14:3a:37:9a:98:d5:0c:6d:20:9e:e7:eb:27:
13:ad:c1:45:5b:6d:b0:39:39:65:65:7c:58:28:bf:
3a:67:49:14:78:ae:76:bf:2f:c8:95:01:81:a7:70:
da:95:53:af:0d:90:3d:5d:87:b4:77:27:48:ef:9f:
c4:b0:2f:cd:b0:e7:0b:6d:83:b9:e7:77:58:66:c9:
7b:17:ef:f5:d6:ef:92:77:24:18:ce:fa:c5:33:59:
aa:8c:33:35:bd:a0:96:4c:9a:54:fc:6e:a8:9e:ec:
72:0c:e1:5d:95:ca:4a:a5:5b:bf:b7:eb:62:0a:69:
16:58:ed:7c:98:76:e4:7f:00:a9:70:03:20:82:4b:
b2:45:89:fc:33:ae:0f:4d:2a:04:37:1d:8d:e7:fe:
1b:da:53:ef:12:8d:6c:fd:b9:8d:38:9d:8a:dd:09:
08:cc:7e:ec:15:89:20:58:28:36:a0:63:68:7c:f1:
b8:03:14:2c:af:9d:66:11:0f:4f:8f:21:df:ed:84:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2B:B2:D5:5C:9B:B2:C3:F8:69:54:86:5B:9F:DF:36:B1:27:80:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/5f784761-4495-37e7-91fb-bb824b4091e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
X509v3 Authority Key Identifier:
keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:ab:a004::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:56:f7:60:78:ef:4b:df:e7:7a:07:09:c0:08:e2:37:1d:44:
c7:a5:8e:9f:7b:e8:6b:68:d2:81:28:39:99:00:5f:13:78:83:
a3:25:6c:8d:3d:06:d8:b1:16:4a:51:5b:2f:36:29:a7:9d:e7:
fd:7b:d9:3f:f6:aa:a5:4a:6f:4c:82:76:c6:54:12:a7:c0:73:
b3:ae:12:4f:2d:fc:6f:8c:fa:a6:7b:e0:94:70:b8:c8:97:77:
01:fa:99:47:62:72:68:b6:ed:bd:db:a0:9e:57:6d:bb:13:88:
1d:41:37:62:89:53:ce:96:7f:f2:f3:94:47:ad:f6:df:c8:6b:
20:c4:18:81:21:14:b6:64:76:f0:6f:23:a4:b6:2f:87:c7:57:
b3:12:d5:8c:37:0b:ae:10:e6:2a:ad:9e:73:a5:50:82:04:85:
6a:32:37:48:e7:03:6a:c9:7a:cc:a1:99:c2:79:74:e9:8d:6e:
a6:4c:7d:a6:eb:f8:56:c3:90:06:5a:2b:2e:6e:be:d9:5a:e6:
37:81:7e:17:c0:9b:34:10:aa:15:8c:58:ff:f7:57:45:34:df:
f1:a0:c6:6b:30:28:62:12:ab:d2:e1:36:0e:cd:00:fa:84:70:
9f:05:35:10:3b:15:d1:56:93:3b:65:dc:ad:0f:c2:c1:4f:5f:
40:df:f8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:39 2025 by rpki-client