Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c7ae35d7-f04a-325c-a7a4-73eb93410906.roa
File: c7ae35d7-f04a-325c-a7a4-73eb93410906.roa (raw, json)
Hash identifier: VPFmaUK1LqpA29Sx3miJAnVrjTvufcYlCu8YsZqc5BA=
Subject key identifier: 52:D1:EB:4B:31:EC:ED:13:AE:F2:23:86:34:57:A2:70:D7:07:F7:53
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285842B065A66B961236D0762D7E80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c7ae35d7-f04a-325c-a7a4-73eb93410906.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 36040
IP address blocks: 2620:11a:a000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:65:a6:6b:96:12:36:d0:76:2d:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=dd68487f-363a-4f88-97e1-dfc667c86e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:4f:d5:00:bc:93:94:3d:8c:86:61:7e:4f:
3a:48:04:7f:f8:ae:04:24:92:bf:be:42:e2:88:7b:
b4:5f:0a:b6:07:56:63:25:bc:f9:19:5b:37:69:e2:
71:b8:bc:0f:73:70:08:99:5e:ab:ba:46:79:c1:16:
33:bb:90:bc:0a:4c:dd:e2:1e:b6:90:c4:73:70:e8:
3f:28:8b:fb:85:7b:87:08:cb:7d:0c:c6:6a:60:e6:
d3:d5:15:c5:6d:80:ca:44:d7:2c:71:ed:26:36:57:
30:26:53:b0:e9:04:e4:5b:38:34:ac:9c:7b:67:63:
cb:fd:32:6e:08:3b:ae:8d:86:69:9d:aa:4a:f1:5f:
70:33:3e:e6:8f:9a:a9:bc:b8:7c:89:cb:22:b5:f8:
fb:b7:89:7f:b5:2f:06:00:78:53:3b:76:11:e1:4d:
9c:5a:36:ec:ec:38:e7:1c:13:28:e6:7c:75:d0:74:
db:90:a8:ea:58:78:61:19:cd:d0:d4:cc:27:92:82:
b8:d7:81:d2:3b:8d:86:8c:e5:9d:3f:bd:c6:9c:45:
ae:ef:ec:57:9e:e2:4f:71:90:45:c0:17:fd:5e:f6:
42:2c:fb:25:85:cf:f4:cd:ef:2c:07:84:f3:c8:7f:
e9:00:ac:49:b0:6a:0b:82:2f:e7:f4:3a:98:d8:cc:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D1:EB:4B:31:EC:ED:13:AE:F2:23:86:34:57:A2:70:D7:07:F7:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c7ae35d7-f04a-325c-a7a4-73eb93410906.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11a:a000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:87:3f:f6:e5:18:12:d2:a3:3b:8a:2f:7e:a5:f3:40:24:fe:
7b:98:15:52:85:94:67:25:0b:5f:d7:a5:78:f1:fd:f7:f7:24:
fc:ea:0c:9a:e3:86:37:b2:f6:77:51:18:78:e7:83:78:d1:05:
4f:d5:33:b1:07:52:7a:4e:82:9b:e3:c8:4c:a5:a9:30:b3:48:
5b:ff:c7:07:fc:45:d6:c9:3c:03:d2:dc:66:a4:2f:28:ce:37:
40:e8:5f:e0:e9:4b:92:e3:4a:15:07:eb:38:ea:be:05:e2:b2:
46:af:c0:8a:fc:e4:bd:fa:d7:26:12:74:aa:38:01:e3:0f:51:
25:2f:f1:64:c8:84:92:17:af:ca:8c:e5:7f:bc:7e:5d:c0:30:
88:7b:8a:1e:6e:e4:c7:e7:f0:be:3f:18:29:77:54:f1:4c:67:
cc:5e:9e:74:c2:b8:00:a1:19:7d:ac:0b:22:43:59:84:a3:3e:
b1:05:1e:ba:61:45:c3:28:2a:77:ca:fe:d4:51:40:fb:33:06:
09:b1:23:b2:0f:d3:51:05:83:54:29:c4:e6:5b:b4:ef:1c:cd:
db:a9:80:c5:bc:7f:43:33:00:f7:3d:29:9e:2b:6b:0e:91:19:
b1:6b:e4:21:1b:ca:da:54:b1:04:43:1f:21:90:bc:b9:73:9e:
6d:e5:db:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:41 2025 by rpki-client