Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa4ea28-0ca8-3d40-b5e1-0f7877cdca34.roa
File: cfa4ea28-0ca8-3d40-b5e1-0f7877cdca34.roa (raw, json)
Hash identifier: 3PdyqDFCr/j3A3CLTk+TmSnn4jDEAUnG1mgNNqh9nVQ=
Subject key identifier: B7:9B:3B:DC:44:15:DD:EC:7B:0F:61:68:AE:0A:0C:BD:01:3E:19:F4
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F43285842B064C49A7AE78F1A41B17E80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa4ea28-0ca8-3d40-b5e1-0f7877cdca34.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 15169
IP address blocks: 2620:120:e000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:64:c4:9a:7a:e7:8f:1a:41:b1:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=242d9a91-4f12-41fe-9b7a-be8cd35376d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:04:c1:b6:65:e6:5b:78:d1:24:11:69:07:
7d:c5:8c:29:e1:ad:19:ed:f0:93:e9:b1:0f:b3:31:
f5:7e:92:20:7b:a6:5c:80:82:93:e8:8a:c3:07:11:
65:f8:e1:e8:d3:5e:64:91:f0:28:52:0f:c1:9f:61:
fd:80:89:19:60:bc:28:50:03:3d:82:a1:81:5b:9f:
8c:01:a0:db:c8:b6:30:2c:95:47:8d:a3:b8:39:78:
ab:07:a6:36:be:f4:64:06:fa:82:86:8c:80:3d:4c:
06:97:b8:60:65:52:29:c9:c2:79:77:ee:72:c3:91:
01:41:80:29:a1:ae:40:d0:07:1a:ac:65:b6:5e:1f:
c8:7c:76:4f:0d:77:76:73:72:ec:6a:ff:90:6d:3c:
c8:f6:e5:07:82:c0:94:e4:ca:71:70:f7:bd:dc:c2:
bc:12:f5:95:0b:05:45:b3:0a:a2:4a:e1:2a:38:68:
ae:c0:a8:a5:f9:02:9e:0b:8b:aa:71:01:a1:89:a1:
1a:54:9d:67:19:a5:3c:80:4c:50:b1:58:98:74:b6:
d1:bc:04:7b:59:a4:b7:19:a6:b2:99:b5:4a:60:3e:
cd:3c:71:69:94:ff:ec:9b:6c:cb:39:14:b1:32:be:
bb:be:7a:86:c4:4c:1b:a0:84:45:4e:e1:66:16:55:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9B:3B:DC:44:15:DD:EC:7B:0F:61:68:AE:0A:0C:BD:01:3E:19:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa4ea28-0ca8-3d40-b5e1-0f7877cdca34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:120:e000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:cb:7a:71:80:14:59:e1:b3:45:a2:70:e8:7e:81:dd:9e:e2:
de:31:af:b2:44:2b:31:7f:f4:53:d7:60:13:4f:8e:84:0d:f0:
0c:d8:0a:66:36:77:4e:82:81:bb:b8:5e:42:f0:d6:be:98:81:
4c:31:c5:e3:28:1f:86:ba:01:57:73:1b:cc:72:b9:99:a1:4c:
9c:c6:a2:bc:e9:2b:a9:2a:b6:c6:98:38:4e:9b:e8:6b:33:eb:
68:a2:94:b2:6f:d9:2f:2d:c5:0a:e7:16:92:c9:81:5c:79:c7:
ab:e4:21:c7:83:f3:4e:2c:12:a4:2c:46:a7:be:7d:61:ee:ae:
91:06:9f:21:da:79:10:d5:a3:75:3c:ea:5a:ef:88:0a:41:8c:
28:5d:d9:cc:1e:c3:3b:71:3e:92:b2:78:f7:46:ae:d0:89:ed:
99:e0:17:c4:3d:a5:2b:1d:f1:0e:2b:50:f9:12:20:79:39:0e:
64:49:64:4d:c6:6c:9c:92:23:6e:07:cb:38:dd:2c:7e:cd:09:
89:04:32:bb:7a:4a:8e:f8:01:23:17:a6:6d:6c:1e:01:7a:f0:
18:67:31:c3:3a:f8:1d:8e:5f:db:a7:04:cb:f5:86:98:8c:1a:
e7:19:c9:3d:73:f1:bd:8d:01:21:a4:d4:f2:09:87:97:7e:c8:
7b:17:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:42:57 2025 by rpki-client