Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1fbe30c2-1680-3575-99e0-688d4595d902.roa
File: 1fbe30c2-1680-3575-99e0-688d4595d902.roa (raw, json)
Hash identifier: DykkJ7dnfxFgDyfDxPk7kb2hOCQrNEpIFrKcaEh2FnU=
Subject key identifier: 54:02:C2:07:8E:03:3A:E2:07:3B:17:AB:8A:49:35:4F:32:41:1A:BB
Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial: 010D0C9F432858483EB3D48270287752ABFE3300
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1fbe30c2-1680-3575-99e0-688d4595d902.roa
Signing time: Wed 18 Dec 2024 07:09:20 +0000
ROA not before: Wed 18 Dec 2024 07:09:20 +0000
ROA not after: Tue 18 Mar 2025 06:09:20 +0000
asID: 27385
IP address blocks: 2602:fdaa::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:b3:d4:82:70:28:77:52:ab:fe:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Validity
Not Before: Dec 18 07:09:20 2024 GMT
Not After : Mar 18 06:09:20 2025 GMT
Subject: CN=895258b9-abcc-42ed-9c17-38e80ef5c68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:a8:8a:a0:5a:9c:2d:ab:2c:13:91:b7:c3:
e5:f8:6f:11:fb:cd:dc:07:40:89:74:a7:73:f2:8d:
c6:86:b3:c6:6a:c1:af:79:ce:39:52:4f:54:33:d9:
92:2a:27:77:14:ef:a8:07:d2:44:d8:aa:58:e2:10:
a7:a1:02:6e:97:62:5e:f1:23:69:d8:27:6d:79:79:
98:c1:66:36:a4:3c:ba:78:37:4f:58:aa:b9:07:ca:
10:da:09:69:e8:e9:98:9d:de:20:7a:ae:64:6c:3b:
04:45:94:e9:a1:93:51:23:8f:c8:a8:c5:e7:d3:87:
76:d6:98:24:ed:5f:36:01:8e:47:77:4c:4b:2c:3f:
53:7f:0d:4b:c7:6b:c1:db:36:5c:2c:2b:f5:d5:c2:
fa:e2:37:43:5b:64:96:7b:17:ac:55:9c:14:9b:0e:
03:2f:6f:97:93:b3:d3:0b:19:af:22:0d:64:ca:09:
97:8f:97:97:68:bd:c7:db:93:0a:42:3a:4e:1b:d2:
3d:e2:b8:e1:15:56:ab:5d:aa:24:87:56:a6:93:41:
b7:c3:87:f8:27:59:82:f7:bd:db:ce:1b:7a:97:2d:
0b:ed:bd:19:b5:3d:92:52:ef:ad:cc:cb:7f:34:40:
94:6d:ca:45:74:d3:4f:b6:17:bd:0a:82:d6:4a:72:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:02:C2:07:8E:03:3A:E2:07:3B:17:AB:8A:49:35:4F:32:41:1A:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1fbe30c2-1680-3575-99e0-688d4595d902.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
X509v3 Authority Key Identifier:
keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fdaa::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:6b:bd:c3:46:ec:4b:a6:4d:9a:5b:44:8e:b1:67:33:7f:e4:
b5:cf:7f:c2:03:28:7d:1e:b7:cc:4e:24:e1:9c:01:fe:0e:da:
74:35:9a:b9:af:54:6c:eb:7d:61:bc:bf:ae:a6:4a:33:96:80:
95:b5:4e:69:0e:ab:c1:f7:7b:20:33:4b:e0:01:2d:c8:2f:d6:
8d:26:02:a3:2a:60:72:c4:a1:c8:48:13:fd:ad:e2:4a:7f:97:
63:1d:10:5a:71:16:d7:4a:78:ce:ea:94:a4:85:77:58:1a:de:
54:1d:94:1b:5a:ec:88:34:d9:35:ff:e4:21:ec:a4:a7:0f:d9:
68:1f:90:86:c2:d2:75:2c:1f:07:05:c5:7a:e6:87:68:de:33:
35:45:da:19:3c:cc:02:a5:71:39:92:0b:19:7b:f4:04:ee:a0:
b4:eb:73:41:71:c8:b9:c4:85:61:f8:63:a1:70:95:98:76:8d:
35:f9:34:29:06:fe:3c:73:6f:63:bb:7a:ca:74:00:58:18:63:
20:5c:02:91:a0:cb:3b:f9:2c:ab:ad:32:10:89:cd:be:01:32:
cb:c1:6b:0a:1a:cf:5b:02:aa:a1:93:77:c5:b3:13:70:c0:c1:
3d:9d:3c:8a:8c:1d:95:9d:29:01:8c:a7:27:65:bf:e6:e0:f4:
bf:47:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:09 2025 by rpki-client