Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/0ee23949-1ffd-38c4-ba63-8ee5b106a708.roa
File: 0ee23949-1ffd-38c4-ba63-8ee5b106a708.roa (raw, json)
Hash identifier: pzDSp6y2rZqI2pnDrKw7pXV274AcKFHxh/fox0X+rW4=
Subject key identifier: 6B:E4:A0:22:6B:39:C9:DD:7E:59:B6:BF:D7:ED:FE:4D:DE:3A:A4:8A
Certificate issuer: /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial: 010D0C9F432858480214EE396A78C6C637FCDD80
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/0ee23949-1ffd-38c4-ba63-8ee5b106a708.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 47869
IP address blocks: 2604:7c00:500::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:ee:39:6a:78:c6:c6:37:fc:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=824096f6-45c2-4c97-9da0-a216f7c54083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:29:47:e5:07:25:88:3f:02:b9:cc:0b:04:
8f:50:a4:19:ba:16:cf:8a:4c:75:70:11:32:12:a6:
0b:03:55:0f:d4:0e:a0:ff:53:c5:13:4b:a2:ac:4a:
0f:ee:f8:e7:bb:16:09:60:73:0d:ec:18:90:04:46:
a8:a2:17:7c:af:73:f0:53:b1:3c:8b:c4:87:05:37:
2e:c3:f2:31:e4:bd:c4:1f:3d:fb:04:9f:51:61:9c:
b8:a5:f5:0a:7e:b4:47:15:76:e0:91:86:1a:d8:5b:
4c:cd:a0:aa:69:84:70:5c:b2:e0:ec:21:23:16:0b:
81:ed:a9:40:e9:77:3e:f7:11:39:02:ac:d8:4c:49:
f2:12:58:77:30:32:dc:cc:4a:16:96:cd:fc:0e:0b:
57:a5:1c:45:54:d2:94:35:13:3b:4b:79:70:ca:8d:
33:af:61:39:d5:22:2a:61:da:45:88:49:c8:f3:b9:
4f:5a:23:5e:df:2f:02:26:18:9c:fe:0a:97:ee:16:
df:5d:c9:73:d1:a3:95:be:c5:7d:21:93:61:12:09:
07:e2:25:e0:fb:8a:a0:3a:c9:dc:24:c3:87:ff:da:
4b:b0:cf:85:5e:d7:43:99:83:df:0a:da:2f:9c:e1:
b6:cf:c3:2d:cc:af:e9:33:31:dd:a2:b1:87:e0:bb:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E4:A0:22:6B:39:C9:DD:7E:59:B6:BF:D7:ED:FE:4D:DE:3A:A4:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/0ee23949-1ffd-38c4-ba63-8ee5b106a708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl
X509v3 Authority Key Identifier:
keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:7c00:500::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:06:57:06:d5:25:96:a5:d7:dd:43:f2:5e:b2:b6:56:cd:90:
50:57:0c:1e:07:4b:e9:3a:ae:53:89:58:5c:6d:6c:a5:6a:95:
67:c7:7a:a9:5f:fb:67:ed:4e:74:02:21:41:18:25:83:de:04:
7b:63:72:2b:c9:3d:75:bc:a3:a5:16:9f:18:ce:5f:40:1c:c9:
5d:d3:2f:4b:aa:68:1a:56:c7:91:85:8e:ed:d5:e1:59:04:4e:
44:18:c0:ec:62:8b:4d:2d:ac:c5:82:42:e8:0c:e8:b5:f7:f6:
02:0d:93:8a:78:68:72:59:73:7c:92:0e:ef:84:0f:6d:15:e8:
93:26:1f:d6:3f:ae:f4:21:64:2e:d8:d5:ee:b8:5f:8e:27:c9:
95:5f:1e:ed:53:bc:00:a7:b0:0c:77:b6:28:ee:59:bd:d8:bf:
10:3c:f2:50:6c:9e:75:ac:00:f5:e4:bf:e7:42:e8:1e:aa:ed:
fb:fd:ec:89:1a:0f:62:94:50:2e:c5:ab:2c:57:e3:7f:30:b4:
32:69:67:bb:4a:15:19:f1:c7:00:01:db:c7:5d:0b:d2:3c:45:
f4:75:ab:d7:11:ca:35:26:3f:36:e3:4b:9f:9c:7c:05:1e:c8:
c8:e8:5e:e1:d8:5d:fd:13:37:0b:6f:9b:a1:f4:55:72:cb:af:
e9:fc:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:26:27 2025 by rpki-client